last executing test programs: 15.533016774s ago: executing program 1 (id=935): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) execve(0x0, 0x0, 0x0) 15.474459505s ago: executing program 1 (id=938): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x7}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 15.396963136s ago: executing program 1 (id=943): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@loopback, @dev, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz_tun\x00', 'vlan0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}, {{@uncond, 0xc0, 0x108, 0x0, {0x0, 0x1e03}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 15.338296307s ago: executing program 1 (id=947): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1010d1, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) 15.320822197s ago: executing program 1 (id=948): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000050) 15.002537582s ago: executing program 1 (id=956): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000020000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_open_procfs(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 15.002354113s ago: executing program 32 (id=956): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000020000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_open_procfs(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1.389408688s ago: executing program 2 (id=1372): prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='kfree\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.161577161s ago: executing program 2 (id=1379): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x800458, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x0) 1.066116053s ago: executing program 0 (id=1383): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff5295e8cd6f55ce071b304aa0a588b3b7a2efa2f167dd9c1b8b016268d37d9a30983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402c76caf85d4569a75dde2f64", 0x200) sendfile(r1, r2, 0x0, 0xe065) 993.698504ms ago: executing program 0 (id=1385): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 958.020194ms ago: executing program 0 (id=1386): r0 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007"], 0x0, 0x800000f, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000040)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x10}], 0x1) 922.103775ms ago: executing program 0 (id=1390): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x20000080) 488.192372ms ago: executing program 4 (id=1400): syz_read_part_table(0x60d, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x147842, 0xbba8135637191132) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[], 0x5b0) close(r0) 459.073072ms ago: executing program 5 (id=1401): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) close(0x3) 416.728163ms ago: executing program 4 (id=1403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r4], 0x20}}, 0x0) 405.827853ms ago: executing program 5 (id=1405): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) connect$inet6(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) 383.274853ms ago: executing program 5 (id=1406): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200) 366.290414ms ago: executing program 4 (id=1407): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 356.183044ms ago: executing program 5 (id=1408): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 351.922744ms ago: executing program 4 (id=1409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 350.931014ms ago: executing program 2 (id=1410): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 326.358474ms ago: executing program 5 (id=1411): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}}], 0x2, 0x40000) write$tun(r0, &(0x7f0000001980)=ANY=[], 0x3) shutdown(r0, 0x1) 311.930485ms ago: executing program 3 (id=1412): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 284.183105ms ago: executing program 2 (id=1413): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x1ffffdf3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) close(r0) 246.913396ms ago: executing program 2 (id=1414): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a00"], 0x44}}, 0x0) 204.568366ms ago: executing program 5 (id=1415): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 204.445836ms ago: executing program 4 (id=1416): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x3e, &(0x7f0000004e00)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0xff, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast2, {[], @echo_reply}}}}}, 0x0) 173.677657ms ago: executing program 3 (id=1417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000a40)='./bus\x00', 0x108) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 150.593507ms ago: executing program 3 (id=1418): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f00000000c0)=""/55, 0x37) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 122.841047ms ago: executing program 3 (id=1419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000c00)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x1, 0xffff}, {}, {0xb, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x40}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x408c014) 113.394128ms ago: executing program 2 (id=1420): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 61.159428ms ago: executing program 3 (id=1421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r3, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}, 0xa96}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=""/88, 0x58}, 0x10}], 0x2, 0x2002, 0x0) 60.376508ms ago: executing program 0 (id=1422): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 28.208369ms ago: executing program 4 (id=1423): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 25.383799ms ago: executing program 0 (id=1424): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000001280), 0x6) 0s ago: executing program 3 (id=1425): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) recvmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}, 0x20000100) shutdown(r1, 0x0) kernel console output (not intermixed with test programs): 3477] smc: net device bond0 erased user defined pnetid SYZ0 [ 31.586855][ T3484] process 'syz.2.18' launched './file0' with NULL argv: empty string added [ 31.599084][ T29] audit: type=1400 audit(1744507022.363:158): avc: denied { execute_no_trans } for pid=3483 comm="syz.2.18" path="/9/file0" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 31.654636][ T29] audit: type=1400 audit(1744507022.413:159): avc: denied { create } for pid=3488 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.684323][ T29] audit: type=1400 audit(1744507022.413:160): avc: denied { connect } for pid=3488 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.711553][ T3493] loop0: detected capacity change from 0 to 128 [ 31.727430][ T3493] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 31.767576][ T3493] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 31.826175][ T3503] Zero length message leads to an empty skb [ 31.866550][ T31] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.147145][ T3526] syz.4.35 (3526) used greatest stack depth: 10792 bytes left [ 32.186710][ T3535] loop1: detected capacity change from 0 to 512 [ 32.197855][ T3537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.41'. [ 32.206785][ T3537] netlink: 108 bytes leftover after parsing attributes in process `syz.4.41'. [ 32.223527][ T3535] EXT4-fs: Mount option(s) incompatible with ext2 [ 32.235578][ T3537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.41'. [ 32.252490][ T3537] netlink: 108 bytes leftover after parsing attributes in process `syz.4.41'. [ 32.261439][ T3537] netlink: 84 bytes leftover after parsing attributes in process `syz.4.41'. [ 32.341238][ T3541] loop2: detected capacity change from 0 to 164 [ 32.355891][ T3541] ======================================================= [ 32.355891][ T3541] WARNING: The mand mount option has been deprecated and [ 32.355891][ T3541] and is ignored by this kernel. Remove the mand [ 32.355891][ T3541] option from the mount to silence this warning. [ 32.355891][ T3541] ======================================================= [ 32.409053][ T3541] Unable to read rock-ridge attributes [ 32.426703][ T3541] Unable to read rock-ridge attributes [ 32.432853][ T3541] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 32.442168][ T3541] syz.2.44: attempt to access beyond end of device [ 32.442168][ T3541] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 32.549884][ T3554] loop2: detected capacity change from 0 to 1024 [ 32.568234][ T3554] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 32.579432][ T3554] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 32.607688][ T3554] JBD2: no valid journal superblock found [ 32.613564][ T3554] EXT4-fs (loop2): Could not load journal inode [ 32.629045][ T3560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 32.656449][ T3554] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 32.673612][ T3560] hsr_slave_0: left promiscuous mode [ 32.681943][ T3560] hsr_slave_1: left promiscuous mode [ 32.848208][ T3588] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.871514][ T3590] bond1: entered promiscuous mode [ 32.876604][ T3590] bond1: entered allmulticast mode [ 32.891690][ T3590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 32.902895][ T3590] bond1 (unregistering): Released all slaves [ 33.114856][ T3612] loop4: detected capacity change from 0 to 2048 [ 33.182366][ T3612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.200061][ T3612] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.230106][ T3631] syz.3.77 uses obsolete (PF_INET,SOCK_PACKET) [ 33.288083][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.430777][ T3645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.84'. [ 33.515968][ T3635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'. [ 33.615471][ T3657] loop4: detected capacity change from 0 to 4096 [ 33.629742][ T3659] loop0: detected capacity change from 0 to 256 [ 33.643774][ T3657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.674278][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.795612][ T3656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.809791][ T3656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.902274][ T3672] bond1: entered promiscuous mode [ 33.907343][ T3672] bond1: entered allmulticast mode [ 33.928483][ T3672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 33.948062][ T3672] bond1 (unregistering): Released all slaves [ 34.059494][ T3692] Illegal XDP return value 3975188087 on prog (id 83) dev syz_tun, expect packet loss! [ 34.104036][ T3699] syz_tun: entered promiscuous mode [ 34.110398][ T3699] batadv_slave_0: entered promiscuous mode [ 34.116506][ T3699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.124388][ T3699] Cannot create hsr debugfs directory [ 34.131571][ T3699] hsr0: entered allmulticast mode [ 34.136637][ T3699] syz_tun: entered allmulticast mode [ 34.142032][ T3699] batadv_slave_0: entered allmulticast mode [ 34.283062][ C1] hrtimer: interrupt took 36520 ns [ 34.395698][ T3721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 34.405902][ T3721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 34.830255][ T3766] loop2: detected capacity change from 0 to 512 [ 34.837268][ T3766] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 34.845947][ T3766] EXT4-fs (loop2): invalid journal inode [ 34.852736][ T3766] EXT4-fs (loop2): can't get journal size [ 34.859257][ T3766] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 34.867264][ T3766] System zones: 1-12, 13-13 [ 34.872693][ T3766] EXT4-fs (loop2): 1 truncate cleaned up [ 34.880994][ T3766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.976074][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.002107][ T3780] syz.0.145 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 35.051878][ T3786] loop2: detected capacity change from 0 to 256 [ 35.742632][ T3850] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 35.753837][ T3849] IPVS: stopping master sync thread 3850 ... [ 35.837968][ T3861] netlink: 'syz.2.183': attribute type 7 has an invalid length. [ 35.889044][ T3865] loop2: detected capacity change from 0 to 256 [ 35.912962][ T3867] loop4: detected capacity change from 0 to 128 [ 35.984252][ T3872] netem: change failed [ 36.012289][ T3875] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 36.019942][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 36.019955][ T29] audit: type=1400 audit(1744507026.783:365): avc: denied { mount } for pid=3873 comm="syz.4.188" name="/" dev="configfs" ino=1875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 36.069925][ T3878] geneve0: entered allmulticast mode [ 36.076791][ T3880] loop4: detected capacity change from 0 to 256 [ 36.077106][ T29] audit: type=1400 audit(1744507026.813:366): avc: denied { search } for pid=3873 comm="syz.4.188" name="/" dev="configfs" ino=1875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 36.105812][ T29] audit: type=1400 audit(1744507026.813:367): avc: denied { read } for pid=3873 comm="syz.4.188" name="/" dev="configfs" ino=1875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 36.128105][ T29] audit: type=1400 audit(1744507026.813:368): avc: denied { open } for pid=3873 comm="syz.4.188" path="/" dev="configfs" ino=1875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 36.211408][ T29] audit: type=1400 audit(1744507026.963:369): avc: denied { append } for pid=3889 comm="syz.4.196" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 36.229565][ T3882] bridge0: entered promiscuous mode [ 36.255738][ T3882] macvlan2: entered promiscuous mode [ 36.265007][ T3882] bridge0: port 3(macvlan2) entered blocking state [ 36.271677][ T3882] bridge0: port 3(macvlan2) entered disabled state [ 36.279670][ T3882] macvlan2: entered allmulticast mode [ 36.285106][ T3882] bridge0: entered allmulticast mode [ 36.298797][ T3882] macvlan2: left allmulticast mode [ 36.304123][ T3882] bridge0: left allmulticast mode [ 36.306843][ T29] audit: type=1326 audit(1744507027.063:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92f57d169 code=0x7ffc0000 [ 36.319356][ T3882] bridge0: left promiscuous mode [ 36.332610][ T29] audit: type=1326 audit(1744507027.063:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92f57d169 code=0x7ffc0000 [ 36.368588][ T29] audit: type=1326 audit(1744507027.123:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe92f57d169 code=0x7ffc0000 [ 36.391940][ T29] audit: type=1326 audit(1744507027.123:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92f57d169 code=0x7ffc0000 [ 36.415334][ T29] audit: type=1326 audit(1744507027.123:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92f57d169 code=0x7ffc0000 [ 36.439529][ T3892] smc: net device bond0 applied user defined pnetid SYZ0 [ 36.447037][ T3901] syz_tun: refused to change device tx_queue_len [ 36.455213][ T3897] smc: net device bond0 erased user defined pnetid SYZ0 [ 36.543621][ T3906] loop1: detected capacity change from 0 to 512 [ 36.557220][ T3909] netlink: 'syz.3.203': attribute type 4 has an invalid length. [ 36.583018][ T3909] : renamed from bond0 (while UP) [ 36.590371][ T3906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 36.603029][ T3915] netlink: 'syz.0.205': attribute type 12 has an invalid length. [ 36.611220][ T3906] ext4 filesystem being mounted at /31/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.732845][ T3920] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 36.744948][ T3920] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 36.766990][ T3906] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.202: Failed to acquire dquot type 1 [ 36.794687][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 36.881285][ T3937] macvtap0: entered promiscuous mode [ 36.898456][ T3937] macvtap0: left promiscuous mode [ 36.958249][ T3943] loop3: detected capacity change from 0 to 512 [ 36.979803][ T3943] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.992997][ T3943] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.012720][ T3943] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.034249][ T3943] EXT4-fs (loop3): 1 truncate cleaned up [ 37.044789][ T3943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.094617][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.208116][ T3974] syz.2.232: attempt to access beyond end of device [ 37.208116][ T3974] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 37.221227][ T3974] FAT-fs (loop5): unable to read boot sector [ 37.459418][ T3992] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(áá [ 37.467360][ C0] vcan0: j1939_tp_rxtimer: 0xffff888118eb3200: rx timeout, send abort [ 37.475643][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888118eb3200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 37.720419][ T4015] __nla_validate_parse: 6 callbacks suppressed [ 37.720432][ T4015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 37.977014][ T4027] loop3: detected capacity change from 0 to 2048 [ 37.983799][ T4027] ext4: Unknown parameter 'noacl' [ 38.047102][ T4031] loop3: detected capacity change from 0 to 512 [ 38.072826][ T4031] EXT4-fs (loop3): 1 orphan inode deleted [ 38.080268][ T4031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.094181][ T4031] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.104738][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 38.157256][ T4042] SELinux: policydb version 0 does not match my version range 15-34 [ 38.158007][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.165907][ T4042] SELinux: failed to load policy [ 38.181997][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 38.344962][ T4052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 38.354147][ T4052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 38.365729][ T4054] netlink: 532 bytes leftover after parsing attributes in process `syz.3.268'. [ 38.392538][ T4057] loop1: detected capacity change from 0 to 512 [ 38.399798][ T4057] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.411091][ T4057] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #17: comm syz.1.269: inline data xattr refers to an external xattr inode [ 38.419045][ T3302] syz-executor (3302) used greatest stack depth: 10760 bytes left [ 38.438812][ T4057] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.269: couldn't read orphan inode 17 (err -117) [ 38.464412][ T4057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.512213][ T4063] 9pnet: p9_errstr2errno: server reported unknown error @þLì²¼ O€!ÝëL›:(Ž^[[Z@ [ 38.570489][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.617806][ T4078] netlink: 'syz.2.275': attribute type 21 has an invalid length. [ 38.697929][ T4064] chnl_net:caif_netlink_parms(): no params data found [ 38.740173][ C0] vcan0: j1939_tp_rxtimer: 0xffff888118eb2800: rx timeout, send abort [ 38.748467][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888118eb2800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 38.792534][ T4064] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.799895][ T4064] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.870880][ T4064] bridge_slave_0: entered allmulticast mode [ 38.877158][ T4098] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.877417][ T4064] bridge_slave_0: entered promiscuous mode [ 38.895903][ T4064] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.903047][ T4064] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.910396][ T4064] bridge_slave_1: entered allmulticast mode [ 38.916893][ T4064] bridge_slave_1: entered promiscuous mode [ 38.924866][ T4098] No such timeout policy "syz0" [ 38.967370][ T4064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.986264][ T4064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.021371][ T4064] team0: Port device team_slave_0 added [ 39.034644][ T4064] team0: Port device team_slave_1 added [ 39.048518][ T4116] atomic_op ffff888118807928 conn xmit_atomic 0000000000000000 [ 39.063960][ T4064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.071081][ T4064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.097054][ T4064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.133459][ T4064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.140463][ T4064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.166496][ T4064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.188084][ T4123] loop3: detected capacity change from 0 to 512 [ 39.202575][ T4123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.220757][ T4123] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.233866][ T4064] hsr_slave_0: entered promiscuous mode [ 39.254026][ T4064] hsr_slave_1: entered promiscuous mode [ 39.271226][ T4131] loop2: detected capacity change from 0 to 2048 [ 39.272223][ T4064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.281184][ T4135] loop4: detected capacity change from 0 to 512 [ 39.285552][ T4064] Cannot create hsr debugfs directory [ 39.329051][ T4131] loop2: p1 < > p3 [ 39.335635][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.346165][ T4135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 39.352007][ T4131] loop2: p3 size 134217728 extends beyond EOD, truncated [ 39.375238][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.427984][ T4064] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.494558][ T4064] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.524431][ T4156] loop3: detected capacity change from 0 to 512 [ 39.547056][ T4156] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.559643][ T4064] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.615256][ T4156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.632711][ T4064] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.649053][ T4156] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.660567][ T4169] loop2: detected capacity change from 0 to 512 [ 39.671255][ T4169] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 39.711140][ T4169] EXT4-fs (loop2): mount failed [ 39.726708][ T4064] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.753198][ T4064] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.785015][ T4176] loop4: detected capacity change from 0 to 256 [ 39.791677][ T4064] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.802021][ T4176] FAT-fs (loop4): bogus number of FAT sectors [ 39.808210][ T4176] FAT-fs (loop4): Can't find a valid FAT filesystem [ 39.818341][ T4064] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.865765][ T4156] syz.3.308 (4156) used greatest stack depth: 10720 bytes left [ 39.918613][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.931545][ T4064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.965114][ T4064] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.990951][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.998113][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.012247][ T4183] loop1: detected capacity change from 0 to 8192 [ 40.031037][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.038276][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.120958][ T4064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.164587][ T4202] ªªªªªª: renamed from vlan0 (while UP) [ 40.244013][ T4064] veth0_vlan: entered promiscuous mode [ 40.255625][ T4064] veth1_vlan: entered promiscuous mode [ 40.283065][ T4064] veth0_macvtap: entered promiscuous mode [ 40.296982][ T4064] veth1_macvtap: entered promiscuous mode [ 40.312410][ T4064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.323226][ T4064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.333179][ T4064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.343631][ T4064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.353539][ T4064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.364041][ T4064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.373894][ T4064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.384403][ T4064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.394263][ T4064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.404794][ T4064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.415699][ T4064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.435489][ T4064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.445976][ T4064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.455821][ T4064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.466324][ T4064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.476294][ T4064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.486822][ T4064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.496688][ T4064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.507222][ T4064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.517159][ T4064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.527699][ T4064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.538977][ T4064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.551029][ T4064] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.559986][ T4064] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.568893][ T4064] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.577732][ T4064] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.641719][ T4225] loop2: detected capacity change from 0 to 512 [ 40.651249][ T4225] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.666198][ T4225] EXT4-fs (loop2): 1 truncate cleaned up [ 40.673880][ T4225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.712733][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.835239][ T4254] SELinux: ebitmap: truncated map [ 40.841269][ T4254] SELinux: failed to load policy [ 40.877969][ T4263] tipc: Started in network mode [ 40.883035][ T4263] tipc: Node identity ac14140f, cluster identity 4711 [ 40.890282][ T4263] tipc: New replicast peer: 255.255.255.255 [ 40.896507][ T4263] tipc: Enabled bearer , priority 10 [ 40.911187][ T4261] loop4: detected capacity change from 0 to 8192 [ 41.054555][ T4276] netlink: 76 bytes leftover after parsing attributes in process `syz.3.347'. [ 41.099413][ T4281] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 41.099619][ T4280] IPVS: stopping master sync thread 4281 ... [ 41.244355][ T4291] loop3: detected capacity change from 0 to 2048 [ 41.267359][ T4291] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.311513][ T4300] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 41.311661][ T4298] IPVS: stopping master sync thread 4300 ... [ 41.331982][ T4299] mmap: syz.4.355 (4299) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.346691][ T4291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.407055][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 41.407099][ T29] audit: type=1400 audit(1744507032.163:558): avc: denied { append } for pid=4303 comm="syz.4.358" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.444993][ T4305] loop7: detected capacity change from 0 to 7 [ 41.453388][ T4305] Buffer I/O error on dev loop7, logical block 0, async page read [ 41.461300][ T4305] Buffer I/O error on dev loop7, logical block 0, async page read [ 41.469192][ T4305] loop7: unable to read partition table [ 41.475021][ T4305] loop_reread_partitions: partition scan of loop7 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 41.475021][ T4305] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 41.507986][ T4309] loop4: detected capacity change from 0 to 128 [ 41.523009][ T4309] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 41.538780][ T29] audit: type=1326 audit(1744507032.293:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4591d169 code=0x7ffc0000 [ 41.560546][ T4309] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.562066][ T29] audit: type=1326 audit(1744507032.293:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f9a4591d169 code=0x7ffc0000 [ 41.576053][ T4309] ext2 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.597163][ T29] audit: type=1326 audit(1744507032.293:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4591d169 code=0x7ffc0000 [ 41.748839][ T29] audit: type=1326 audit(1744507032.503:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.4.360" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f999f56d169 code=0x0 [ 41.822132][ T4326] EXT4-fs error (device loop4): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz.4.360: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 41.908582][ T3379] tipc: Node number set to 2886997007 [ 41.954445][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.993788][ T29] audit: type=1326 audit(1744507032.753:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4591d169 code=0x7ffc0000 [ 42.017224][ T29] audit: type=1326 audit(1744507032.753:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a4591d169 code=0x7ffc0000 [ 42.040503][ T29] audit: type=1326 audit(1744507032.753:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4591d169 code=0x7ffc0000 [ 42.063911][ T29] audit: type=1326 audit(1744507032.753:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4591d169 code=0x7ffc0000 [ 42.087779][ T29] audit: type=1326 audit(1744507032.753:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a4591d169 code=0x7ffc0000 [ 42.113021][ T4333] serio: Serial port ptm0 [ 42.140259][ T4336] netlink: 'syz.2.370': attribute type 1 has an invalid length. [ 42.211558][ T4342] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 42.222203][ T4342] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 42.254190][ T4342] bond1: (slave wireguard0): making interface the new active one [ 42.269113][ T4342] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 42.323906][ T4346] loop2: detected capacity change from 0 to 1024 [ 42.349269][ T4346] EXT4-fs: Ignoring removed orlov option [ 42.355179][ T4346] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.376089][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.406896][ T4346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.457334][ T4353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4353 comm=syz.4.375 [ 42.469918][ T4353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4353 comm=syz.4.375 [ 42.483984][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.564506][ T4357] loop4: detected capacity change from 0 to 164 [ 42.583446][ T4357] Unable to read rock-ridge attributes [ 42.597852][ T4357] Unable to read rock-ridge attributes [ 42.618381][ T4357] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 42.638502][ T4357] syz.4.377: attempt to access beyond end of device [ 42.638502][ T4357] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 42.748155][ T4368] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 42.756488][ T4368] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 42.850769][ T4387] pim6reg: entered allmulticast mode [ 42.879434][ T4387] pim6reg: left allmulticast mode [ 42.886199][ T4393] netlink: 'syz.0.394': attribute type 6 has an invalid length. [ 42.946598][ T4402] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 42.954716][ T4402] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 43.115188][ T4425] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.405'. [ 43.215242][ T4438] loop1: detected capacity change from 0 to 2048 [ 43.303825][ T4438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.369042][ T4438] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.389450][ T4450] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 43.397525][ T4450] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 43.397769][ T4445] loop2: detected capacity change from 0 to 8192 [ 43.467942][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.094254][ T4501] syz_tun: entered promiscuous mode [ 44.124923][ T4501] batadv_slave_0: entered promiscuous mode [ 44.137355][ T4503] loop2: detected capacity change from 0 to 764 [ 44.144890][ T4501] hsr1: entered allmulticast mode [ 44.150044][ T4501] syz_tun: entered allmulticast mode [ 44.155366][ T4501] batadv_slave_0: entered allmulticast mode [ 44.196257][ T3307] Symlink component flag not implemented [ 44.202025][ T3307] Symlink component flag not implemented [ 44.237122][ T4514] netlink: 'syz.2.443': attribute type 29 has an invalid length. [ 44.413517][ T4534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 44.427802][ T4534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 44.880908][ T4570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.470'. [ 44.889939][ T4570] netlink: 108 bytes leftover after parsing attributes in process `syz.1.470'. [ 44.901432][ T4570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.470'. [ 44.910522][ T4570] netlink: 108 bytes leftover after parsing attributes in process `syz.1.470'. [ 44.919532][ T4570] netlink: 84 bytes leftover after parsing attributes in process `syz.1.470'. [ 45.064468][ T4584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.475'. [ 45.073444][ T4584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'. [ 45.091289][ T4586] atomic_op ffff888118804528 conn xmit_atomic 0000000000000000 [ 45.143950][ T4589] capability: warning: `syz.1.478' uses deprecated v2 capabilities in a way that may be insecure [ 45.171743][ T4591] hsr_slave_0: left promiscuous mode [ 45.190987][ T4531] syz.0.451 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 45.205253][ T4531] CPU: 1 UID: 0 PID: 4531 Comm: syz.0.451 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(voluntary) [ 45.205288][ T4531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.205306][ T4531] Call Trace: [ 45.205313][ T4531] [ 45.205322][ T4531] dump_stack_lvl+0xf6/0x150 [ 45.205427][ T4531] dump_stack+0x15/0x1a [ 45.205444][ T4531] dump_header+0x83/0x2d0 [ 45.205503][ T4531] oom_kill_process+0x341/0x4c0 [ 45.205539][ T4531] out_of_memory+0x9d1/0xc20 [ 45.205585][ T4531] mem_cgroup_out_of_memory+0x13f/0x190 [ 45.205692][ T4531] try_charge_memcg+0x59f/0x820 [ 45.205794][ T4531] obj_cgroup_charge_pages+0xc0/0x1a0 [ 45.205824][ T4531] __memcg_kmem_charge_page+0x9d/0x170 [ 45.205855][ T4531] __alloc_frozen_pages_noprof+0x1a6/0x360 [ 45.205899][ T4531] alloc_pages_mpol+0xb6/0x260 [ 45.205931][ T4531] alloc_pages_noprof+0xe8/0x130 [ 45.205959][ T4531] __vmalloc_node_range_noprof+0x6ea/0xe80 [ 45.206005][ T4531] __kvmalloc_node_noprof+0x311/0x520 [ 45.206107][ T4531] ? ip_set_alloc+0x1f/0x30 [ 45.206128][ T4531] ? ip_set_alloc+0x1f/0x30 [ 45.206152][ T4531] ip_set_alloc+0x1f/0x30 [ 45.206173][ T4531] hash_netiface_create+0x273/0x730 [ 45.206193][ T4531] ? __nla_parse+0x40/0x60 [ 45.206280][ T4531] ? __pfx_hash_netiface_create+0x10/0x10 [ 45.206305][ T4531] ip_set_create+0x3b6/0x970 [ 45.206400][ T4531] ? __nla_parse+0x40/0x60 [ 45.206431][ T4531] nfnetlink_rcv_msg+0x4ba/0x580 [ 45.206497][ T4531] netlink_rcv_skb+0x12f/0x230 [ 45.206625][ T4531] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 45.206678][ T4531] nfnetlink_rcv+0x187/0x1610 [ 45.206743][ T4531] ? __kfree_skb+0x102/0x150 [ 45.206769][ T4531] ? nlmon_xmit+0x51/0x60 [ 45.206872][ T4531] ? __kfree_skb+0x102/0x150 [ 45.206942][ T4531] ? consume_skb+0x49/0x160 [ 45.206970][ T4531] ? nlmon_xmit+0x51/0x60 [ 45.207005][ T4531] ? dev_hard_start_xmit+0x3d1/0x400 [ 45.207086][ T4531] ? __dev_queue_xmit+0xb76/0x20b0 [ 45.207117][ T4531] ? should_fail_ex+0x31/0x270 [ 45.207143][ T4531] ? ref_tracker_free+0x3b8/0x420 [ 45.207179][ T4531] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 45.207265][ T4531] netlink_unicast+0x605/0x6c0 [ 45.207292][ T4531] netlink_sendmsg+0x609/0x720 [ 45.207324][ T4531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.207427][ T4531] __sock_sendmsg+0x140/0x180 [ 45.207446][ T4531] ____sys_sendmsg+0x350/0x4e0 [ 45.207501][ T4531] __sys_sendmsg+0x1a0/0x240 [ 45.207557][ T4531] __x64_sys_sendmsg+0x46/0x50 [ 45.207643][ T4531] x64_sys_call+0x26f3/0x2e10 [ 45.207674][ T4531] do_syscall_64+0xc9/0x1c0 [ 45.207737][ T4531] ? clear_bhb_loop+0x25/0x80 [ 45.207763][ T4531] ? clear_bhb_loop+0x25/0x80 [ 45.207807][ T4531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.207835][ T4531] RIP: 0033:0x7f006617d169 [ 45.207851][ T4531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.207897][ T4531] RSP: 002b:00007f00647e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.207918][ T4531] RAX: ffffffffffffffda RBX: 00007f0066395fa0 RCX: 00007f006617d169 [ 45.208051][ T4531] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 45.208065][ T4531] RBP: 00007f00661fe990 R08: 0000000000000000 R09: 0000000000000000 [ 45.208080][ T4531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.208093][ T4531] R13: 0000000000000000 R14: 00007f0066395fa0 R15: 00007ffede5b04e8 [ 45.208113][ T4531] [ 45.208256][ T4591] hsr_slave_1: left promiscuous mode [ 45.208290][ T4531] memory: usage 307200kB, limit 307200kB, failcnt 194 [ 45.560102][ T4531] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 45.568028][ T4531] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 45.575401][ T4531] Memory cgroup stats for /syz0: [ 45.575734][ T4531] cache 0 [ 45.583732][ T4531] rss 0 [ 45.586606][ T4531] shmem 0 [ 45.589609][ T4531] mapped_file 0 [ 45.593144][ T4531] dirty 0 [ 45.596127][ T4531] writeback 0 [ 45.599581][ T4531] workingset_refault_anon 15 [ 45.604181][ T4531] workingset_refault_file 37 [ 45.608839][ T4531] swap 188416 [ 45.612167][ T4531] swapcached 0 [ 45.615533][ T4531] pgpgin 16362 [ 45.618951][ T4531] pgpgout 16362 [ 45.622411][ T4531] pgfault 22892 [ 45.625925][ T4531] pgmajfault 11 [ 45.629479][ T4531] inactive_anon 0 [ 45.633116][ T4531] active_anon 0 [ 45.636566][ T4531] inactive_file 0 [ 45.640241][ T4531] active_file 0 [ 45.643707][ T4531] unevictable 0 [ 45.647170][ T4531] hierarchical_memory_limit 314572800 [ 45.652611][ T4531] hierarchical_memsw_limit 9223372036854771712 [ 45.658824][ T4531] total_cache 0 [ 45.662280][ T4531] total_rss 0 [ 45.665553][ T4531] total_shmem 0 [ 45.669051][ T4531] total_mapped_file 0 [ 45.673074][ T4531] total_dirty 0 [ 45.676519][ T4531] total_writeback 0 [ 45.680554][ T4531] total_workingset_refault_anon 15 [ 45.685680][ T4531] total_workingset_refault_file 37 [ 45.690950][ T4531] total_swap 188416 [ 45.694763][ T4531] total_swapcached 0 [ 45.698686][ T4531] total_pgpgin 16362 [ 45.702594][ T4531] total_pgpgout 16362 [ 45.706631][ T4531] total_pgfault 22892 [ 45.710714][ T4531] total_pgmajfault 11 [ 45.714695][ T4531] total_inactive_anon 0 [ 45.718879][ T4531] total_active_anon 0 [ 45.724170][ T4531] total_inactive_file 0 [ 45.728349][ T4531] total_active_file 0 [ 45.732396][ T4531] total_unevictable 0 [ 45.736589][ T4531] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.451,pid=4530,uid=0 [ 45.751322][ T4531] Memory cgroup out of memory: Killed process 4530 (syz.0.451) total-vm:93520kB, anon-rss:1044kB, file-rss:22244kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 45.830904][ T4599] loop1: detected capacity change from 0 to 1024 [ 45.837751][ T4599] EXT4-fs: Ignoring removed nobh option [ 45.843406][ T4599] EXT4-fs: Ignoring removed bh option [ 45.892833][ T4599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.927087][ T4599] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 46.002405][ T4599] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 46.059029][ T4530] syz.0.451 (4530) used greatest stack depth: 8856 bytes left [ 46.083973][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.136318][ T4626] unsupported nla_type 65024 [ 46.141253][ T4531] syz.0.451 (4531) used greatest stack depth: 7320 bytes left [ 46.168407][ T4623] netlink: 'syz.4.495': attribute type 10 has an invalid length. [ 46.197932][ T4623] dummy0: entered promiscuous mode [ 46.223742][ T4623] bridge0: port 3(dummy0) entered blocking state [ 46.230189][ T4623] bridge0: port 3(dummy0) entered disabled state [ 46.238656][ T4623] dummy0: entered allmulticast mode [ 46.245376][ T4623] bridge0: port 3(dummy0) entered blocking state [ 46.251799][ T4623] bridge0: port 3(dummy0) entered forwarding state [ 46.413798][ T4663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.423086][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 46.423102][ T29] audit: type=1400 audit(2000000000.150:725): avc: denied { write } for pid=4656 comm="syz.3.509" laddr=fe80::f lport=40750 faddr=fe80::bb fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 46.438862][ T4663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.521077][ T29] audit: type=1400 audit(2000000000.240:726): avc: denied { read } for pid=4667 comm="syz.0.514" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 46.605395][ T29] audit: type=1326 audit(2000000000.320:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.0.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006617d169 code=0x7ffc0000 [ 46.641386][ T4659] loop2: detected capacity change from 0 to 512 [ 46.650626][ T29] audit: type=1326 audit(2000000000.340:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.0.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f006617d169 code=0x7ffc0000 [ 46.673933][ T29] audit: type=1326 audit(2000000000.340:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.0.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006617d169 code=0x7ffc0000 [ 46.679423][ T4659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.697320][ T29] audit: type=1326 audit(2000000000.340:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.0.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006617d169 code=0x7ffc0000 [ 46.733121][ T29] audit: type=1326 audit(2000000000.340:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.0.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f006617d169 code=0x7ffc0000 [ 46.756424][ T29] audit: type=1326 audit(2000000000.340:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.0.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006617d169 code=0x7ffc0000 [ 46.779689][ T29] audit: type=1326 audit(2000000000.340:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.0.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006617d169 code=0x7ffc0000 [ 46.779878][ T4659] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.802947][ T29] audit: type=1326 audit(2000000000.340:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.0.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f006617d169 code=0x7ffc0000 [ 46.956768][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.966397][ T4686] veth0_macvtap: left promiscuous mode [ 46.975934][ T4686] macvtap0: refused to change device tx_queue_len [ 47.175433][ T4707] tipc: Failed to remove unknown binding: 66,3,3/0:3700539599/3700539600 [ 47.223560][ T4712] netlink: 'syz.1.532': attribute type 10 has an invalid length. [ 47.231790][ T4712] dummy0: entered promiscuous mode [ 47.239453][ T4712] bridge0: port 2(dummy0) entered blocking state [ 47.245870][ T4712] bridge0: port 2(dummy0) entered disabled state [ 47.253164][ T4712] dummy0: entered allmulticast mode [ 47.259362][ T4712] bridge0: port 2(dummy0) entered blocking state [ 47.265762][ T4712] bridge0: port 2(dummy0) entered forwarding state [ 47.303707][ T4719] loop2: detected capacity change from 0 to 512 [ 47.317049][ T4719] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.337284][ T4719] EXT4-fs (loop2): 1 truncate cleaned up [ 47.343553][ T4719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.388025][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.446478][ T4736] IPv6: Can't replace route, no match found [ 47.461159][ T4738] loop2: detected capacity change from 0 to 128 [ 47.550953][ T4750] openvswitch: netlink: Message has 6 unknown bytes. [ 47.616031][ T4760] loop2: detected capacity change from 0 to 2048 [ 47.637829][ T4760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.695521][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.714758][ T4768] sctp: [Deprecated]: syz.4.561 (pid 4768) Use of int in maxseg socket option. [ 47.714758][ T4768] Use struct sctp_assoc_value instead [ 47.741071][ T4770] netem: incorrect gi model size [ 47.746147][ T4770] netem: change failed [ 47.862941][ T4784] loop1: detected capacity change from 0 to 1024 [ 47.884893][ T4789] loop4: detected capacity change from 0 to 2048 [ 47.907697][ T4784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.923593][ T4802] netem: incorrect gi model size [ 47.928745][ T4802] netem: change failed [ 47.935567][ T4789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.979310][ T4784] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 48.017439][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.034678][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.086066][ T4818] loop1: detected capacity change from 0 to 512 [ 48.105220][ T4818] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.580: bg 0: block 35: padding at end of block bitmap is not set [ 48.119824][ T4818] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 48.128871][ T4818] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.580: invalid indirect mapped block 4294967295 (level 1) [ 48.143347][ T4818] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.580: invalid indirect mapped block 4294967295 (level 2) [ 48.158148][ T4818] EXT4-fs (loop1): 1 truncate cleaned up [ 48.170585][ T4818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.209609][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.245453][ T4842] openvswitch: netlink: Message has 6 unknown bytes. [ 48.271344][ T4848] __nla_validate_parse: 7 callbacks suppressed [ 48.271371][ T4848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.592'. [ 48.294213][ T4851] netlink: 'syz.3.594': attribute type 10 has an invalid length. [ 48.306747][ T4851] team0: Port device hsr_slave_0 added [ 48.407324][ T4866] IPv6: Can't replace route, no match found [ 48.431636][ T4868] loop0: detected capacity change from 0 to 1024 [ 48.438321][ T4868] EXT4-fs: Ignoring removed nobh option [ 48.444148][ T4868] ext2: Unknown parameter 'dont_hash' [ 48.453251][ T4868] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 48.499839][ T4877] loop0: detected capacity change from 0 to 256 [ 48.526974][ T4877] syz.0.605: attempt to access beyond end of device [ 48.526974][ T4877] loop0: rw=2051, sector=256, nr_sectors = 32 limit=256 [ 48.545556][ T4877] syz.0.605: attempt to access beyond end of device [ 48.545556][ T4877] loop0: rw=2051, sector=320, nr_sectors = 32 limit=256 [ 48.566665][ T4877] syz.0.605: attempt to access beyond end of device [ 48.566665][ T4877] loop0: rw=2051, sector=384, nr_sectors = 32 limit=256 [ 48.584910][ T4877] syz.0.605: attempt to access beyond end of device [ 48.584910][ T4877] loop0: rw=2051, sector=448, nr_sectors = 32 limit=256 [ 48.600421][ T4877] syz.0.605: attempt to access beyond end of device [ 48.600421][ T4877] loop0: rw=2049, sector=288, nr_sectors = 32 limit=256 [ 48.613959][ T4877] syz.0.605: attempt to access beyond end of device [ 48.613959][ T4877] loop0: rw=2049, sector=352, nr_sectors = 32 limit=256 [ 48.627843][ T4877] syz.0.605: attempt to access beyond end of device [ 48.627843][ T4877] loop0: rw=2049, sector=416, nr_sectors = 32 limit=256 [ 48.641689][ T4877] syz.0.605: attempt to access beyond end of device [ 48.641689][ T4877] loop0: rw=2049, sector=480, nr_sectors = 32 limit=256 [ 49.074817][ T4896] loop0: detected capacity change from 0 to 512 [ 49.103986][ T4896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.117209][ T4896] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.156404][ T4064] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.204301][ T4902] loop3: detected capacity change from 0 to 512 [ 49.255199][ T4910] netlink: 3 bytes leftover after parsing attributes in process `syz.0.614'. [ 49.272401][ T4910] 0ªX¹¦À: renamed from caif0 [ 49.281553][ T4902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.294184][ T4910] 0ªX¹¦À: entered allmulticast mode [ 49.299564][ T4910] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 49.315596][ T4916] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 49.332156][ T4914] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 49.338231][ T4902] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.373010][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.464843][ T4932] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 49.501831][ T4940] bond0: entered promiscuous mode [ 49.506946][ T4940] bond_slave_0: entered promiscuous mode [ 49.513029][ T4940] bond_slave_1: entered promiscuous mode [ 49.550451][ T4940] batadv0: entered promiscuous mode [ 49.560728][ T4940] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 49.568296][ T4940] Cannot create hsr debugfs directory [ 49.574237][ T4940] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 49.604186][ T4940] bond0: left promiscuous mode [ 49.609146][ T4940] bond_slave_0: left promiscuous mode [ 49.614602][ T4940] bond_slave_1: left promiscuous mode [ 49.625957][ T4940] batadv0: left promiscuous mode [ 49.776245][ T4980] loop2: detected capacity change from 0 to 164 [ 49.787812][ T4980] syz.2.645: attempt to access beyond end of device [ 49.787812][ T4980] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 49.803195][ T4980] syz.2.645: attempt to access beyond end of device [ 49.803195][ T4980] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 49.964140][ T4997] sd 0:0:1:0: device reset [ 50.090033][ T5008] loop2: detected capacity change from 0 to 128 [ 50.133201][ T5012] loop3: detected capacity change from 0 to 164 [ 50.158357][ T5016] SELinux: syz.0.661 (5016) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 50.427495][ T5036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.669'. [ 50.449869][ T5036] hsr_slave_1 (unregistering): left promiscuous mode [ 50.547421][ T5052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.678'. [ 50.581679][ T5057] IPVS: sync thread started: state = MASTER, mcast_ifn = tunl0, syncid = 262145, id = 0 [ 50.581810][ T5056] atomic_op ffff88810ab5e128 conn xmit_atomic 0000000000000000 [ 50.807622][ T5068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.684'. [ 50.922742][ T5083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 50.937437][ T5083] IPVS: Error joining to the multicast group [ 51.007272][ T5096] xt_CT: You must specify a L4 protocol and not use inversions on it [ 51.037524][ T5098] loop3: detected capacity change from 0 to 2049 [ 51.052250][ T5098] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 64 [ 51.192766][ T5122] sd 0:0:1:0: device reset [ 51.204334][ T5117] loop2: detected capacity change from 0 to 2048 [ 51.221296][ T5117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.309383][ T5137] xt_hashlimit: max too large, truncated to 1048576 [ 51.317248][ T5137] Cannot find set identified by id 0 to match [ 51.455434][ T5145] bridge0: entered promiscuous mode [ 51.461675][ T5145] bridge0: entered allmulticast mode [ 51.542644][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 51.542662][ T29] audit: type=1326 audit(2000000005.260:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4591d169 code=0x7ffc0000 [ 51.593931][ T29] audit: type=1326 audit(2000000005.260:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4591d169 code=0x7ffc0000 [ 51.617238][ T29] audit: type=1326 audit(2000000005.260:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a4591d169 code=0x7ffc0000 [ 51.640592][ T29] audit: type=1326 audit(2000000005.260:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4591d169 code=0x7ffc0000 [ 51.663907][ T29] audit: type=1326 audit(2000000005.260:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4591d169 code=0x7ffc0000 [ 51.687245][ T29] audit: type=1326 audit(2000000005.260:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a4591d169 code=0x7ffc0000 [ 51.710483][ T29] audit: type=1326 audit(2000000005.260:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4591d169 code=0x7ffc0000 [ 51.711912][ T5117] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.705: bg 0: block 234: padding at end of block bitmap is not set [ 51.733741][ T29] audit: type=1326 audit(2000000005.260:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4591d169 code=0x7ffc0000 [ 51.733776][ T29] audit: type=1326 audit(2000000005.260:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a4591d169 code=0x7ffc0000 [ 51.733827][ T29] audit: type=1326 audit(2000000005.260:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4591d169 code=0x7ffc0000 [ 51.748838][ T5156] loop4: detected capacity change from 0 to 128 [ 51.827739][ T5156] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.843048][ T5156] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 51.852396][ T5117] EXT4-fs (loop2): Remounting filesystem read-only [ 51.879584][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.056939][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.091441][ T5184] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.162663][ T5184] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.235116][ T5184] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.310610][ T5205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.742'. [ 52.320826][ T5184] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.335381][ T5205] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.366806][ T5184] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.384881][ T5184] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.399666][ T5184] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.412741][ T5205] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.430164][ T5184] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.455624][ T5209] random: crng reseeded on system resumption [ 52.479615][ T5205] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.553444][ T5205] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.592103][ T5222] netlink: 'syz.2.752': attribute type 1 has an invalid length. [ 52.610772][ T5205] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.625027][ T5222] 8021q: adding VLAN 0 to HW filter on device bond2 [ 52.636858][ T5205] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.649063][ T5205] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.660623][ T5205] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.677910][ T5222] bond2: (slave syz_tun): making interface the new active one [ 52.686717][ T5222] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 52.711034][ T5230] loop3: detected capacity change from 0 to 512 [ 52.731474][ T5233] loop2: detected capacity change from 0 to 128 [ 52.744861][ T5230] EXT4-fs error (device loop3): ext4_iget_extra_inode:4692: inode #15: comm syz.3.754: corrupted in-inode xattr: invalid ea_ino [ 52.801045][ T5230] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.754: couldn't read orphan inode 15 (err -117) [ 52.815448][ T5230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.834689][ T5245] loop2: detected capacity change from 0 to 164 [ 52.850986][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.852524][ T5247] bond0: entered promiscuous mode [ 52.865195][ T5247] bond_slave_0: entered promiscuous mode [ 52.871022][ T5247] bond_slave_1: entered promiscuous mode [ 52.879546][ T5247] batadv0: entered promiscuous mode [ 52.904823][ T5252] capability: warning: `syz.3.763' uses 32-bit capabilities (legacy support in use) [ 52.914402][ T5247] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 52.914423][ T5247] Cannot create hsr debugfs directory [ 52.914691][ T5247] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 52.946277][ T5247] bond0: left promiscuous mode [ 52.951299][ T5247] bond_slave_0: left promiscuous mode [ 52.956845][ T5247] bond_slave_1: left promiscuous mode [ 52.963999][ T5247] batadv0: left promiscuous mode [ 53.161241][ T3379] IPVS: starting estimator thread 0... [ 53.172142][ T5290] xt_CT: No such helper "pptp" [ 53.219989][ T5296] loop3: detected capacity change from 0 to 512 [ 53.250975][ T5296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.251831][ T5292] IPVS: using max 2304 ests per chain, 115200 per kthread [ 53.263783][ T5296] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.390598][ T5309] bond0: entered promiscuous mode [ 53.395753][ T5309] bond_slave_0: entered promiscuous mode [ 53.401558][ T5309] bond_slave_1: entered promiscuous mode [ 53.417747][ T5309] batadv0: entered promiscuous mode [ 53.437380][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.439508][ T5309] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 53.471486][ T5309] Cannot create hsr debugfs directory [ 53.484454][ T5316] loop3: detected capacity change from 0 to 512 [ 53.496272][ T5312] loop4: detected capacity change from 0 to 256 [ 53.499031][ T5309] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 53.503240][ T5312] FAT-fs (loop4): bogus number of FAT sectors [ 53.516038][ T5312] FAT-fs (loop4): Can't find a valid FAT filesystem [ 53.524165][ T5309] bond0: left promiscuous mode [ 53.524518][ T5316] EXT4-fs (loop3): orphan cleanup on readonly fs [ 53.529007][ T5309] bond_slave_0: left promiscuous mode [ 53.529101][ T5309] bond_slave_1: left promiscuous mode [ 53.549372][ T5316] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.788: bg 0: block 248: padding at end of block bitmap is not set [ 53.563726][ T5309] batadv0: left promiscuous mode [ 53.573465][ T5316] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.788: Failed to acquire dquot type 1 [ 53.601407][ T5316] EXT4-fs (loop3): 1 truncate cleaned up [ 53.614584][ T5316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.653382][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.662784][ T5327] netlink: 'syz.2.795': attribute type 21 has an invalid length. [ 53.670733][ T5327] netlink: 156 bytes leftover after parsing attributes in process `syz.2.795'. [ 53.780447][ T5346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 53.789412][ T5346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 53.826740][ T5354] netlink: 'syz.1.806': attribute type 11 has an invalid length. [ 53.836303][ T5354] netlink: 448 bytes leftover after parsing attributes in process `syz.1.806'. [ 53.918904][ T5362] Falling back ldisc for ttyS3. [ 54.200664][ T5405] loop4: detected capacity change from 0 to 128 [ 54.249596][ T5405] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.286209][ T5405] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.337208][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.430066][ T5419] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 54.872723][ T5432] syz.0.838: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 54.887278][ T5432] CPU: 0 UID: 0 PID: 5432 Comm: syz.0.838 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(voluntary) [ 54.887313][ T5432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.887350][ T5432] Call Trace: [ 54.887358][ T5432] [ 54.887367][ T5432] dump_stack_lvl+0xf6/0x150 [ 54.887396][ T5432] dump_stack+0x15/0x1a [ 54.887460][ T5432] warn_alloc+0x145/0x1b0 [ 54.887504][ T5432] ? update_curr+0x19b/0x430 [ 54.887537][ T5432] ? __vmalloc_node_range_noprof+0x8a/0xe80 [ 54.887615][ T5432] __vmalloc_node_range_noprof+0xac/0xe80 [ 54.887642][ T5432] ? probe_sched_wakeup+0x81/0xa0 [ 54.887720][ T5432] ? ttwu_do_activate+0x1ce/0x210 [ 54.887742][ T5432] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 54.887764][ T5432] ? try_to_wake_up+0x36c/0x5b0 [ 54.887785][ T5432] ? __rcu_read_unlock+0x4e/0x70 [ 54.887848][ T5432] ? avc_has_perm_noaudit+0x1cc/0x210 [ 54.887877][ T5432] ? should_fail_ex+0x31/0x270 [ 54.887944][ T5432] ? should_failslab+0x8f/0xb0 [ 54.887977][ T5432] vmalloc_user_noprof+0x59/0x70 [ 54.888041][ T5432] ? xskq_create+0x79/0xd0 [ 54.888068][ T5432] xskq_create+0x79/0xd0 [ 54.888096][ T5432] xsk_init_queue+0x82/0xd0 [ 54.888152][ T5432] xsk_setsockopt+0x37d/0x550 [ 54.888250][ T5432] ? __pfx_xsk_setsockopt+0x10/0x10 [ 54.888276][ T5432] __sys_setsockopt+0x187/0x200 [ 54.888365][ T5432] __x64_sys_setsockopt+0x66/0x80 [ 54.888390][ T5432] x64_sys_call+0x2a09/0x2e10 [ 54.888411][ T5432] do_syscall_64+0xc9/0x1c0 [ 54.888440][ T5432] ? clear_bhb_loop+0x25/0x80 [ 54.888461][ T5432] ? clear_bhb_loop+0x25/0x80 [ 54.888502][ T5432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.888529][ T5432] RIP: 0033:0x7f006617d169 [ 54.888547][ T5432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.888567][ T5432] RSP: 002b:00007f00647e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 54.888592][ T5432] RAX: ffffffffffffffda RBX: 00007f0066395fa0 RCX: 00007f006617d169 [ 54.888604][ T5432] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 54.888616][ T5432] RBP: 00007f00661fe990 R08: 0000000000000004 R09: 0000000000000000 [ 54.888627][ T5432] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.888664][ T5432] R13: 0000000000000000 R14: 00007f0066395fa0 R15: 00007ffede5b04e8 [ 54.888682][ T5432] [ 55.124888][ T5432] Mem-Info: [ 55.128024][ T5432] active_anon:3362 inactive_anon:2 isolated_anon:0 [ 55.128024][ T5432] active_file:4491 inactive_file:2040 isolated_file:0 [ 55.128024][ T5432] unevictable:0 dirty:304 writeback:0 [ 55.128024][ T5432] slab_reclaimable:2805 slab_unreclaimable:15569 [ 55.128024][ T5432] mapped:28144 shmem:311 pagetables:830 [ 55.128024][ T5432] sec_pagetables:0 bounce:0 [ 55.128024][ T5432] kernel_misc_reclaimable:0 [ 55.128024][ T5432] free:1901699 free_pcp:14074 free_cma:0 [ 55.173716][ T5432] Node 0 active_anon:13564kB inactive_anon:8kB active_file:17964kB inactive_file:8160kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112576kB dirty:1216kB writeback:0kB shmem:1244kB writeback_tmp:0kB kernel_stack:2912kB pagetables:3436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 55.203347][ T5432] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 55.231115][ T5432] lowmem_reserve[]: 0 2882 7860 7860 [ 55.236577][ T5432] Node 0 DMA32 free:2947792kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951320kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 55.265259][ T5432] lowmem_reserve[]: 0 0 4978 4978 [ 55.271121][ T5432] Node 0 Normal free:4643180kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB active_anon:13680kB inactive_anon:8kB active_file:17964kB inactive_file:8160kB unevictable:0kB writepending:1216kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:52492kB local_pcp:50536kB free_cma:0kB [ 55.302172][ T5432] lowmem_reserve[]: 0 0 0 0 [ 55.306779][ T5432] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 55.319526][ T5432] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947792kB [ 55.336457][ T5432] Node 0 Normal: 663*4kB (UME) 207*8kB (UME) 141*16kB (UME) 154*32kB (UME) 138*64kB (UME) 93*128kB (UME) 52*256kB (UME) 51*512kB (UME) 32*1024kB (UME) 24*2048kB (UME) 1096*4096kB (UM) = 4642788kB [ 55.355986][ T5432] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 55.366395][ T5432] 6843 total pagecache pages [ 55.371187][ T5432] 2 pages in swap cache [ 55.375385][ T5432] Free swap = 124988kB [ 55.379593][ T5432] Total swap = 124996kB [ 55.383771][ T5432] 2097051 pages RAM [ 55.387643][ T5432] 0 pages HighMem/MovableOnly [ 55.393118][ T5432] 80820 pages reserved [ 55.500610][ T5460] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 55.512601][ T5460] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 55.596250][ T5476] $Hÿ: renamed from bond0 (while UP) [ 55.610521][ T5476] $Hÿ: entered promiscuous mode [ 55.615624][ T5476] bond_slave_0: entered promiscuous mode [ 55.621552][ T5476] bond_slave_1: entered promiscuous mode [ 55.736531][ T5493] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 55.879959][ T5507] SELinux: security_context_str_to_sid (ûÿ) failed with errno=-22 [ 55.952955][ T5514] $Hÿ: renamed from bond0 (while UP) [ 55.963570][ T5514] $Hÿ: entered promiscuous mode [ 55.968715][ T5514] bond_slave_0: entered promiscuous mode [ 55.974537][ T5514] bond_slave_1: entered promiscuous mode [ 56.044072][ T5521] loop4: detected capacity change from 0 to 512 [ 56.086405][ T5524] bond2: (slave syz_tun): Releasing active interface [ 56.103375][ T5521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.106781][ T5524] bridge_slave_0: left allmulticast mode [ 56.121576][ T5521] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.122336][ T5524] bridge_slave_0: left promiscuous mode [ 56.138487][ T5524] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.160977][ T5524] bridge_slave_1: left allmulticast mode [ 56.166754][ T5524] bridge_slave_1: left promiscuous mode [ 56.172541][ T5524] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.195224][ T5524] bond0: (slave bond_slave_0): Releasing backup interface [ 56.207505][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.221650][ T5524] bond0: (slave bond_slave_1): Releasing backup interface [ 56.235051][ T5524] team0: Port device team_slave_0 removed [ 56.244366][ T5524] team0: Port device team_slave_1 removed [ 56.252973][ T5524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.261134][ T5524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.280236][ T5532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 56.289612][ T5524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.289696][ T5524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.325577][ T5524] bond1: (slave wireguard0): Releasing backup interface [ 56.339980][ T5535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 56.507746][ T5548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'. [ 56.600783][ T5550] SELinux: ebitmap: truncated map [ 56.606366][ T5550] SELinux: failed to load policy [ 56.662144][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 56.662161][ T29] audit: type=1326 audit(2000000010.380:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.0.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006617d169 code=0x7ffc0000 [ 56.708732][ T29] audit: type=1326 audit(2000000010.380:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.0.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f006617d169 code=0x7ffc0000 [ 56.732836][ T29] audit: type=1326 audit(2000000010.380:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.0.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006617d169 code=0x7ffc0000 [ 56.756265][ T29] audit: type=1326 audit(2000000010.380:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.0.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006617d169 code=0x7ffc0000 [ 56.780267][ T29] audit: type=1326 audit(2000000010.380:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.0.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f006617d169 code=0x7ffc0000 [ 56.803716][ T29] audit: type=1326 audit(2000000010.380:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.0.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006617d169 code=0x7ffc0000 [ 56.827689][ T29] audit: type=1326 audit(2000000010.380:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.0.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006617d169 code=0x7ffc0000 [ 56.851781][ T29] audit: type=1326 audit(2000000010.380:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.0.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f006617d169 code=0x7ffc0000 [ 56.875282][ T29] audit: type=1326 audit(2000000010.420:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.0.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006617d169 code=0x7ffc0000 [ 56.899287][ T29] audit: type=1326 audit(2000000010.420:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.0.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006617d169 code=0x7ffc0000 [ 56.963800][ T5570] tipc: Enabling of bearer rejected, already enabled [ 57.213235][ T5582] netlink: 'syz.0.904': attribute type 1 has an invalid length. [ 57.603524][ T5602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5602 comm=syz.1.913 [ 57.639106][ T5602] netlink: 'syz.1.913': attribute type 1 has an invalid length. [ 57.679611][ T5602] bond1: (slave gretap1): making interface the new active one [ 57.687438][ T5602] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 57.791275][ T5616] loop3: detected capacity change from 0 to 128 [ 57.935744][ T5629] xt_CT: No such helper "pptp" [ 58.030463][ T5641] loop3: detected capacity change from 0 to 128 [ 58.082651][ T5643] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 58.105295][ T5649] ALSA: seq fatal error: cannot create timer (-22) [ 58.144515][ T5641] bio_check_eod: 4 callbacks suppressed [ 58.144536][ T5641] syz.3.928: attempt to access beyond end of device [ 58.144536][ T5641] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 58.311620][ T5674] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.362514][ T5674] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.382990][ T3309] syz_tun (unregistering): left promiscuous mode [ 58.411699][ T5674] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.449866][ T5687] netlink: 332 bytes leftover after parsing attributes in process `syz.0.952'. [ 58.512583][ T5674] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.612340][ T5674] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.627519][ T5674] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.642099][ T5674] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.674012][ T5674] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.721247][ T1295] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.790961][ T1295] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.843482][ T1295] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.901400][ T1295] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.962655][ T1295] dummy0: left allmulticast mode [ 58.967794][ T1295] bridge0: port 2(dummy0) entered disabled state [ 58.985188][ T1295] bridge_slave_0: left allmulticast mode [ 58.990907][ T1295] bridge_slave_0: left promiscuous mode [ 58.996774][ T1295] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.046111][ T5722] SELinux: Context Ü is not valid (left unmapped). [ 59.053222][ T1295] bond1 (unregistering): (slave gretap1): Releasing active interface [ 59.124128][ T5727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'. [ 59.161387][ T1295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.180587][ T1295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.200335][ T1295] bond0 (unregistering): Released all slaves [ 59.218457][ T1295] bond1 (unregistering): Released all slaves [ 59.229769][ T5697] chnl_net:caif_netlink_parms(): no params data found [ 59.284712][ T5736] netlink: 'syz.4.970': attribute type 10 has an invalid length. [ 59.295154][ T1295] batadv_slave_0: left promiscuous mode [ 59.304414][ T1295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.311890][ T1295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.319978][ T1295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.327461][ T1295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.337529][ T1295] veth1_macvtap: left promiscuous mode [ 59.343566][ T1295] veth0_macvtap: left promiscuous mode [ 59.349573][ T1295] veth1_vlan: left promiscuous mode [ 59.355205][ T1295] veth0_vlan: left promiscuous mode [ 59.381581][ T5745] netlink: 'syz.2.973': attribute type 10 has an invalid length. [ 59.433624][ T1295] team0 (unregistering): Port device team_slave_1 removed [ 59.443988][ T1295] team0 (unregistering): Port device team_slave_0 removed [ 59.462864][ T5751] loop3: detected capacity change from 0 to 512 [ 59.473143][ T5751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.488746][ T5751] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.975: bg 0: block 264: padding at end of block bitmap is not set [ 59.497029][ T5736] team0: Device hsr_slave_0 failed to register rx_handler [ 59.523150][ T5751] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3758096384 > max in inode 15 [ 59.534088][ T5751] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3758096385 > max in inode 15 [ 59.536669][ T5745] batman_adv: batadv0: Adding interface: team0 [ 59.550612][ T5745] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.575853][ T5745] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 59.606410][ T5757] loop4: detected capacity change from 0 to 128 [ 59.613937][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.631724][ T5697] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.638868][ T5697] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.653606][ T5697] bridge_slave_0: entered allmulticast mode [ 59.660115][ T5697] bridge_slave_0: entered promiscuous mode [ 59.666987][ T5697] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.674288][ T5697] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.686232][ T5697] bridge_slave_1: entered allmulticast mode [ 59.693132][ T5697] bridge_slave_1: entered promiscuous mode [ 59.765866][ T5763] syzkaller0: entered promiscuous mode [ 59.783985][ T5697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.803686][ T5778] SELinux: syz.0.983 (5778) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 59.850370][ T5697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.883935][ T5697] team0: Port device team_slave_0 added [ 59.894770][ T5697] team0: Port device team_slave_1 added [ 59.941301][ T5697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.948300][ T5697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.975109][ T5697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.987778][ T5697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.994834][ T5697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.021568][ T5697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.032626][ T5795] netlink: 264 bytes leftover after parsing attributes in process `syz.2.991'. [ 60.077108][ T5697] hsr_slave_0: entered promiscuous mode [ 60.095799][ T5802] loop4: detected capacity change from 0 to 512 [ 60.096076][ T5697] hsr_slave_1: entered promiscuous mode [ 60.115992][ T5697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.128138][ T5697] Cannot create hsr debugfs directory [ 60.154140][ T5807] veth1_to_bond: entered allmulticast mode [ 60.164526][ T5807] veth1_to_bond: entered promiscuous mode [ 60.180164][ T5810] loop2: detected capacity change from 0 to 256 [ 60.187006][ T5810] FAT-fs (loop2): bogus sectors per cluster 0 [ 60.193209][ T5810] FAT-fs (loop2): Can't find a valid FAT filesystem [ 60.214568][ T5807] batadv_slave_0: entered allmulticast mode [ 60.232732][ T5806] batadv_slave_0: left allmulticast mode [ 60.238696][ T5806] veth1_to_bond: left promiscuous mode [ 60.244357][ T5806] veth1_to_bond: left allmulticast mode [ 60.246691][ T5814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1000'. [ 60.283163][ T5814] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.309394][ T5697] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 60.339321][ T5697] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 60.362656][ T5814] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.380671][ T5697] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 60.393179][ T5697] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 60.414789][ T5814] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.460101][ T5697] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.467284][ T5697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.513620][ T5814] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.564664][ T5697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.582628][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.607440][ T5697] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.619540][ T5814] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.642498][ T5814] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.654080][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.661213][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.670355][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.677497][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.688869][ T3364] kernel write not supported for file /361/attr/exec (pid: 3364 comm: kworker/1:2) [ 60.708908][ T5814] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.720878][ T5814] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.736149][ T5697] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.746570][ T5697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.776134][ T5826] hsr0: entered promiscuous mode [ 60.834867][ T5697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.029413][ T5697] veth0_vlan: entered promiscuous mode [ 61.054355][ T5867] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1016'. [ 61.058247][ T5697] veth1_vlan: entered promiscuous mode [ 61.090877][ T5867] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1016'. [ 61.093852][ T5697] veth0_macvtap: entered promiscuous mode [ 61.114878][ T5697] veth1_macvtap: entered promiscuous mode [ 61.134150][ T5697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.144712][ T5697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.154669][ T5697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.165943][ T5697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.175810][ T5697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.186272][ T5697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.196795][ T5697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.207294][ T5697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.240469][ T5871] sg_write: data in/out 33856/14 bytes for SCSI command 0x0-- guessing data in; [ 61.240469][ T5871] program syz.2.1018 not setting count and/or reply_len properly [ 61.272255][ T5697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.281584][ T5873] lo: entered promiscuous mode [ 61.287921][ T5873] lo: entered allmulticast mode [ 61.293622][ T5697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.304321][ T5697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.314909][ T5697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.325474][ T5697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.335351][ T5697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.346523][ T5697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.356440][ T5697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.366939][ T5697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.381051][ T5697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.388440][ T5873] lo: left allmulticast mode [ 61.393239][ T5873] lo: left promiscuous mode [ 61.429631][ T5697] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.438689][ T5697] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.447402][ T5697] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.456163][ T5697] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.468963][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1020'. [ 61.561150][ T5876] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.630262][ T5876] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.681947][ T5876] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.731226][ T5891] netlink: 'syz.5.1024': attribute type 10 has an invalid length. [ 61.740779][ T5876] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.790369][ T5891] batman_adv: batadv0: Adding interface: team0 [ 61.796571][ T5891] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.821748][ T5891] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 62.214061][ T5913] atomic_op ffff888122b7f928 conn xmit_atomic 0000000000000000 [ 62.221874][ T5915] loop2: detected capacity change from 0 to 512 [ 62.244209][ T5915] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.303028][ T5915] EXT4-fs (loop2): 1 truncate cleaned up [ 62.310480][ T5915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.383873][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.421561][ T5876] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.453368][ T5876] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.492251][ T5876] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.542932][ T5876] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.675664][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 62.675682][ T29] audit: type=1400 audit(2000000016.390:1111): avc: denied { getopt } for pid=5926 comm="syz.3.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.831660][ T5935] sd 0:0:1:0: device reset [ 62.866483][ T29] audit: type=1326 audit(2000000016.570:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697816d169 code=0x7ffc0000 [ 62.890111][ T29] audit: type=1326 audit(2000000016.570:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697816d169 code=0x7ffc0000 [ 62.913597][ T29] audit: type=1326 audit(2000000016.580:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f697816d169 code=0x7ffc0000 [ 62.936956][ T29] audit: type=1326 audit(2000000016.580:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697816d169 code=0x7ffc0000 [ 62.960542][ T29] audit: type=1326 audit(2000000016.580:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697816d169 code=0x7ffc0000 [ 62.984219][ T29] audit: type=1326 audit(2000000016.580:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f697816d169 code=0x7ffc0000 [ 63.007735][ T29] audit: type=1326 audit(2000000016.580:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697816d169 code=0x7ffc0000 [ 63.031320][ T29] audit: type=1326 audit(2000000016.580:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697816d169 code=0x7ffc0000 [ 63.094924][ T29] audit: type=1400 audit(2000000016.790:1120): avc: denied { write } for pid=5944 comm="syz.2.1047" name="file0" dev="tmpfs" ino=1376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 63.145150][ T3382] IPVS: starting estimator thread 0... [ 63.248641][ T5951] IPVS: using max 1872 ests per chain, 93600 per kthread [ 63.269455][ T5960] netlink: 'syz.3.1055': attribute type 3 has an invalid length. [ 63.334417][ T5967] loop3: detected capacity change from 0 to 1024 [ 63.346262][ T5972] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1060'. [ 63.357551][ T5967] EXT4-fs: Ignoring removed nobh option [ 63.363234][ T5967] EXT4-fs: Ignoring removed bh option [ 63.414763][ T5967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.439896][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1063'. [ 63.462528][ T5967] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.1058: Allocating blocks 385-513 which overlap fs metadata [ 63.526737][ T5967] EXT4-fs (loop3): pa ffff8881069735b0: logic 16, phys. 129, len 24 [ 63.535714][ T5967] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 63.550996][ T5967] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 63.564017][ T5967] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.564017][ T5967] [ 63.573890][ T5967] EXT4-fs (loop3): Total free blocks count 0 [ 63.579990][ T5967] EXT4-fs (loop3): Free/Dirty block details [ 63.585896][ T5967] EXT4-fs (loop3): free_blocks=128 [ 63.591727][ T5967] EXT4-fs (loop3): dirty_blocks=0 [ 63.596775][ T5967] EXT4-fs (loop3): Block reservation details [ 63.602843][ T5967] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 63.651091][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1067'. [ 63.665839][ T5995] netlink: 1228 bytes leftover after parsing attributes in process `syz.0.1068'. [ 63.686372][ T5993] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 64.149176][ T6036] wireguard0: entered promiscuous mode [ 64.154760][ T6036] wireguard0: entered allmulticast mode [ 64.253807][ T6054] SELinux: ebitmap: map size 2 does not match my size 64 (high bit was 64) [ 64.270057][ T6053] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.313676][ T6054] SELinux: failed to load policy [ 64.330798][ T6053] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.380664][ T6053] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.441923][ T6053] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.497800][ T6074] __nla_validate_parse: 5 callbacks suppressed [ 64.497823][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1102'. [ 64.523967][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1102'. [ 64.535468][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'. [ 64.699576][ T6096] loop3: detected capacity change from 0 to 512 [ 64.707974][ T6096] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.731211][ T6096] EXT4-fs (loop3): 1 truncate cleaned up [ 64.737185][ T6096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.811024][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.873570][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1118'. [ 64.890523][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1118'. [ 64.983515][ T6053] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.035384][ T6053] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.062771][ T6053] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.108439][ T6053] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.185483][ T6129] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1129'. [ 65.312203][ T6149] loop5: detected capacity change from 0 to 512 [ 65.325582][ T6143] syzkaller0: entered promiscuous mode [ 65.331172][ T6143] syzkaller0: entered allmulticast mode [ 65.340575][ T6156] xt_hashlimit: max too large, truncated to 1048576 [ 65.350839][ T6149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 65.367944][ T6149] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.381600][ T6149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 65.526401][ T6183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1150'. [ 65.656597][ T6203] bond0: entered promiscuous mode [ 65.661771][ T6203] bond_slave_0: entered promiscuous mode [ 65.667557][ T6203] bond_slave_1: entered promiscuous mode [ 65.680463][ T6203] batadv0: entered promiscuous mode [ 65.693169][ T6203] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 65.709612][ T6203] Cannot create hsr debugfs directory [ 65.723692][ T6203] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 65.857663][ T6227] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 66.247541][ T6268] loop4: detected capacity change from 0 to 256 [ 66.389211][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1188'. [ 66.477706][ T6286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1192'. [ 66.516905][ T6289] loop5: detected capacity change from 0 to 1024 [ 66.540209][ T6289] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.557693][ T6289] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.583990][ T5697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.796066][ T6305] loop3: detected capacity change from 0 to 512 [ 66.803480][ T6305] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.814606][ T6305] EXT4-fs (loop3): 1 truncate cleaned up [ 66.841166][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 66.849526][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 66.857327][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 66.867008][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 66.874854][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 66.883453][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 66.891289][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 66.899060][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 66.906839][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 66.914628][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 66.923117][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 66.930949][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 66.938749][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 66.946558][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 66.955470][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 66.963299][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 66.971156][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 66.979536][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 66.987353][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 66.995146][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 67.002894][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 67.011247][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 67.019080][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 67.026814][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 67.034638][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 67.043050][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 67.050834][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 67.058671][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 67.066414][ T4195] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 67.075260][ T4195] hid-generic 0000:0000:20000000.0001: hidraw0: HID v0.01 Device [syz0] on syz1 [ 67.110214][ T6311] loop3: detected capacity change from 0 to 2048 [ 67.120234][ T6311] EXT4-fs mount: 2 callbacks suppressed [ 67.120247][ T6311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.139874][ T6311] netlink: 132 bytes leftover after parsing attributes in process `'. [ 67.158043][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.403312][ T6323] loop4: detected capacity change from 0 to 1024 [ 67.410241][ T6323] EXT4-fs: Ignoring removed nobh option [ 67.415883][ T6323] EXT4-fs: Ignoring removed bh option [ 67.436388][ T6323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.469187][ T6323] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4115: comm syz.4.1205: Allocating blocks 385-513 which overlap fs metadata [ 67.501560][ T6323] EXT4-fs (loop4): pa ffff888106973540: logic 16, phys. 129, len 24 [ 67.509680][ T6323] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 67.523540][ T6323] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 67.535886][ T6323] EXT4-fs (loop4): This should not happen!! Data will be lost [ 67.535886][ T6323] [ 67.545724][ T6323] EXT4-fs (loop4): Total free blocks count 0 [ 67.551827][ T6323] EXT4-fs (loop4): Free/Dirty block details [ 67.557755][ T6323] EXT4-fs (loop4): free_blocks=128 [ 67.563000][ T6323] EXT4-fs (loop4): dirty_blocks=0 [ 67.568119][ T6323] EXT4-fs (loop4): Block reservation details [ 67.574148][ T6323] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 67.708180][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 67.708195][ T29] audit: type=1326 audit(2000000021.420:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999f56d169 code=0x7ffc0000 [ 67.739487][ T29] audit: type=1326 audit(2000000021.440:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999f56d169 code=0x7ffc0000 [ 67.763716][ T29] audit: type=1326 audit(2000000021.440:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f999f56d169 code=0x7ffc0000 [ 67.787257][ T29] audit: type=1326 audit(2000000021.440:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999f56d169 code=0x7ffc0000 [ 67.811302][ T29] audit: type=1326 audit(2000000021.440:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f999f56d169 code=0x7ffc0000 [ 67.834854][ T29] audit: type=1326 audit(2000000021.440:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999f56d169 code=0x7ffc0000 [ 67.858955][ T29] audit: type=1326 audit(2000000021.440:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f999f56d169 code=0x7ffc0000 [ 67.882493][ T29] audit: type=1326 audit(2000000021.440:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999f56d169 code=0x7ffc0000 [ 67.906605][ T29] audit: type=1326 audit(2000000021.440:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f999f56d169 code=0x7ffc0000 [ 67.930678][ T29] audit: type=1326 audit(2000000021.440:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999f56d169 code=0x7ffc0000 [ 68.010964][ T6373] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.082244][ T6373] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.152824][ T6373] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.218052][ T6373] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.233978][ T23] kernel write not supported for file /435/attr/exec (pid: 23 comm: kworker/1:0) [ 68.270472][ T6373] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.312798][ T6373] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.337917][ T6373] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.353552][ T6373] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.436863][ T3378] kernel write not supported for file /443/attr/exec (pid: 3378 comm: kworker/1:3) [ 68.494591][ T6409] loop4: detected capacity change from 0 to 4096 [ 68.502669][ T6413] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 68.521564][ T6418] loop7: detected capacity change from 0 to 16384 [ 68.521982][ T6409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.612417][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.767606][ T6421] I/O error, dev loop7, sector 7424 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 68.777682][ T6421] Buffer I/O error on dev loop7, logical block 928, lost async page write [ 68.786344][ T6421] Buffer I/O error on dev loop7, logical block 929, lost async page write [ 68.794929][ T6421] Buffer I/O error on dev loop7, logical block 930, lost async page write [ 68.803687][ T6421] Buffer I/O error on dev loop7, logical block 931, lost async page write [ 68.812456][ T6421] Buffer I/O error on dev loop7, logical block 932, lost async page write [ 68.821085][ T6421] Buffer I/O error on dev loop7, logical block 933, lost async page write [ 68.829657][ T6421] Buffer I/O error on dev loop7, logical block 934, lost async page write [ 68.838189][ T6421] Buffer I/O error on dev loop7, logical block 935, lost async page write [ 68.846756][ T6421] Buffer I/O error on dev loop7, logical block 936, lost async page write [ 68.855455][ T6421] Buffer I/O error on dev loop7, logical block 937, lost async page write [ 68.867860][ T6421] I/O error, dev loop7, sector 8448 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 68.883335][ T6421] I/O error, dev loop7, sector 9472 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 68.896215][ T6421] I/O error, dev loop7, sector 10496 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 68.910639][ T6421] I/O error, dev loop7, sector 11520 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 68.923375][ T6421] I/O error, dev loop7, sector 12544 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 68.936029][ T6421] I/O error, dev loop7, sector 13568 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 68.948744][ T6421] I/O error, dev loop7, sector 14592 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 68.961538][ T6421] I/O error, dev loop7, sector 15616 op 0x1:(WRITE) flags 0x800 phys_seg 96 prio class 0 [ 68.985455][ T6433] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.987212][ T6421] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.007207][ T6421] loop7: unable to read partition table [ 69.013020][ T6421] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_Á“;Ûo×ÿ) failed (rc=-5) [ 69.043689][ T6433] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.101793][ T6433] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.151101][ T6433] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.231266][ T6433] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.246542][ T6444] vlan2: entered allmulticast mode [ 69.255129][ T6448] netlink: 'syz.2.1262': attribute type 10 has an invalid length. [ 69.269656][ T6433] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.282156][ T6448] netlink: 'syz.2.1262': attribute type 10 has an invalid length. [ 69.282424][ T6433] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.298655][ T6448] team0: entered promiscuous mode [ 69.307843][ T6448] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.316533][ T6448] batman_adv: batadv0: Interface activated: team0 [ 69.323793][ T6448] batman_adv: batadv0: Interface deactivated: team0 [ 69.330497][ T6448] batman_adv: batadv0: Removing interface: team0 [ 69.356240][ T6448] bridge0: port 1(team0) entered blocking state [ 69.362739][ T6448] bridge0: port 1(team0) entered disabled state [ 69.369314][ T6448] team0: entered allmulticast mode [ 69.380044][ T6433] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.404322][ T6453] dvmrp0: entered allmulticast mode [ 69.413238][ T6453] dvmrp0: left allmulticast mode [ 69.571115][ T6477] __nla_validate_parse: 3 callbacks suppressed [ 69.571132][ T6477] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1274'. [ 69.589215][ T6470] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 69.610931][ T6477] loop5: detected capacity change from 0 to 1024 [ 69.618980][ T6477] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 69.628920][ T6477] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (49802!=20869) [ 69.649263][ T6477] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 69.655671][ T6484] loop4: detected capacity change from 0 to 128 [ 69.674036][ T6477] EXT4-fs error (device loop5): ext4_get_journal_inode:5798: inode #5: comm syz.5.1274: unexpected bad inode w/o EXT4_IGET_BAD [ 69.689177][ T6477] EXT4-fs (loop5): no journal found [ 69.694431][ T6477] EXT4-fs (loop5): can't get journal size [ 69.704392][ T6484] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 69.712325][ T6484] FAT-fs (loop4): Filesystem has been set read-only [ 69.716240][ T6477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.722099][ T6484] syz.4.1277: attempt to access beyond end of device [ 69.722099][ T6484] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 69.738963][ T6477] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1274: Invalid block bitmap block 0 in block_group 0 [ 69.758692][ T6484] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 69.766536][ T6484] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 69.775643][ T6484] syz.4.1277: attempt to access beyond end of device [ 69.775643][ T6484] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.789343][ T6484] syz.4.1277: attempt to access beyond end of device [ 69.789343][ T6484] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.803361][ T6484] syz.4.1277: attempt to access beyond end of device [ 69.803361][ T6484] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.820346][ T5697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.949110][ T6513] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 69.987898][ T6516] loop2: detected capacity change from 0 to 164 [ 70.001144][ T6516] syz.2.1291: attempt to access beyond end of device [ 70.001144][ T6516] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 70.025453][ T6516] syz.2.1291: attempt to access beyond end of device [ 70.025453][ T6516] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 70.355859][ T6551] loop5: detected capacity change from 0 to 2048 [ 70.389104][ T6551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.412437][ T6550] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 70.478676][ T6550] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 1 with error 28 [ 70.491427][ T6550] EXT4-fs (loop5): This should not happen!! Data will be lost [ 70.491427][ T6550] [ 70.501149][ T6550] EXT4-fs (loop5): Total free blocks count 0 [ 70.507155][ T6550] EXT4-fs (loop5): Free/Dirty block details [ 70.513148][ T6550] EXT4-fs (loop5): free_blocks=2415919104 [ 70.518908][ T6550] EXT4-fs (loop5): dirty_blocks=16 [ 70.524153][ T6550] EXT4-fs (loop5): Block reservation details [ 70.530172][ T6550] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 70.556557][ T5697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.841536][ T6573] SELinux: failed to load policy [ 70.924618][ T6581] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.1316'. [ 71.143770][ T6605] loop3: detected capacity change from 0 to 128 [ 71.156563][ T6605] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.177235][ T6608] loop5: detected capacity change from 0 to 1024 [ 71.184069][ T6608] EXT4-fs: Ignoring removed nobh option [ 71.191213][ T6608] ext2: Unknown parameter 'dont_hash' [ 71.191746][ T6605] ext4 filesystem being mounted at /270/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.200734][ T6608] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 71.260053][ T6605] gretap0: entered promiscuous mode [ 71.265503][ T6605] macsec1: entered promiscuous mode [ 71.270970][ T6605] macsec1: entered allmulticast mode [ 71.276497][ T6605] gretap0: entered allmulticast mode [ 71.283747][ T6605] gretap0: left allmulticast mode [ 71.289715][ T6605] gretap0: left promiscuous mode [ 71.385741][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.454118][ T6632] loop5: detected capacity change from 0 to 512 [ 71.464445][ T6632] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 71.496433][ T6632] EXT4-fs (loop5): 1 truncate cleaned up [ 71.503565][ T6632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.530446][ T6632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.600095][ T6647] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.662752][ T6647] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.711892][ T6647] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.767913][ T6647] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.835304][ T6647] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.858983][ T6647] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.872888][ T6647] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.903199][ T6669] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 71.923021][ T6647] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.047394][ T6684] netlink: 'syz.2.1362': attribute type 10 has an invalid length. [ 72.073500][ T6684] bridge0: port 1(team0) entered disabled state [ 72.092287][ T6684] team0: left allmulticast mode [ 72.097282][ T6684] team0: left promiscuous mode [ 72.102347][ T6684] bridge0: port 1(team0) entered disabled state [ 72.112607][ T6684] batman_adv: batadv0: Adding interface: team0 [ 72.118858][ T6684] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.144033][ T6684] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 72.145072][ T6695] netlink: 'syz.2.1362': attribute type 10 has an invalid length. [ 72.162375][ T6695] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1362'. [ 72.171854][ T6695] team0: entered promiscuous mode [ 72.177226][ T6695] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.184312][ T6695] batman_adv: batadv0: Interface activated: team0 [ 72.191555][ T6695] batman_adv: batadv0: Interface deactivated: team0 [ 72.198209][ T6695] batman_adv: batadv0: Removing interface: team0 [ 72.207270][ T6694] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1368'. [ 72.217000][ T6695] bridge0: port 1(team0) entered blocking state [ 72.224080][ T6695] bridge0: port 1(team0) entered disabled state [ 72.232738][ T6695] team0: entered allmulticast mode [ 72.377306][ T6711] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.440197][ T6711] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.486207][ T6720] loop2: detected capacity change from 0 to 1024 [ 72.495749][ T6711] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.524188][ T6720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.536727][ T6720] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.550880][ T6711] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.618163][ T6711] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.640667][ T6711] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.652770][ T6711] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.666331][ T6711] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.683191][ T6734] loop3: detected capacity change from 0 to 1024 [ 72.701354][ T6734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.771392][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 72.771409][ T29] audit: type=1400 audit(2000000026.490:1801): avc: denied { prog_load } for pid=6745 comm="syz.4.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.797502][ T29] audit: type=1400 audit(2000000026.490:1802): avc: denied { bpf } for pid=6745 comm="syz.4.1389" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.818124][ T29] audit: type=1400 audit(2000000026.490:1803): avc: denied { perfmon } for pid=6745 comm="syz.4.1389" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.840924][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.842592][ T29] audit: type=1400 audit(2000000026.490:1804): avc: denied { prog_run } for pid=6749 comm="syz.5.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.869655][ T29] audit: type=1400 audit(2000000026.490:1805): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.889461][ T29] audit: type=1400 audit(2000000026.580:1806): avc: denied { create } for pid=6749 comm="syz.5.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.892570][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1391'. [ 72.910857][ T29] audit: type=1400 audit(2000000026.620:1807): avc: denied { write } for pid=6749 comm="syz.5.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.986653][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1391'. [ 72.997940][ T29] audit: type=1400 audit(2000000026.670:1808): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.022949][ T29] audit: type=1400 audit(2000000026.670:1809): avc: denied { open } for pid=3312 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.047154][ T29] audit: type=1400 audit(2000000026.670:1810): avc: denied { ioctl } for pid=3312 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.077446][ T6758] loop3: detected capacity change from 0 to 512 [ 73.086311][ T6758] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.101848][ T6758] EXT4-fs (loop3): 1 truncate cleaned up [ 73.108060][ T6758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.125430][ T6762] SELinux: ebitmap: truncated map [ 73.133130][ T6758] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.150138][ T6762] SELinux: failed to load policy [ 73.195919][ T6775] loop4: detected capacity change from 0 to 2048 [ 73.220047][ T6775] loop4: p1 < > p4 [ 73.227099][ T6775] loop4: p4 size 8388608 extends beyond EOD, truncated [ 73.322649][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.358833][ T6795] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1409'. [ 73.374972][ T6795] 0ªX¹¦À: renamed from caif0 [ 73.403694][ T6795] 0ªX¹¦À: entered allmulticast mode [ 73.408984][ T6795] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 73.446769][ T6805] bond3: entered promiscuous mode [ 73.451978][ T6805] bond3: entered allmulticast mode [ 73.467900][ T6805] 8021q: adding VLAN 0 to HW filter on device bond3 [ 73.477953][ T6805] bond3 (unregistering): Released all slaves [ 73.678729][ T9] ================================================================== [ 73.686862][ T9] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 73.693908][ T9] [ 73.696227][ T9] read-write to 0xffff888237d299a4 of 4 bytes by task 3378 on cpu 1: [ 73.704284][ T9] wq_worker_running+0x98/0x130 [ 73.709137][ T9] schedule_timeout+0xbc/0x170 [ 73.713912][ T9] msleep+0x4f/0x90 [ 73.717725][ T9] nsim_fib_event_work+0x1ff4/0x2290 [ 73.723013][ T9] process_scheduled_works+0x4de/0xa20 [ 73.728485][ T9] worker_thread+0x52c/0x710 [ 73.733094][ T9] kthread+0x4b7/0x540 [ 73.737165][ T9] ret_from_fork+0x4b/0x60 [ 73.741579][ T9] ret_from_fork_asm+0x1a/0x30 [ 73.746354][ T9] [ 73.748682][ T9] read to 0xffff888237d299a4 of 4 bytes by task 9 on cpu 0: [ 73.755964][ T9] kick_pool+0x4d/0x2c0 [ 73.760128][ T9] __queue_work+0x8f8/0xbb0 [ 73.764631][ T9] queue_work_on+0xdf/0x190 [ 73.769133][ T9] wg_queue_enqueue_per_peer_tx+0x124/0x270 [ 73.775041][ T9] wg_packet_encrypt_worker+0x9ee/0xb90 [ 73.780621][ T9] process_scheduled_works+0x4de/0xa20 [ 73.786101][ T9] worker_thread+0x52c/0x710 [ 73.790693][ T9] kthread+0x4b7/0x540 [ 73.794782][ T9] ret_from_fork+0x4b/0x60 [ 73.799215][ T9] ret_from_fork_asm+0x1a/0x30 [ 73.803985][ T9] [ 73.806301][ T9] value changed: 0x00000000 -> 0x00000001 [ 73.812021][ T9] [ 73.814339][ T9] Reported by Kernel Concurrency Sanitizer on: [ 73.820570][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(voluntary) [ 73.832812][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 73.842880][ T9] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 73.849421][ T9] ==================================================================