last executing test programs: 3m1.854218763s ago: executing program 4 (id=4957): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="1441c05461f0006fb748ea3d85ad", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0xec, 0x6, @link_local}, 0x14) 3m1.763107795s ago: executing program 4 (id=4959): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh]}}}}}}}, 0x0) 3m1.754257345s ago: executing program 4 (id=4961): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 3m0.867347358s ago: executing program 4 (id=4997): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000010140)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@bsdgroups}]}, 0x1, 0x562, &(0x7f0000001080)="$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") open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x1284, 0x1, 0x2, 0x169}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 3m0.840911578s ago: executing program 4 (id=5000): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 3m0.537322483s ago: executing program 4 (id=5009): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) 3m0.508135383s ago: executing program 32 (id=5009): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) 2m28.44459352s ago: executing program 5 (id=5898): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [], 'veth0_to_team\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x4, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 2m28.358644112s ago: executing program 5 (id=5912): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000010c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r3, 0x0, 0x3}}, 0x20) 2m28.274738893s ago: executing program 5 (id=5917): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x7, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3, 0x0, 0xbed}, 0x18) close_range(r0, r1, 0x0) 2m28.231620704s ago: executing program 5 (id=5920): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000740)=ANY=[@ANYRESDEC], 0x0, 0x6fe, &(0x7f0000001340)="$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") fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) fadvise64(0xffffffffffffffff, 0x8000, 0x4101, 0x3) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000240)={&(0x7f00000003c0)=""/128, 0xffffffffffffff80}) 2m28.003727707s ago: executing program 5 (id=5929): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd25, 0x25dfdbfd, {0x2, 0x8, 0x0, 0xcb, r2}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_FLAGS={0x8, 0x8, 0x148}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfffffdb5}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m27.779511141s ago: executing program 5 (id=5935): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x400000000000000}, 0x18) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x9381, 0x80, 0x7ffff, 0x2000088}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff, 0x1400}) io_uring_enter(r1, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 2m27.779154461s ago: executing program 33 (id=5935): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x400000000000000}, 0x18) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x9381, 0x80, 0x7ffff, 0x2000088}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff, 0x1400}) io_uring_enter(r1, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 49.749242349s ago: executing program 0 (id=8852): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x5fef, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 49.567727102s ago: executing program 0 (id=8857): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x65, 0xff, 0x5e, 0xb, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0x8}, 0x1a, 0x7, 0x800, 0x4, 0xc, 0x4002}, 0x0, 0x4000000001, 0xffffffffffffffff, 0x1) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r3, &(0x7f0000000080), 0x4) 49.291955496s ago: executing program 0 (id=8861): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") creat(&(0x7f0000000280)='./bus\x00', 0x2) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) truncate(0x0, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 49.291190626s ago: executing program 0 (id=8872): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) 49.114391679s ago: executing program 0 (id=8875): openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r1, 0xa, 0x12) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) bpf$MAP_CREATE(0x0, 0x0, 0x48) mount$cgroup(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x8000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 48.928942182s ago: executing program 0 (id=8865): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_EMATCHES={0x38, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x6}, {0x3, 0x10, 0x3, 0x2, 0x4, 0x2, 0x1}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9, 0x8, 0x5}, {0x3, 0x1}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008041}, 0x20000040) 48.907058242s ago: executing program 34 (id=8865): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_EMATCHES={0x38, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x6}, {0x3, 0x10, 0x3, 0x2, 0x4, 0x2, 0x1}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9, 0x8, 0x5}, {0x3, 0x1}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008041}, 0x20000040) 2.176656747s ago: executing program 3 (id=10175): io_uring_setup(0x6812, &(0x7f0000000780)={0x0, 0x9864, 0x0, 0x2}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xd9) close(0x3) r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x3000000) socket$nl_route(0x10, 0x3, 0x0) 1.738292574s ago: executing program 2 (id=10190): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x811) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r1, 0x0, 0xfffffeea) 1.28097748s ago: executing program 3 (id=10201): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 1.220364112s ago: executing program 3 (id=10204): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8402, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, 0x0) 1.203938951s ago: executing program 6 (id=10205): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r3, &(0x7f00000005c0)="04", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffff9, @rand_addr=' \x01\x00'}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 1.139740733s ago: executing program 6 (id=10206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x38, &(0x7f0000000640)={0x0, 0xadde, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r2, 0xd81, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) 1.133731983s ago: executing program 3 (id=10207): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX, @ANYBLOB="00006b746769643d0092", @ANYRESDEC, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) getresgid(&(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340)) getegid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = msgget$private(0x0, 0x100) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@private, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000000180)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in=@broadcast, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)=0x0) r7 = fcntl$getown(r1, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, 0x0) r9 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r9, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}}) msgsnd(r9, &(0x7f0000000380)=ANY=[@ANYBLOB="030000"], 0x0, 0x0) msgrcv(r9, 0x0, 0x0, 0x3, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(r9, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, r10}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x2, 0x0, 0x0, r8, r10, 0x100, 0x4}, 0x0, 0x0, 0x21b, 0x4, 0x7, 0x8, 0x4, 0xf3, 0x5, 0x6db3}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x0, @perf_config_ext={0xb10, 0x2}, 0x8, 0x2, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000640)={{0x3, r3, r10, r4, r5, 0x80, 0x3}, 0x0, 0x0, 0x1, 0xffffffffed14e938, 0xd, 0xb, 0x7, 0xc000, 0xdb, 0x9, r6, r7}) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000840)='./file2\x00', r11, r12) 897.211126ms ago: executing program 3 (id=10209): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@errors_continue}, {@noinit_itable}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) 830.071977ms ago: executing program 2 (id=10210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x20040054) 758.174089ms ago: executing program 2 (id=10211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = epoll_create1(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)) 738.583949ms ago: executing program 2 (id=10212): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x101, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") mkdir(&(0x7f0000000140)='./file0\x00', 0x1) 713.435529ms ago: executing program 2 (id=10214): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="020114000129184ad4a08058195c60140000002f0600ac141414e0ecff02808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e46691e233da4d163f53ab1b3f65c3042e749c2d4c8303a0f7fbda34fb8825f80200a3"], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x0) 665.7073ms ago: executing program 2 (id=10217): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x100, @empty}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0x60010000000, 0x1000000000000000) 455.550623ms ago: executing program 7 (id=10222): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e00000004000000040000000200020000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/17], 0x48) 392.016334ms ago: executing program 1 (id=10223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000150a0102"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040808) 391.687644ms ago: executing program 1 (id=10224): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4bb, &(0x7f0000000580)="$eJzs3cuLXFUaAPCvqtLP9EweMwxJBiaBDGQepKsfDOmemcUMDMzMIjBMwI1CbLsrbUx1V9NVHdNNFh3dZeFCFAVx4d6/wI1ZGQVxrXtxIRGNLagglNxbVUm/KpaxUyV9fz+o9Dn33NR3Thff4da59/YNILNOJf/kIkYi4oOIONSobt3hVOPHxt3rs8krF/X6hc9z6X5JvbVr6/8djIj1iBiMiP//O+Kp3M641dW1KzPlcmm5WS/WFpaK1dW1s5cXZuZL86XF8alz09NTY5MT03s21psvPHPz/Fv/7X/z6+fv3H7xnbeTbo002zaPYy81ht4XRzZtOxARf38UwXqg0BzPUK87wkNJPr9fRcTpNP8PRSH9NIEsqNfr9e/qA+2a1+vAvpVPj4Fz+dGIaJTz/6qPNo7hfx3D+XKlWvvzpcrK4lzjWPlw9OUvXS6XxprfFQ5HXy6pj6fl+/WJbfXJiPQY+KXCUFofna2U57o71QHbHNyW/18V8vnRpBJ/6nXXgG7wlR+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kN2yX/IpP+dP5+86q373+eurq5cqVw9O5fMCQsrs6OzleWl0flKZT69Z2fhh96vXKksjf8lVq4Va6VqrVhdXbu4UFlZrF1M7+u/WOrryqiAThw5eeujXESs/3UofSX6m21yFfa3ej0Xvb4HGeiNQq8nIKBnLP1BdvmOD+zyJ3q3GGzXsLT3fQG6I9/rDgA9c+a483+QVdb/Ibus/0N2OcYHrP9D9lj/h+wa2fn8r/T5P7/Y9OyusYj4ZUR8WOgbaD3rC9gP8p/mmsf/Zw79fmR7a3/um/QUQX9EPPvahVeuzdRqy+PJ9i/uba+92tw+0Yv+A51q5WkrjwGA7Nq4e3229epm3M/+2bgIYWf8A821ycH0HOXwRm7LtQq5Pbp2Yf1GRBzbLX6u+bzzxpmP4Y3CjvhHmz9zjbdI+3sgfW56d+If3xT/d5vin/jJvxXIhlvJ/DO2W/7l05yOe/m3df4Z2aNrJ9rPf/l781+hzfx3ssMYT7/+3Cdt49+IOLFr/Fa8wTTW9vhJ3850GP/OE4/9pl1b/Y3G++wWvyUpFWsLS8Xq6trZ9O/IzZcWx6fOTU9PjU1OTBfTNepia6V6p78de//2g8Y/3CZ+u/H/o9mnP3Y4/m9/+97jpx4Q/w+nd//8j7aJnxj6EU/o/3Li4yfbtSXx59qMP78z/rvD0WqNmOwwfvXl/wx0uCsA0AXV1bUrM+VyaVlBQeEhCgM/j27seaHXMxPwqN1P+l73BAAAAAAAAAAAAOhUNy4n7vUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2g+8DAAD//3bC1tg=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r3}, 0x10) pwrite64(r1, &(0x7f0000000940)='2', 0x1, 0x8000c61) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x3920e, r0, 0x5, 0x1, 0x9000000, 0x6}) 387.658954ms ago: executing program 7 (id=10225): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 368.341374ms ago: executing program 1 (id=10226): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 363.818414ms ago: executing program 7 (id=10227): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r0, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$TCSETSW2(r5, 0x5437, 0x0) 293.645835ms ago: executing program 7 (id=10228): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) close(r0) 293.448736ms ago: executing program 6 (id=10229): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo\x00') getdents(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r1, 0xffffffffffffffff, 0x0) 289.850506ms ago: executing program 6 (id=10230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="150500000000ffdbdf250300000008000100", @ANYRES32=r2], 0x140}}, 0x0) 217.286086ms ago: executing program 6 (id=10231): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 174.508397ms ago: executing program 1 (id=10232): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") socket$inet6(0xa, 0x800000000000002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002540)={{r0}, &(0x7f00000024c0), &(0x7f0000002500)}, 0x20) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x40044591, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x0, 0x0) 137.840668ms ago: executing program 6 (id=10233): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52d, &(0x7f0000001500)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000740)=ANY=[], 0x835, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x4ea, 0x10001, 0x0, 0x8}) 128.971648ms ago: executing program 1 (id=10234): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff9}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 56.906049ms ago: executing program 7 (id=10235): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x1000, 0xc8, 0xf2db72b, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fe08f50e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 56.515569ms ago: executing program 1 (id=10236): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000003c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfd12) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 42.273219ms ago: executing program 7 (id=10237): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000001000080ff0f0000040000000001", @ANYRES32, @ANYBLOB="010100"/19, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 0s ago: executing program 3 (id=10247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = eventfd2(0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) close_range(r2, r3, 0x0) kernel console output (not intermixed with test programs): p3): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /1714/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0 [ 256.991153][T20869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.001357][T23956] bio_check_eod: 16 callbacks suppressed [ 257.001372][T23956] kmmpd-loop3: attempt to access beyond end of device [ 257.001372][T23956] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 257.020677][T23956] buffer_io_error: 2244 callbacks suppressed [ 257.020689][T23956] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 257.287812][T23974] pimreg0: tun_chr_ioctl cmd 35108 [ 257.413887][T23993] IPv4: Oversized IP packet from 127.202.26.0 [ 257.487123][T23970] chnl_net:caif_netlink_parms(): no params data found [ 257.574388][T23970] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.581578][T23970] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.590929][T23970] bridge_slave_0: entered allmulticast mode [ 257.600352][T23970] bridge_slave_0: entered promiscuous mode [ 257.607401][T23970] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.614585][T23970] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.622292][T23970] bridge_slave_1: entered allmulticast mode [ 257.628759][T23970] bridge_slave_1: entered promiscuous mode [ 257.656488][T23970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.667620][T23970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.688691][T23970] team0: Port device team_slave_0 added [ 257.695680][T23970] team0: Port device team_slave_1 added [ 257.725478][T23970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.732541][T23970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.758498][T23970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.769892][T23970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.776887][T23970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.802955][T23970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.831608][T23970] hsr_slave_0: entered promiscuous mode [ 257.837700][T23970] hsr_slave_1: entered promiscuous mode [ 257.843623][T23970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.851221][T23970] Cannot create hsr debugfs directory [ 258.077578][T23970] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 258.091229][T23970] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 258.104629][ T29] kauditd_printk_skb: 601 callbacks suppressed [ 258.104647][ T29] audit: type=1400 audit(1744459310.733:9007): avc: denied { mount } for pid=24022 comm="syz.6.8726" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 258.141559][T23970] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 258.154423][T23970] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 258.210847][T23970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.223311][T23970] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.240554][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.247675][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.254941][ T29] audit: type=1400 audit(1744459310.883:9008): avc: denied { unmount } for pid=17489 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 258.258716][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.282176][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.320472][T24036] tipc: New replicast peer: 255.255.255.255 [ 258.326616][T24036] tipc: Enabled bearer , priority 10 [ 258.386527][T23970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.476440][T23970] veth0_vlan: entered promiscuous mode [ 258.498076][T23970] veth1_vlan: entered promiscuous mode [ 258.545852][T23970] veth0_macvtap: entered promiscuous mode [ 258.553253][T23970] veth1_macvtap: entered promiscuous mode [ 258.564827][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.575407][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.585377][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.596024][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.605917][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.616438][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.626344][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.636947][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.647038][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.657622][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.667586][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.678108][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.688702][T23970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.703731][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.714292][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.724183][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.734763][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.744828][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.755258][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.765176][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.775637][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.785458][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.795957][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.805917][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.816460][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.828262][T23970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.838155][T23970] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.846932][T23970] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.855772][T23970] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.864678][T23970] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.885303][ T29] audit: type=1400 audit(1744459311.513:9009): avc: denied { mounton } for pid=23970 comm="syz-executor" path="/root/syzkaller.HuRHDm/syz-tmp" dev="sda1" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 258.911542][ T29] audit: type=1400 audit(1744459311.513:9010): avc: denied { mount } for pid=23970 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 258.933611][ T29] audit: type=1400 audit(1744459311.513:9011): avc: denied { mounton } for pid=23970 comm="syz-executor" path="/root/syzkaller.HuRHDm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 258.960549][ T29] audit: type=1400 audit(1744459311.513:9012): avc: denied { mounton } for pid=23970 comm="syz-executor" path="/root/syzkaller.HuRHDm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=69922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 258.988848][ T29] audit: type=1400 audit(1744459311.543:9013): avc: denied { mounton } for pid=23970 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 259.011961][ T29] audit: type=1400 audit(1744459311.543:9014): avc: denied { mount } for pid=23970 comm="syz-executor" name="/" dev="gadgetfs" ino=3757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 259.050165][T24074] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 259.063747][ T29] audit: type=1400 audit(1744459311.673:9015): avc: denied { bind } for pid=24070 comm="syz.0.8753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 259.106556][T24079] tipc: Started in network mode [ 259.111682][T24079] tipc: Node identity ac14140f, cluster identity 4711 [ 259.122993][T24079] tipc: New replicast peer: 255.255.255.255 [ 259.129108][T24079] tipc: Enabled bearer , priority 10 [ 259.199673][T24087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8749'. [ 259.203987][ T29] audit: type=1400 audit(1744459311.823:9016): avc: denied { create } for pid=24088 comm="syz.0.8751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 259.208619][T24087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8749'. [ 259.244279][T24087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8749'. [ 259.380194][T24111] syz_tun: entered allmulticast mode [ 259.396261][T24110] syz_tun: left allmulticast mode [ 259.824419][T24146] syz_tun: entered allmulticast mode [ 259.840479][T24145] syz_tun: left allmulticast mode [ 259.973591][T24162] sg_write: data in/out 33856/8 bytes for SCSI command 0x6e-- guessing data in; [ 259.973591][T24162] program syz.0.8786 not setting count and/or reply_len properly [ 260.034529][T24170] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 260.048299][T24168] loop3: detected capacity change from 0 to 512 [ 260.055247][T24168] EXT4-fs: Ignoring removed mblk_io_submit option [ 260.093896][T24168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.106669][T24168] ext4 filesystem being mounted at /12/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.187690][T24177] syz_tun: entered allmulticast mode [ 260.204831][T24176] syz_tun: left allmulticast mode [ 260.241322][ T3377] tipc: Node number set to 2886997007 [ 260.274670][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.347809][T24190] sd 0:0:1:0: device reset [ 260.500185][T24206] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 260.500185][T24206] program syz.0.8805 not setting count and/or reply_len properly [ 260.707686][T24216] sg_write: data in/out 33856/8 bytes for SCSI command 0x6e-- guessing data in; [ 260.707686][T24216] program syz.2.8808 not setting count and/or reply_len properly [ 260.926201][T24233] ALSA: seq fatal error: cannot create timer (-19) [ 260.967540][T24240] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 260.967540][T24240] program syz.2.8818 not setting count and/or reply_len properly [ 261.579659][T24283] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 261.579659][T24283] program syz.3.8833 not setting count and/or reply_len properly [ 261.616973][T24286] loop3: detected capacity change from 0 to 512 [ 261.623975][T24286] EXT4-fs: Ignoring removed nobh option [ 261.647199][T24286] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #16: comm syz.3.8834: corrupted inode contents [ 261.659646][T24286] EXT4-fs (loop3): Remounting filesystem read-only [ 261.666417][T24286] EXT4-fs (loop3): 1 truncate cleaned up [ 261.672738][T24286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.685389][ T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 261.685871][T24286] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.695985][ T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 261.720095][ T37] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 261.740117][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.777076][T24297] sd 0:0:1:0: device reset [ 261.827158][T24303] pim6reg1: entered promiscuous mode [ 261.832527][T24303] pim6reg1: entered allmulticast mode [ 261.847128][T24305] SELinux: ebitmap: truncated map [ 261.853509][T24305] SELinux: failed to load policy [ 261.907856][T24313] netlink: 'syz.3.8845': attribute type 4 has an invalid length. [ 261.915753][T24313] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8845'. [ 261.942865][T24313] : renamed from bond0 (while UP) [ 262.153518][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.160964][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.168502][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.176004][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.186474][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.193947][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.201481][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.208878][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.216315][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.223870][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.231323][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.231353][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.231380][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.231443][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.231518][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.231553][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.231577][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.231680][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.231707][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.231761][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.231789][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.231810][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.231831][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.231851][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.231876][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.231957][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.231986][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.232027][ T3377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 262.312281][T24345] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 262.314186][ T3377] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz0] on syz0 [ 262.625077][T24356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.635619][T24356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.645493][T24356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.656071][T24356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.666049][T24356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.676499][T24356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.686349][T24356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.696840][T24356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.706699][T24356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.717186][T24356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.727091][T24356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.737524][T24356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.747445][T24356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.757902][T24356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.768003][T24356] batadv_slave_0: entered promiscuous mode [ 262.775047][T24356] batadv_slave_0: left promiscuous mode [ 262.958481][T24387] rtc_cmos 00:00: Alarms can be up to one day in the future [ 262.969457][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 262.977114][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 262.984954][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 262.992749][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 263.000237][ T10] rtc rtc0: __rtc_set_alarm: err=-22 [ 263.073654][T24370] chnl_net:caif_netlink_parms(): no params data found [ 263.113697][T24370] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.120805][T24370] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.128282][T24370] bridge_slave_0: entered allmulticast mode [ 263.135178][T24370] bridge_slave_0: entered promiscuous mode [ 263.142081][T24370] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.149209][T24370] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.156497][T24370] bridge_slave_1: entered allmulticast mode [ 263.163237][T24370] bridge_slave_1: entered promiscuous mode [ 263.181452][T24370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.191923][T24370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.212079][T24370] team0: Port device team_slave_0 added [ 263.218856][T24370] team0: Port device team_slave_1 added [ 263.236417][T24370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.243410][T24370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.269401][T24370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.280887][T24370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.287950][T24370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.314051][T24370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.342228][T24370] hsr_slave_0: entered promiscuous mode [ 263.348473][T24370] hsr_slave_1: entered promiscuous mode [ 263.354450][T24370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.362092][T24370] Cannot create hsr debugfs directory [ 263.431087][T24370] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 263.440001][T24370] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 263.449300][T24370] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 263.458689][T24370] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 263.475300][T24370] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.482454][T24370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.489769][T24370] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.496840][T24370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.533920][T24370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.546835][ T1644] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.554930][ T1644] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.567348][T24370] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.578502][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.585704][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.597028][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.604225][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.632892][T24370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.681077][T24370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.782592][T24370] veth0_vlan: entered promiscuous mode [ 263.790408][T24370] veth1_vlan: entered promiscuous mode [ 263.807493][T24370] veth0_macvtap: entered promiscuous mode [ 263.816250][T24370] veth1_macvtap: entered promiscuous mode [ 263.829584][T24370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.840141][T24370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.850040][T24370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.860481][T24370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.870599][T24370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.881230][T24370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.891079][T24370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.901623][T24370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.911516][T24370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.922035][T24370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.931872][T24370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.942419][T24370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.952313][T24370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.962752][T24370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.973863][T24370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.988385][T24370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.998962][T24370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.008903][T24370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.019640][T24370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.029790][T24370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.040464][T24370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.050349][T24370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.060878][T24370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.070761][T24370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.081328][T24370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.091299][T24370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.101893][T24370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.111914][T24370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.122517][T24370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.136693][T24370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.146365][T24370] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.155202][T24370] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.164055][T24370] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.172785][T24370] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.221490][T24438] block device autoloading is deprecated and will be removed. [ 264.229134][T24438] syz.7.8866: attempt to access beyond end of device [ 264.229134][T24438] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 264.292785][T24444] sd 0:0:1:0: device reset [ 264.381982][T24451] SELinux: ebitmap: truncated map [ 264.388199][T24451] SELinux: failed to load policy [ 264.426629][T24456] pim6reg1: entered promiscuous mode [ 264.432089][T24456] pim6reg1: entered allmulticast mode [ 264.608893][T24476] sd 0:0:1:0: device reset [ 264.636931][T24482] netlink: 'syz.7.8900': attribute type 4 has an invalid length. [ 264.644831][T24482] netlink: 152 bytes leftover after parsing attributes in process `syz.7.8900'. [ 264.657327][T24482] : renamed from bond0 (while UP) [ 266.056405][T24502] ALSA: seq fatal error: cannot create timer (-19) [ 266.086220][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 266.086238][ T29] audit: type=1326 audit(1744459318.713:9135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24513 comm="syz.1.8922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 266.126088][ T29] audit: type=1326 audit(1744459318.713:9136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24513 comm="syz.1.8922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 266.149752][ T29] audit: type=1326 audit(1744459318.713:9137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24513 comm="syz.1.8922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 266.173476][ T29] audit: type=1326 audit(1744459318.713:9138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24513 comm="syz.1.8922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 266.197080][ T29] audit: type=1326 audit(1744459318.713:9139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24513 comm="syz.1.8922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 266.220647][ T29] audit: type=1326 audit(1744459318.713:9140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24513 comm="syz.1.8922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 266.244218][ T29] audit: type=1326 audit(1744459318.713:9141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24513 comm="syz.1.8922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 266.267766][ T29] audit: type=1326 audit(1744459318.713:9142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24513 comm="syz.1.8922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 266.291332][ T29] audit: type=1326 audit(1744459318.713:9143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24513 comm="syz.1.8922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 266.314780][ T29] audit: type=1326 audit(1744459318.713:9144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24513 comm="syz.1.8922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 266.404643][T24527] sd 0:0:1:0: device reset [ 266.578092][T24531] chnl_net:caif_netlink_parms(): no params data found [ 266.616232][T24531] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.623475][T24531] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.630866][T24531] bridge_slave_0: entered allmulticast mode [ 266.637620][T24531] bridge_slave_0: entered promiscuous mode [ 266.644467][T24531] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.651592][T24531] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.658889][T24531] bridge_slave_1: entered allmulticast mode [ 266.665634][T24531] bridge_slave_1: entered promiscuous mode [ 266.685230][T24531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.695926][T24531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.716518][T24531] team0: Port device team_slave_0 added [ 266.723218][T24531] team0: Port device team_slave_1 added [ 266.740130][T24531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.747143][T24531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.773105][T24531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.784541][T24531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.791533][T24531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.817529][T24531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.845306][T24531] hsr_slave_0: entered promiscuous mode [ 266.851572][T24531] hsr_slave_1: entered promiscuous mode [ 266.857459][T24531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.865102][T24531] Cannot create hsr debugfs directory [ 266.907663][T24548] loop3: detected capacity change from 0 to 512 [ 266.920907][T24548] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 266.929526][T24548] EXT4-fs (loop3): orphan cleanup on readonly fs [ 266.946967][T24531] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.967779][T24548] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.8914: Failed to acquire dquot type 1 [ 266.979825][T24548] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8914: bg 0: block 40: padding at end of block bitmap is not set [ 266.998573][T24548] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 267.007952][T24548] EXT4-fs (loop3): 1 truncate cleaned up [ 267.014763][T24548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 267.050248][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.068748][T24559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8921'. [ 267.083472][T24559] team0 (unregistering): Port device team_slave_0 removed [ 267.101287][T24559] team0 (unregistering): Port device team_slave_1 removed [ 267.209836][T24578] syz_tun: entered allmulticast mode [ 267.216527][T24578] syz_tun: left allmulticast mode [ 267.379436][T24591] loop3: detected capacity change from 0 to 512 [ 267.396143][T24591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.408864][T24591] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.426114][T24591] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #18: comm syz.3.8938: corrupted inode contents [ 267.438781][T24591] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #18: comm syz.3.8938: mark_inode_dirty error [ 267.451564][T24591] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #18: comm syz.3.8938: corrupted inode contents [ 267.467947][T24591] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.8938: mark_inode_dirty error [ 267.480734][T24591] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.8938: mark inode dirty (error -117) [ 267.496683][T24591] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117) [ 267.564505][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.704449][T24531] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.753844][T24531] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.804223][T24531] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.886917][T24531] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 267.895847][T24531] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 267.905466][T24531] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 267.914453][T24531] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 267.955688][T24531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.968591][T24531] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.978716][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.985868][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.998556][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.005727][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.033456][T24531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.119805][T24531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.171595][T24622] netlink: 'syz.6.8949': attribute type 3 has an invalid length. [ 268.264050][T24631] SELinux: ebitmap: truncated map [ 268.279894][T24631] SELinux: failed to load policy [ 268.336409][T24531] veth0_vlan: entered promiscuous mode [ 268.345896][T24531] veth1_vlan: entered promiscuous mode [ 268.357086][T24643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8953'. [ 268.377509][T24643] team0 (unregistering): Port device team_slave_0 removed [ 268.395081][T24643] team0 (unregistering): Port device team_slave_1 removed [ 268.405811][ T3381] syz!: Port: 1 Link DOWN [ 268.415007][T24531] veth0_macvtap: entered promiscuous mode [ 268.433077][T24531] veth1_macvtap: entered promiscuous mode [ 268.439939][T24647] netlink: 'syz.6.8955': attribute type 10 has an invalid length. [ 268.453590][T24647] hsr_slave_0: left promiscuous mode [ 268.460657][T24647] hsr_slave_1: left promiscuous mode [ 268.471280][T24649] netlink: 'syz.3.8956': attribute type 10 has an invalid length. [ 268.479140][T24649] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8956'. [ 268.490072][T24649] dummy0: entered promiscuous mode [ 268.496023][T24649] bridge0: port 3(dummy0) entered blocking state [ 268.503049][T24649] bridge0: port 3(dummy0) entered disabled state [ 268.509797][T24649] dummy0: entered allmulticast mode [ 268.516135][T24649] bridge0: port 3(dummy0) entered blocking state [ 268.522611][T24649] bridge0: port 3(dummy0) entered forwarding state [ 268.534403][T24531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.545055][T24531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.555050][T24531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.565768][T24531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.575702][T24531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.586250][T24531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.596210][T24531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.606689][T24531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.616692][T24531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.627616][T24531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.637483][T24531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.648015][T24531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.657877][T24531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.668550][T24531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.678447][T24531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.688943][T24531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.690557][T24531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.708985][T24531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.719676][T24531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.729585][T24531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.740067][T24531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.749919][T24531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.760388][T24531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.770264][T24531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.780729][T24531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.780743][T24531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.780758][T24531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.780771][T24531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.780786][T24531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.780800][T24531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.780867][T24531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.780879][T24531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.780892][T24531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.785821][T24531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.807748][T24531] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.903810][T24531] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.903846][T24531] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.903940][T24531] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.109649][T24681] loop3: detected capacity change from 0 to 512 [ 269.147101][T24681] EXT4-fs (loop3): 1 orphan inode deleted [ 269.158530][T24681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.172500][ T126] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 269.188483][T24681] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.255683][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.408884][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.416454][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.423915][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.431347][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.438952][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.446374][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.453819][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.461435][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.468855][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.476544][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.483962][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.491497][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.498891][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.506337][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.513787][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.521340][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.528741][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.536185][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.543669][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.551063][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.558504][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.565946][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.573546][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.581143][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.581170][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.581198][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.581297][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.581384][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.581409][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.581440][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.581545][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.581567][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.581587][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.581812][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.581835][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.581860][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.581885][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.581910][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.581960][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.582017][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.582044][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.582068][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.582114][ T3378] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 269.584947][ T3378] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz0 [ 269.888209][T24759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.896894][T24759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.172428][T24776] sd 0:0:1:0: device reset [ 270.369858][T24791] pim6reg1: entered promiscuous mode [ 270.375332][T24791] pim6reg1: entered allmulticast mode [ 270.455572][T24798] pim6reg1: entered promiscuous mode [ 270.460940][T24798] pim6reg1: entered allmulticast mode [ 270.567976][T24811] $H: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 270.580606][T24811] $H: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 270.596139][T24811] $H: (slave ipvlan2): Error -95 calling set_mac_address [ 270.680932][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.688561][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.696006][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.703474][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.710909][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.718342][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.725746][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.733225][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.740815][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.748588][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.756108][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.763539][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.771029][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.778496][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.785929][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.793403][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.800807][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.808236][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.815732][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.823191][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.830575][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.838030][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.845458][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.852882][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.860290][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.867695][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.875088][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.882479][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.889874][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.897303][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.904705][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.912158][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.919601][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.927066][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.934546][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.941946][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.949352][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.956802][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.964249][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.971723][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.979111][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.986670][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 270.994198][ T3378] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 271.002712][ T3378] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz0 [ 271.030338][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810bfed000: rx timeout, send abort [ 271.038845][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88810bfed000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 271.160590][T24833] pim6reg1: entered promiscuous mode [ 271.165951][T24833] pim6reg1: entered allmulticast mode [ 271.208326][T24837] netlink: 'syz.6.9037': attribute type 21 has an invalid length. [ 271.291680][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.299150][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.306725][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.314272][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.321806][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.329285][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.336725][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.344244][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.351657][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.359232][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.366730][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.374281][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.381703][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.389138][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.396593][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.404164][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.411596][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.418996][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.426497][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.434031][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.441450][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.448944][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.456458][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.463918][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.471436][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.478893][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.486379][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.493813][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.501263][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.508705][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.516175][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.523607][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.531004][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.538422][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.545897][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.553337][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.560724][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.568229][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.575766][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.583439][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.590878][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.598275][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.605694][ T3378] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 271.613641][ T3378] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz0] on syz0 [ 271.646334][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 271.646351][ T29] audit: type=1400 audit(1744459324.273:9219): avc: denied { ioctl } for pid=24855 comm="syz.3.9054" path="socket:[72368]" dev="sockfs" ino=72368 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 271.804059][T24865] pim6reg1: entered promiscuous mode [ 271.809471][T24865] pim6reg1: entered allmulticast mode [ 271.897673][T24870] SELinux: ebitmap: truncated map [ 271.905370][T24870] SELinux: failed to load policy [ 272.038701][T24875] pim6reg1: entered promiscuous mode [ 272.044226][T24875] pim6reg1: entered allmulticast mode [ 272.320232][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810bfed200: rx timeout, send abort [ 272.320329][T24881] netlink: 'syz.6.9055': attribute type 4 has an invalid length. [ 272.329816][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88810bfed200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 272.339159][ T29] audit: type=1326 audit(1744459324.973:9220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24879 comm="syz.1.9064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 272.374483][ T29] audit: type=1326 audit(1744459324.973:9221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24879 comm="syz.1.9064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 272.398092][ T29] audit: type=1326 audit(1744459324.973:9222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24879 comm="syz.1.9064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 272.421574][ T29] audit: type=1326 audit(1744459324.973:9223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24879 comm="syz.1.9064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 272.445112][ T29] audit: type=1326 audit(1744459324.973:9224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24879 comm="syz.1.9064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 272.453442][T24886] netlink: 'syz.6.9055': attribute type 4 has an invalid length. [ 272.468492][ T29] audit: type=1326 audit(1744459324.973:9225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24879 comm="syz.1.9064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 272.468530][ T29] audit: type=1326 audit(1744459324.973:9226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24879 comm="syz.1.9064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 272.468560][ T29] audit: type=1326 audit(1744459324.973:9227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24879 comm="syz.1.9064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 272.468597][ T29] audit: type=1326 audit(1744459324.973:9228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24879 comm="syz.1.9064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 272.826227][T24913] SELinux: failed to load policy [ 273.014496][T24940] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 273.025792][T24938] IPVS: stopping master sync thread 24940 ... [ 273.058093][T24942] pim6reg1: entered promiscuous mode [ 273.063691][T24942] pim6reg1: entered allmulticast mode [ 273.082799][T24944] SELinux: ebitmap: truncated map [ 273.090563][T24944] SELinux: failed to load policy [ 273.163818][T24950] Falling back ldisc for ttyS3. [ 273.396099][T24975] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9092'. [ 273.411743][T24974] SELinux: ebitmap: truncated map [ 273.418867][T24974] SELinux: failed to load policy [ 273.581342][T24991] IPv4: Oversized IP packet from 127.202.26.0 [ 273.655739][T25000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.667690][T25000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.774950][T25006] pim6reg1: entered promiscuous mode [ 273.780332][T25006] pim6reg1: entered allmulticast mode [ 273.893181][T25010] SELinux: ebitmap: truncated map [ 273.900307][T25010] SELinux: failed to load policy [ 273.989742][T25018] netlink: 'syz.1.9110': attribute type 4 has an invalid length. [ 274.014571][T25016] netlink: 'syz.1.9110': attribute type 4 has an invalid length. [ 274.029917][T25016] lo: left promiscuous mode [ 274.034541][T25016] lo: left allmulticast mode [ 274.059665][T25024] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 274.060415][T25023] IPVS: stopping master sync thread 25024 ... [ 274.081149][ T51] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3 [ 274.203088][T25038] loop3: detected capacity change from 0 to 256 [ 274.218104][T25038] msdos: Bad value for 'gid' [ 274.222818][T25038] msdos: Bad value for 'gid' [ 274.451509][T25056] SELinux: ebitmap: truncated map [ 274.457739][T25056] SELinux: failed to load policy [ 274.555242][T25073] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 274.597187][T25077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9132'. [ 274.638862][T25080] SELinux: failed to load policy [ 274.821776][T25115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9145'. [ 274.906609][T25127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9151'. [ 275.082903][T25139] loop3: detected capacity change from 0 to 2048 [ 275.089470][T25139] EXT4-fs: Ignoring removed bh option [ 275.108181][T25139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.128118][T25139] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 275.175334][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.187047][ T3371] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 275.205235][ T3371] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 275.316286][T25166] ALSA: seq fatal error: cannot create timer (-19) [ 275.325644][T25164] SELinux: ebitmap: truncated map [ 275.342306][T25164] SELinux: failed to load policy [ 275.785243][T25182] pim6reg: entered allmulticast mode [ 275.791809][T25182] pim6reg: left allmulticast mode [ 275.958363][T25190] SELinux: ebitmap: truncated map [ 275.966538][T25190] SELinux: failed to load policy [ 276.107897][T25205] SELinux: failed to load policy [ 276.229219][T25218] vlan2: entered allmulticast mode [ 276.397452][T25241] netlink: 'syz.1.9197': attribute type 12 has an invalid length. [ 276.423931][T25243] binfmt_misc: register: failed to install interpreter file ./file2 [ 276.452937][T25248] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 276.506310][T25257] binfmt_misc: register: failed to install interpreter file ./file2 [ 276.564631][T25262] vlan2: entered allmulticast mode [ 276.613839][T25266] loop3: detected capacity change from 0 to 512 [ 276.651804][T25266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 276.670577][T25266] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.740818][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 276.816774][T25296] binfmt_misc: register: failed to install interpreter file ./file2 [ 276.866462][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 276.866481][ T29] audit: type=1400 audit(1744459329.493:9281): avc: denied { mount } for pid=25304 comm="syz.6.9232" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 276.901222][ T29] audit: type=1400 audit(1744459329.523:9282): avc: denied { mounton } for pid=25304 comm="syz.6.9232" path="/670/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 276.933114][T25308] ref_ctr_offset mismatch. inode: 0x107 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 276.947401][T25308] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 276.955877][T25308] ref_ctr decrement failed for inode: 0x107 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8881041ae880 [ 276.968179][ T29] audit: type=1400 audit(1744459329.573:9283): avc: denied { unmount } for pid=17489 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 276.990473][T25308] uprobe: syz.7.9223:25308 failed to unregister, leaking uprobe [ 277.000187][ T29] audit: type=1400 audit(1744459329.623:9284): avc: denied { bind } for pid=25306 comm="syz.3.9222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 277.020799][ T29] audit: type=1326 audit(1744459329.633:9285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25312 comm="syz.1.9234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efce354d169 code=0x0 [ 277.061567][ T29] audit: type=1326 audit(1744459329.683:9286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25317 comm="syz.3.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabbf33d169 code=0x7ffc0000 [ 277.061934][T25318] vlan2: entered allmulticast mode [ 277.085235][ T29] audit: type=1326 audit(1744459329.683:9287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25317 comm="syz.3.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabbf33d169 code=0x7ffc0000 [ 277.090358][T25318] bridge_slave_0: entered allmulticast mode [ 277.125352][ T29] audit: type=1326 audit(1744459329.693:9288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25317 comm="syz.3.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fabbf33d169 code=0x7ffc0000 [ 277.149045][ T29] audit: type=1326 audit(1744459329.693:9289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25317 comm="syz.3.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabbf33d169 code=0x7ffc0000 [ 277.172724][ T29] audit: type=1326 audit(1744459329.693:9290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25317 comm="syz.3.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabbf33d169 code=0x7ffc0000 [ 277.215614][T25329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9233'. [ 277.326501][T25347] IPv6: Can't replace route, no match found [ 277.357367][T25350] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9243'. [ 277.366514][T25350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.380075][T25350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.862118][T25371] vlan0: entered allmulticast mode [ 277.867363][T25371] bridge_slave_0: entered allmulticast mode [ 278.314607][T25402] vlan2: entered allmulticast mode [ 278.315865][T25403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9266'. [ 278.330504][T25403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.342807][T25403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.372682][T25406] loop3: detected capacity change from 0 to 256 [ 278.379232][T25406] msdos: Bad value for 'gid' [ 278.383964][T25406] msdos: Bad value for 'gid' [ 278.508666][T25412] loop3: detected capacity change from 0 to 128 [ 278.733423][T25428] loop9: detected capacity change from 0 to 7 [ 278.739685][T25428] Buffer I/O error on dev loop9, logical block 0, async page read [ 278.748078][T25428] Buffer I/O error on dev loop9, logical block 0, async page read [ 278.756259][T25428] loop9: unable to read partition table [ 278.762335][T25428] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 278.762335][T25428] U) failed (rc=-5) [ 278.798806][T25430] siw: device registration error -23 [ 278.888773][T25445] loop3: detected capacity change from 0 to 1024 [ 278.913747][T25445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.943656][T25445] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.9285: bg 0: block 260: invalid block bitmap [ 278.964889][T25445] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.9285: bit already cleared for inode 15 [ 279.000085][T25456] siw: device registration error -23 [ 279.005365][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.022880][T25458] loop9: detected capacity change from 0 to 7 [ 279.029277][T25458] Buffer I/O error on dev loop9, logical block 0, async page read [ 279.037320][T25458] Buffer I/O error on dev loop9, logical block 0, async page read [ 279.045280][T25458] loop9: unable to read partition table [ 279.070464][T25458] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 279.070464][T25458] U) failed (rc=-5) [ 279.126350][T25469] loop3: detected capacity change from 0 to 256 [ 279.134807][T25469] msdos: Bad value for 'gid' [ 279.139597][T25469] msdos: Bad value for 'gid' [ 279.379332][T25503] loop9: detected capacity change from 0 to 7 [ 279.389156][T25503] Buffer I/O error on dev loop9, logical block 0, async page read [ 279.397447][T25503] Buffer I/O error on dev loop9, logical block 0, async page read [ 279.405449][T25503] loop9: unable to read partition table [ 279.411622][T25503] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 279.411622][T25503] U) failed (rc=-5) [ 279.502888][T25514] loop3: detected capacity change from 0 to 256 [ 279.509537][T25514] msdos: Bad value for 'gid' [ 279.514299][T25514] msdos: Bad value for 'gid' [ 279.799269][T25529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9322'. [ 279.808544][T25529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.820720][T25529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.947658][T25539] loop3: detected capacity change from 0 to 256 [ 279.954484][T25539] msdos: Bad value for 'gid' [ 279.959122][T25539] msdos: Bad value for 'gid' [ 280.093718][T25551] siw: device registration error -23 [ 280.317096][T25578] siw: device registration error -23 [ 280.412576][T25597] netlink: 'syz.7.9353': attribute type 5 has an invalid length. [ 281.021845][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.029749][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.037519][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.045536][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.053360][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.061254][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.069018][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.076897][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.084749][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.092528][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.100447][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.108234][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.116124][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.123899][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.148278][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.156215][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.164034][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.171883][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.179656][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.187466][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.195335][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.200486][T25629] siw: device registration error -23 [ 281.203100][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.203199][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.224082][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.231869][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.239640][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.247495][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.255325][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.263102][ T3382] hid-generic 0000:0000:20000000.0027: unknown main item tag 0x0 [ 281.271683][ T3382] hid-generic 0000:0000:20000000.0027: hidraw0: HID v0.01 Device [syz0] on syz1 [ 281.320866][T25634] syzkaller0: entered promiscuous mode [ 281.326531][T25634] syzkaller0: entered allmulticast mode [ 281.338165][T25637] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9368'. [ 281.429899][T25651] block device autoloading is deprecated and will be removed. [ 281.438086][T25651] syz.1.9375: attempt to access beyond end of device [ 281.438086][T25651] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 281.516879][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.524990][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.533045][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.551331][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.559312][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.567152][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.575027][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.582829][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.590651][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.598453][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.606355][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.614210][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.622046][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.629961][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.637831][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.645646][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.653465][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.661272][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.669024][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.677200][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.685080][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.693051][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.700796][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.708583][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.716345][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.724095][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.731860][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.739759][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.747570][ T10] hid-generic 0000:0000:20000000.0028: unknown main item tag 0x0 [ 281.756082][ T10] hid-generic 0000:0000:20000000.0028: hidraw0: HID v0.01 Device [syz0] on syz1 [ 281.822315][T25685] netlink: 'syz.3.9388': attribute type 5 has an invalid length. [ 281.852843][T25690] syz.3.9390: attempt to access beyond end of device [ 281.852843][T25690] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 281.885548][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 281.885565][ T29] audit: type=1326 audit(1744459334.513:9453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25693 comm="syz.3.9392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabbf33d169 code=0x7ffc0000 [ 281.916105][ T29] audit: type=1326 audit(1744459334.513:9454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25693 comm="syz.3.9392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabbf33d169 code=0x7ffc0000 [ 281.939873][ T29] audit: type=1326 audit(1744459334.513:9455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25693 comm="syz.3.9392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabbf33d169 code=0x7ffc0000 [ 281.963810][ T29] audit: type=1326 audit(1744459334.513:9456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25693 comm="syz.3.9392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabbf33d169 code=0x7ffc0000 [ 281.987589][ T29] audit: type=1326 audit(1744459334.513:9457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25693 comm="syz.3.9392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabbf33d169 code=0x7ffc0000 [ 282.011319][ T29] audit: type=1326 audit(1744459334.513:9458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25693 comm="syz.3.9392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabbf33d169 code=0x7ffc0000 [ 282.034936][ T29] audit: type=1326 audit(1744459334.513:9459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25693 comm="syz.3.9392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabbf33d169 code=0x7ffc0000 [ 282.058607][ T29] audit: type=1326 audit(1744459334.513:9460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25693 comm="syz.3.9392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabbf33d169 code=0x7ffc0000 [ 282.082171][ T29] audit: type=1326 audit(1744459334.513:9461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25693 comm="syz.3.9392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabbf33d169 code=0x7ffc0000 [ 282.105713][ T29] audit: type=1326 audit(1744459334.513:9462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25693 comm="syz.3.9392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabbf33d169 code=0x7ffc0000 [ 282.175466][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.183557][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.191444][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.203221][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.211260][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.219135][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.226989][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.234852][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.242699][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.250471][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.258309][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.266192][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.274234][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.282037][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.290092][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.297889][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.305669][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.313531][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.321417][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.329216][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.337008][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.344786][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.352560][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.360398][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.368192][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.376024][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.383861][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.391658][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.399453][ T10] hid-generic 0000:0000:20000000.0029: unknown main item tag 0x0 [ 282.413749][ T10] hid-generic 0000:0000:20000000.0029: hidraw0: HID v0.01 Device [syz0] on syz1 [ 282.438708][T25712] netlink: 'syz.2.9401': attribute type 5 has an invalid length. [ 282.536946][T25721] syzkaller0: entered promiscuous mode [ 282.542507][T25721] syzkaller0: entered allmulticast mode [ 282.568935][T25731] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 282.585432][T25731] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 282.728926][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.736851][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.744804][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.776473][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.784284][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.792163][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.799944][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.807724][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.815531][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.823499][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.831317][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.839147][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.846921][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.854716][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.865158][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.872993][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.880762][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.888591][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.896462][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.904256][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.912037][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.919831][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.927630][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.935527][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.943297][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.951043][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.958882][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.966654][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.974520][ T3381] hid-generic 0000:0000:20000000.002A: unknown main item tag 0x0 [ 282.988204][ T3381] hid-generic 0000:0000:20000000.002A: hidraw0: HID v0.01 Device [syz0] on syz1 [ 283.063872][T25761] loop3: detected capacity change from 0 to 1024 [ 283.070745][T25761] EXT4-fs: Ignoring removed nobh option [ 283.076371][T25761] EXT4-fs: Ignoring removed bh option [ 283.112597][T25761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.191666][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.426697][T25775] syzkaller0: entered promiscuous mode [ 283.432291][T25775] syzkaller0: entered allmulticast mode [ 283.551413][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.559274][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.567106][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.575609][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.583412][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.591201][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.598993][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.606817][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.614790][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.622591][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.630430][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.638248][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.646009][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.653860][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.661851][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.669615][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.677564][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.685364][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.693159][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.700911][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.708750][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.716560][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.724350][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.732224][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.739989][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.747773][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.755590][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.763372][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.771188][ T23] hid-generic 0000:0000:20000000.002B: unknown main item tag 0x0 [ 283.808813][T25807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9440'. [ 283.831534][ T23] hid-generic 0000:0000:20000000.002B: hidraw0: HID v0.01 Device [syz0] on syz1 [ 284.034269][T25838] SELinux: syz.6.9455 (25838) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 284.098472][T25846] loop3: detected capacity change from 0 to 256 [ 284.111235][T25844] vhci_hcd: invalid port number 15 [ 284.122398][T25846] msdos: Bad value for 'gid' [ 284.127028][T25846] msdos: Bad value for 'gid' [ 284.233960][T25865] : renamed from vlan1 [ 284.379149][T25882] loop3: detected capacity change from 0 to 1024 [ 284.391298][T25882] EXT4-fs: Ignoring removed orlov option [ 284.397031][T25882] EXT4-fs: Ignoring removed nomblk_io_submit option [ 284.431501][T25882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.447382][T25891] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 284.447382][T25891] program syz.6.9476 not setting count and/or reply_len properly [ 284.524054][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.568222][T25907] vlan2: entered allmulticast mode [ 284.568240][T25907] : entered allmulticast mode [ 284.568255][T25907] bond_slave_0: entered allmulticast mode [ 284.568272][T25907] bond_slave_1: entered allmulticast mode [ 284.893685][T25941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.906984][T25941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.019800][T25954] SELinux: ebitmap: truncated map [ 285.025778][T25954] SELinux: failed to load policy [ 285.057003][T25959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.065573][T25959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.195852][T25966] loop3: detected capacity change from 0 to 128 [ 285.202794][T25966] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 285.267552][T25966] syz.3.9510: attempt to access beyond end of device [ 285.267552][T25966] loop3: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 285.281760][T25966] syz.3.9510: attempt to access beyond end of device [ 285.281760][T25966] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 285.295537][T25966] syz.3.9510: attempt to access beyond end of device [ 285.295537][T25966] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 285.313500][T25966] syz.3.9510: attempt to access beyond end of device [ 285.313500][T25966] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 285.327061][T25966] syz.3.9510: attempt to access beyond end of device [ 285.327061][T25966] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 285.340555][T25966] syz.3.9510: attempt to access beyond end of device [ 285.340555][T25966] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 285.354174][T25966] syz.3.9510: attempt to access beyond end of device [ 285.354174][T25966] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 285.367751][T25966] syz.3.9510: attempt to access beyond end of device [ 285.367751][T25966] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 285.397110][ T37] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 285.595575][T25991] netlink: 'syz.7.9522': attribute type 4 has an invalid length. [ 285.667919][T25998] loop3: detected capacity change from 0 to 512 [ 285.678130][T25998] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9525: bg 0: block 35: padding at end of block bitmap is not set [ 285.692839][T25998] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 285.701990][T25998] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.9525: invalid indirect mapped block 4294967295 (level 1) [ 285.716482][T25998] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.9525: invalid indirect mapped block 4294967295 (level 2) [ 285.742447][T25998] EXT4-fs (loop3): 1 truncate cleaned up [ 285.748565][T25998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.796385][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.868032][T26018] loop3: detected capacity change from 0 to 256 [ 285.874991][T26018] msdos: Bad value for 'gid' [ 285.879632][T26018] msdos: Bad value for 'gid' [ 286.242584][T26036] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9542'. [ 286.304219][T26041] SELinux: ebitmap: truncated map [ 286.312181][T26041] SELinux: failed to load policy [ 286.360133][T26050] loop3: detected capacity change from 0 to 256 [ 286.369737][T26050] msdos: Bad value for 'gid' [ 286.374569][T26050] msdos: Bad value for 'gid' [ 286.517171][T26066] pim6reg1: entered promiscuous mode [ 286.522708][T26066] pim6reg1: entered allmulticast mode [ 286.644362][T26075] SELinux: failed to load policy [ 287.003705][T26091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.012383][T26091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.395068][T26099] netlink: 'syz.3.9569': attribute type 21 has an invalid length. [ 287.403086][T26099] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9569'. [ 287.910690][T26127] netlink: 'syz.3.9583': attribute type 4 has an invalid length. [ 287.918634][T26127] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9583'. [ 287.975013][T26131] IPv4: Oversized IP packet from 127.202.26.0 [ 288.021364][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 288.021383][ T29] audit: type=1326 audit(1744459340.633:9736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26135 comm="syz.1.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 288.051159][ T29] audit: type=1326 audit(1744459340.633:9737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26135 comm="syz.1.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 288.074752][ T29] audit: type=1326 audit(1744459340.633:9738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26135 comm="syz.1.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 288.098315][ T29] audit: type=1326 audit(1744459340.633:9739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26135 comm="syz.1.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 288.121994][ T29] audit: type=1326 audit(1744459340.633:9740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26135 comm="syz.1.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 288.145771][ T29] audit: type=1326 audit(1744459340.633:9741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26135 comm="syz.1.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 288.169390][ T29] audit: type=1326 audit(1744459340.633:9742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26135 comm="syz.1.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 288.192993][ T29] audit: type=1326 audit(1744459340.633:9743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26135 comm="syz.1.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 288.216771][ T29] audit: type=1326 audit(1744459340.633:9744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26135 comm="syz.1.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 288.240286][ T29] audit: type=1326 audit(1744459340.633:9745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26135 comm="syz.1.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce354d169 code=0x7ffc0000 [ 288.307927][T26148] ALSA: seq fatal error: cannot create timer (-19) [ 288.354273][T26155] loop3: detected capacity change from 0 to 512 [ 288.360935][T26155] EXT4-fs: Ignoring removed mblk_io_submit option [ 288.367676][T26155] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 288.404151][T26155] EXT4-fs (loop3): 1 truncate cleaned up [ 288.410407][T26155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.455595][T26155] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.035769][T26217] loop3: detected capacity change from 0 to 512 [ 289.082802][T26217] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 289.131385][T26217] EXT4-fs (loop3): mount failed [ 289.352744][T26238] netlink: 'syz.1.9626': attribute type 21 has an invalid length. [ 289.365291][T26238] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9626'. [ 290.226748][T26274] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 290.233406][T26274] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 290.244605][T26274] vhci_hcd vhci_hcd.0: Device attached [ 290.257645][T26275] vhci_hcd: connection closed [ 290.257952][ T37] vhci_hcd: stop threads [ 290.268617][ T37] vhci_hcd: release socket [ 290.273193][ T37] vhci_hcd: disconnect device [ 290.445351][T26299] bio_check_eod: 42 callbacks suppressed [ 290.445374][T26299] syz.2.9651: attempt to access beyond end of device [ 290.445374][T26299] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 290.624752][T26315] SELinux: ebitmap: truncated map [ 290.630777][T26315] SELinux: failed to load policy [ 290.680043][T26324] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 290.680043][T26324] program syz.2.9666 not setting count and/or reply_len properly [ 291.231648][T26384] vlan2: entered allmulticast mode [ 291.236810][T26384] $H: entered allmulticast mode [ 291.242079][T26384] bond_slave_0: entered allmulticast mode [ 291.247806][T26384] bond_slave_1: entered allmulticast mode [ 291.269885][T26385] ref_ctr_offset mismatch. inode: 0x2698 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 291.416651][T26395] geneve0: entered allmulticast mode [ 291.533145][T26409] tracefs: Invalid uid '0x00000000ffffffff' [ 291.620800][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.628338][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.635803][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.644006][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.651456][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.658863][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.666341][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.674034][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.681458][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.688861][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.696467][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.703910][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.711346][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.724867][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.732362][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.739827][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.747356][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.754806][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.762232][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.769630][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.777111][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.784670][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.792142][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.799546][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.807008][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.814421][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.821863][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.829267][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 291.843697][ T10] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 291.930845][T26437] ALSA: seq fatal error: cannot create timer (-19) [ 291.939713][T26440] random: crng reseeded on system resumption [ 292.284667][T26459] program syz.3.9724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.310250][T26462] vlan2: entered allmulticast mode [ 292.315556][T26462] bond0: entered allmulticast mode [ 292.320870][T26462] bond_slave_0: entered allmulticast mode [ 292.326863][T26462] bond_slave_1: entered allmulticast mode [ 292.783834][T26486] ref_ctr_offset mismatch. inode: 0x2e0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 293.013286][T26515] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 293.025377][T26515] SELinux: failed to load policy [ 293.058477][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 293.058494][ T29] audit: type=1326 audit(1744459345.683:9905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26518 comm="syz.7.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c3d2d169 code=0x7ffc0000 [ 293.088363][ T29] audit: type=1326 audit(1744459345.683:9906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26518 comm="syz.7.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c3d2d169 code=0x7ffc0000 [ 293.123432][ T29] audit: type=1326 audit(1744459345.743:9907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26518 comm="syz.7.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81c3d2d169 code=0x7ffc0000 [ 293.147024][ T29] audit: type=1326 audit(1744459345.743:9908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26518 comm="syz.7.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c3d2d169 code=0x7ffc0000 [ 293.170547][ T29] audit: type=1326 audit(1744459345.743:9909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26518 comm="syz.7.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c3d2d169 code=0x7ffc0000 [ 293.194075][ T29] audit: type=1326 audit(1744459345.743:9910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26518 comm="syz.7.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f81c3d2d169 code=0x7ffc0000 [ 293.217455][ T29] audit: type=1326 audit(1744459345.743:9911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26518 comm="syz.7.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c3d2d169 code=0x7ffc0000 [ 293.241044][ T29] audit: type=1326 audit(1744459345.743:9912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26518 comm="syz.7.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c3d2d169 code=0x7ffc0000 [ 293.264589][ T29] audit: type=1326 audit(1744459345.743:9913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26518 comm="syz.7.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81c3d2d169 code=0x7ffc0000 [ 293.288239][ T29] audit: type=1326 audit(1744459345.743:9914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26518 comm="syz.7.9751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c3d2d169 code=0x7ffc0000 [ 293.757390][T26567] loop3: detected capacity change from 0 to 512 [ 293.770882][T26567] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 293.780223][T26567] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 293.790292][T26567] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 293.799420][T26567] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 293.811205][T26567] System zones: 0-2, 18-18, 34-34 [ 293.817621][T26567] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 293.833662][T26567] EXT4-fs (loop3): 1 truncate cleaned up [ 293.839906][T26567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.879975][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.903114][T26580] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 293.910887][T26580] SELinux: failed to load policy [ 293.974314][T26587] loop3: detected capacity change from 0 to 1024 [ 293.993587][T26587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.017605][T26587] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 294.066517][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.100442][T26598] loop3: detected capacity change from 0 to 2048 [ 294.124932][T26598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.160345][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.364034][T26632] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9799'. [ 294.429935][T26636] pim6reg1: entered promiscuous mode [ 294.435396][T26636] pim6reg1: entered allmulticast mode [ 294.523118][T26643] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9805'. [ 294.532242][T26643] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9805'. [ 294.541239][T26643] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9805'. [ 294.569846][T26643] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9805'. [ 294.578911][T26643] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9805'. [ 294.587940][T26643] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9805'. [ 294.614195][T26643] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9805'. [ 294.623196][T26643] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9805'. [ 294.632204][T26643] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9805'. [ 294.822958][T26670] netlink: 'syz.6.9816': attribute type 7 has an invalid length. [ 294.878848][T26678] netlink: 'syz.2.9820': attribute type 1 has an invalid length. [ 295.225365][T26737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.234162][T26737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.292183][T26740] loop3: detected capacity change from 0 to 256 [ 295.788530][T26763] serio: Serial port ptm0 [ 296.011367][T26769] Falling back ldisc for ttyS3. [ 296.176898][T26782] pim6reg1: entered promiscuous mode [ 296.182526][T26782] pim6reg1: entered allmulticast mode [ 297.179429][T26828] pim6reg1: entered promiscuous mode [ 297.184852][T26828] pim6reg1: entered allmulticast mode [ 297.369470][T26845] ALSA: seq fatal error: cannot create timer (-19) [ 297.416313][T26848] syz.2.9893: attempt to access beyond end of device [ 297.416313][T26848] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 297.471576][T26855] syz.1.9897: attempt to access beyond end of device [ 297.471576][T26855] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 297.607863][T26867] syz.1.9903: attempt to access beyond end of device [ 297.607863][T26867] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 297.801091][T26885] syz.7.9911: attempt to access beyond end of device [ 297.801091][T26885] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 298.104028][T26909] SELinux: ebitmap: start bit 320 comes after start bit 384 [ 298.111653][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 298.111669][ T29] audit: type=1400 audit(1744459350.733:10068): avc: denied { load_policy } for pid=26908 comm="syz.2.9931" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 298.139285][T26909] SELinux: failed to load policy [ 298.219174][T26923] syz.2.9933: attempt to access beyond end of device [ 298.219174][T26923] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 298.268945][ T29] audit: type=1400 audit(1744459350.893:10069): avc: denied { read write } for pid=26926 comm="syz.6.9924" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.292586][ T29] audit: type=1400 audit(1744459350.893:10070): avc: denied { open } for pid=26926 comm="syz.6.9924" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.354973][T26934] loop3: detected capacity change from 0 to 512 [ 298.362732][T26931] ALSA: seq fatal error: cannot create timer (-19) [ 298.381848][ T29] audit: type=1400 audit(1744459350.963:10071): avc: denied { read write } for pid=23970 comm="syz-executor" name="loop3" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 298.405313][ T29] audit: type=1400 audit(1744459350.963:10072): avc: denied { open } for pid=23970 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 298.428894][ T29] audit: type=1400 audit(1744459350.963:10073): avc: denied { ioctl } for pid=23970 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=772 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 298.453705][ T29] audit: type=1400 audit(1744459351.003:10074): avc: denied { mounton } for pid=26933 comm="syz.3.9926" path="/251/file2" dev="tmpfs" ino=1317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 298.464602][T26934] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 298.477746][ T29] audit: type=1400 audit(1744459351.063:10075): avc: denied { name_bind } for pid=26937 comm="syz.2.9927" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 298.506592][ T29] audit: type=1400 audit(1744459351.063:10076): avc: denied { node_bind } for pid=26937 comm="syz.2.9927" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 298.506910][T26934] EXT4-fs (loop3): orphan cleanup on readonly fs [ 298.540465][ T29] audit: type=1400 audit(1744459351.163:10077): avc: denied { create } for pid=26940 comm="syz.7.9929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 298.561401][T26934] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 298.581559][T26934] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 298.591513][T26934] EXT4-fs error (device loop3): ext4_orphan_get:1390: inode #16: comm syz.3.9926: iget: immutable or append flags not allowed on symlinks [ 298.634153][T26934] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.9926: couldn't read orphan inode 16 (err -117) [ 298.653705][T26934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 298.740142][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.814112][T26959] syz.6.9937: attempt to access beyond end of device [ 298.814112][T26959] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 298.860534][T26961] serio: Serial port ptm0 [ 298.959533][T26980] : renamed from vlan1 [ 299.023775][T26989] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.9947' sets config #-1 [ 299.369477][T27029] SELinux: ebitmap: start bit 320 comes after start bit 384 [ 299.393623][T27029] SELinux: failed to load policy [ 299.414375][T27034] loop3: detected capacity change from 0 to 1024 [ 299.437372][T27034] EXT4-fs: Ignoring removed bh option [ 299.485781][T27034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.524485][T27034] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 299.557606][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.229399][T27044] : renamed from vlan1 (while UP) [ 300.303894][T27057] loop3: detected capacity change from 0 to 512 [ 300.310518][T27057] EXT4-fs: Ignoring removed nobh option [ 300.332083][T27057] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.9973: invalid indirect mapped block 256 (level 2) [ 300.361615][T27057] EXT4-fs (loop3): 2 truncates cleaned up [ 300.367764][T27057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.628561][T27071] __nla_validate_parse: 20 callbacks suppressed [ 300.628578][T27071] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9968'. [ 300.854552][T27079] TCP: out of memory -- consider tuning tcp_mem [ 300.905554][T27073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.917948][T27073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.067309][T27090] binfmt_misc: register: failed to install interpreter file ./file2 [ 301.095648][T27092] SELinux: syz.2.9987 (27092) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 301.160092][T27096] C: renamed from team_slave_0 [ 301.162470][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.175574][T27096] netlink: 'syz.2.9999': attribute type 1 has an invalid length. [ 301.183379][T27096] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 301.217845][T27100] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 301.225145][T27100] IPv6: NLM_F_CREATE should be set when creating new route [ 301.237206][T27098] SELinux: ebitmap: start bit 320 comes after start bit 384 [ 301.253405][T27098] SELinux: failed to load policy [ 301.519569][T27106] loop3: detected capacity change from 0 to 256 [ 301.660563][T27130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 301.667835][T27130] IPv6: NLM_F_CREATE should be set when creating new route [ 301.691010][T27132] loop3: detected capacity change from 0 to 128 [ 301.698106][T27132] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 301.708199][T27132] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 301.720645][T27132] ext2 filesystem being mounted at /270/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 301.800181][T23970] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 301.824464][T27140] loop3: detected capacity change from 0 to 1024 [ 301.831497][T27140] EXT4-fs: Ignoring removed nobh option [ 301.837092][T27140] EXT4-fs: Ignoring removed bh option [ 301.870837][T27140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.899688][T27140] smc: net device bond0 applied user defined pnetid SYZ0 [ 301.919211][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.940522][T27150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.949300][T27150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.397882][T27157] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 303.159967][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 303.160026][ T29] audit: type=1400 audit(1744459355.783:10218): avc: denied { create } for pid=27210 comm="syz.6.10036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 303.232225][T27216] binfmt_misc: register: failed to install interpreter file ./file2 [ 303.257242][T27213] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10039'. [ 303.276908][ T29] audit: type=1400 audit(1744459355.903:10219): avc: denied { bind } for pid=27218 comm="syz.1.10040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 303.296682][ T29] audit: type=1400 audit(1744459355.903:10220): avc: denied { name_bind } for pid=27218 comm="syz.1.10040" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 303.317866][ T29] audit: type=1400 audit(1744459355.903:10221): avc: denied { node_bind } for pid=27218 comm="syz.1.10040" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 303.473426][ T29] audit: type=1400 audit(1744459355.923:10222): avc: denied { read } for pid=27215 comm="syz.2.10047" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 303.496959][ T29] audit: type=1400 audit(1744459355.923:10223): avc: denied { open } for pid=27215 comm="syz.2.10047" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 303.520916][ T29] audit: type=1400 audit(1744459355.923:10224): avc: denied { ioctl } for pid=27215 comm="syz.2.10047" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 303.546316][ T29] audit: type=1400 audit(1744459355.973:10225): avc: denied { listen } for pid=27218 comm="syz.1.10040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 303.566096][ T29] audit: type=1400 audit(1744459355.973:10226): avc: denied { connect } for pid=27218 comm="syz.1.10040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 303.586104][ T29] audit: type=1400 audit(1744459355.973:10227): avc: denied { name_connect } for pid=27218 comm="syz.1.10040" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 303.751505][T27243] pim6reg1: entered promiscuous mode [ 303.756907][T27243] pim6reg1: entered allmulticast mode [ 304.037335][T27259] dccp_close: ABORT with 32 bytes unread [ 304.083426][T27264] loop3: detected capacity change from 0 to 512 [ 304.125511][T27264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 304.125617][T27264] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.242151][T27268] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #19: comm syz.3.10059: corrupted inode contents [ 304.274185][T27268] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #19: comm syz.3.10059: mark_inode_dirty error [ 304.299988][T27268] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #19: comm syz.3.10059: corrupted inode contents [ 304.565899][T27268] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.10059: mark_inode_dirty error [ 304.598092][T27268] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.10059: mark inode dirty (error -117) [ 304.695923][T27268] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117) [ 304.782496][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 304.811019][T27291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.830047][T27291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.218412][T27309] SELinux: failed to load policy [ 305.261312][T27316] block device autoloading is deprecated and will be removed. [ 305.298356][T27316] syz.2.10075: attempt to access beyond end of device [ 305.298356][T27316] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 305.372421][T27325] SELinux: failed to load policy [ 305.426633][T27333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.445486][T27333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.595781][T27356] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10090'. [ 305.605326][T27356] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10090'. [ 305.686731][T27367] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10092'. [ 305.795033][T27371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.803613][T27371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.834430][T27375] loop3: detected capacity change from 0 to 2048 [ 305.853289][T27375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.044191][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.071794][T27385] loop3: detected capacity change from 0 to 256 [ 306.078453][T27385] msdos: Bad value for 'gid' [ 306.083125][T27385] msdos: Bad value for 'gid' [ 306.227202][T27389] loop3: detected capacity change from 0 to 1024 [ 306.255667][T27389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.284367][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.606411][T27416] SELinux: policydb version 0 does not match my version range 15-34 [ 306.614976][T27416] SELinux: failed to load policy [ 306.653908][T27421] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10113'. [ 307.223139][T27427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10115'. [ 307.232241][T27426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.240749][T27426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.412609][T27435] netlink: 'syz.3.10119': attribute type 10 has an invalid length. [ 307.420582][T27435] ipvlan0: entered allmulticast mode [ 307.425960][T27435] veth0_vlan: entered allmulticast mode [ 307.521749][T27444] SELinux: policydb version 0 does not match my version range 15-34 [ 307.529986][T27444] SELinux: failed to load policy [ 307.768208][T27462] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10131'. [ 307.788320][T27464] IPv4: Oversized IP packet from 127.202.26.0 [ 307.843480][T27467] SELinux: failed to load policy [ 307.916820][T27476] can0: slcan on ttyS3. [ 307.951215][T27476] can0 (unregistered): slcan off ttyS3. [ 307.965198][T27476] can0: slcan on ttyS3. [ 308.383992][T27493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.394578][T27493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.404898][T27495] netlink: 96 bytes leftover after parsing attributes in process `syz.7.10156'. [ 308.437706][T27499] tipc: Started in network mode [ 308.442736][T27499] tipc: Node identity ac14140f, cluster identity 4711 [ 308.453848][T27499] tipc: New replicast peer: 255.255.255.255 [ 308.460106][T27499] tipc: Enabled bearer , priority 10 [ 308.506803][ T29] kauditd_printk_skb: 510 callbacks suppressed [ 308.506859][ T29] audit: type=1326 audit(1744459361.133:10738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27504 comm="syz.6.10150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d455d169 code=0x7ffc0000 [ 308.536776][ T29] audit: type=1326 audit(1744459361.133:10739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27504 comm="syz.6.10150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb2d455d169 code=0x7ffc0000 [ 308.560516][ T29] audit: type=1326 audit(1744459361.133:10740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27504 comm="syz.6.10150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d455d169 code=0x7ffc0000 [ 308.584447][ T29] audit: type=1326 audit(1744459361.133:10741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27504 comm="syz.6.10150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d455d169 code=0x7ffc0000 [ 308.608296][ T29] audit: type=1326 audit(1744459361.133:10742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27504 comm="syz.6.10150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb2d455d169 code=0x7ffc0000 [ 308.631938][ T29] audit: type=1326 audit(1744459361.133:10743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27504 comm="syz.6.10150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d455d169 code=0x7ffc0000 [ 308.667145][ T29] audit: type=1326 audit(1744459361.133:10744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27504 comm="syz.6.10150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d455d169 code=0x7ffc0000 [ 308.690935][ T29] audit: type=1326 audit(1744459361.133:10745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27504 comm="syz.6.10150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb2d455d169 code=0x7ffc0000 [ 308.714590][ T29] audit: type=1326 audit(1744459361.133:10746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27504 comm="syz.6.10150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d455d169 code=0x7ffc0000 [ 308.738261][ T29] audit: type=1326 audit(1744459361.133:10747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27504 comm="syz.6.10150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb2d455d169 code=0x7ffc0000 [ 308.821552][T27471] can0 (unregistered): slcan off ttyS3. [ 309.288183][T27530] syz_tun: entered allmulticast mode [ 309.332056][T27528] syz_tun: left allmulticast mode [ 309.444165][T27545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10170'. [ 309.546923][T27550] SELinux: ebitmap: truncated map [ 309.560112][T27550] SELinux: failed to load policy [ 309.571359][ T36] tipc: Node number set to 2886997007 [ 309.611990][T27558] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10176'. [ 309.643551][T27563] veth1_macvtap: left promiscuous mode [ 309.649138][T27563] macsec0: entered promiscuous mode [ 309.701696][ T3378] page_pool_release_retry() stalled pool shutdown: id 110, 1 inflight 60 sec [ 309.727836][T27571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10181'. [ 310.078301][T27608] Failed to initialize the IGMP autojoin socket (err -2) [ 310.181228][ T23] page_pool_release_retry() stalled pool shutdown: id 113, 1 inflight 60 sec [ 310.272562][T27611] netlink: 'syz.6.10195': attribute type 39 has an invalid length. [ 310.281366][T27611] veth1_macvtap: left promiscuous mode [ 310.394300][T27615] netlink: 292 bytes leftover after parsing attributes in process `syz.1.10197'. [ 310.472232][T27626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=27626 comm=syz.6.10202 [ 310.601339][T27639] loop3: detected capacity change from 0 to 256 [ 310.607967][T27639] msdos: Bad value for 'gid' [ 310.612679][T27639] msdos: Bad value for 'gid' [ 310.839235][T27644] loop3: detected capacity change from 0 to 512 [ 310.868877][T27644] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 310.877632][T27644] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 310.888429][T27644] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 310.901418][T27644] EXT4-fs (loop3): 1 truncate cleaned up [ 310.908573][T27644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.315814][T27677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10223'. [ 311.462569][T27691] netlink: 292 bytes leftover after parsing attributes in process `syz.6.10230'. [ 311.637031][T27700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27700 comm=syz.1.10234 [ 311.687365][T23970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.698345][T23970] ================================================================== [ 311.706471][T23970] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 311.714244][T23970] [ 311.716580][T23970] write to 0xffff888237c25a28 of 1 bytes by task 27698 on cpu 0: [ 311.724316][T23970] folios_put_refs+0x272/0x2b0 [ 311.729128][T23970] folio_batch_move_lru+0x20b/0x230 [ 311.734375][T23970] folio_add_lru+0x148/0x1f0 [ 311.739000][T23970] shmem_get_folio_gfp+0x79e/0xd30 [ 311.744141][T23970] shmem_write_begin+0xa7/0x190 [ 311.749030][T23970] generic_perform_write+0x189/0x4b0 [ 311.754322][T23970] shmem_file_write_iter+0xc2/0xe0 [ 311.759439][T23970] vfs_write+0x79b/0x950 [ 311.763700][T23970] __x64_sys_pwrite64+0xfb/0x150 [ 311.768650][T23970] x64_sys_call+0xab9/0x2e10 [ 311.773247][T23970] do_syscall_64+0xc9/0x1c0 [ 311.777763][T23970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.783659][T23970] [ 311.785980][T23970] read to 0xffff888237c25a28 of 1 bytes by task 23970 on cpu 1: [ 311.793608][T23970] __lru_add_drain_all+0x136/0x3f0 [ 311.798734][T23970] lru_add_drain_all+0x10/0x20 [ 311.803512][T23970] invalidate_bdev+0x47/0x70 [ 311.808122][T23970] ext4_put_super+0x65b/0x910 [ 311.812810][T23970] generic_shutdown_super+0xe5/0x220 [ 311.818101][T23970] kill_block_super+0x2a/0x70 [ 311.822793][T23970] ext4_kill_sb+0x44/0x80 [ 311.827209][T23970] deactivate_locked_super+0x7d/0x1c0 [ 311.832592][T23970] deactivate_super+0x9f/0xb0 [ 311.837279][T23970] cleanup_mnt+0x26e/0x2e0 [ 311.841699][T23970] __cleanup_mnt+0x19/0x20 [ 311.846120][T23970] task_work_run+0x13c/0x1b0 [ 311.850811][T23970] syscall_exit_to_user_mode+0xa8/0x120 [ 311.856394][T23970] do_syscall_64+0xd6/0x1c0 [ 311.860912][T23970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.866808][T23970] [ 311.869129][T23970] value changed: 0x1f -> 0x00 [ 311.873804][T23970] [ 311.876125][T23970] Reported by Kernel Concurrency Sanitizer on: [ 311.882290][T23970] CPU: 1 UID: 0 PID: 23970 Comm: syz-executor Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(voluntary) [ 311.894967][T23970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 311.905036][T23970] ==================================================================