last executing test programs: 1m25.731158687s ago: executing program 4 (id=1586): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1m25.673820978s ago: executing program 4 (id=1588): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1000000}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1m25.58832502s ago: executing program 32 (id=1591): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 1m25.58614513s ago: executing program 4 (id=1592): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x12000021) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 1m25.55962267s ago: executing program 4 (id=1593): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='\x00', 0x89901) move_mount(r0, &(0x7f0000000500)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file0\x00', 0x0) 1m25.529555821s ago: executing program 4 (id=1596): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000600)="ee5a7af0fa946c4ebc", 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 1m25.341769705s ago: executing program 4 (id=1598): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x0, 0x2, 0x0, 0x9}) 1m25.311106735s ago: executing program 33 (id=1598): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x0, 0x2, 0x0, 0x9}) 1m13.822641777s ago: executing program 5 (id=2012): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x8000, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000004c0)=0x8000, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 1m13.68295197s ago: executing program 5 (id=2018): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) timerfd_create(0x2, 0x0) 1m13.614084121s ago: executing program 5 (id=2021): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000313c2631fc32c3ebd7ca11d54c82598d87e1534a3df087eb04b6181f48d5ae8798445424e7ec37e6c55f2a77c698e4ae52576a0f1e268455ba9c293f8b1ca32511dc121f15140a1ffb8dc5ed495498"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000280)={0x4, 0x1005}, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 1m13.605512541s ago: executing program 5 (id=2024): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$eJzs3E1sVEUcAPD/e/3i01bEDxC0ikbiR0vLhxy8aDTxoImJHjCealsIUqihNRFCFD3g0ZB4Nx5NvJt40otRD8bEq94NCTFcQE9rZve9sl12S8tuWXB/v+RtZ96bZua/86Y7O7PbAHrWaHrIIrZExB8RMVzLLi8wWvtx7cq56X+unJvOolJ58++sWu7qlXPTZdHy9zbXMpVKxFBKDjWp98I7EVNzc7Oni/z44sn3xxfOnH3u+MmpY7PHZk9NHj58YP/uwUOTB9uKLy9+priu7vxofteOV9+++Pr0kYvv/vxNau+W4np9HLckRdtgtPbsNno0PTzZVmV3lF/Tw9a6E1l/68Jjt6FBrF5fRKTuGqiO/+Hoi41L14bjlU+72jhgXVUqlUqz1+fC+QrwP5ZFt1sAdEf5Qp/e/5bHbZp63BEuv1h7A5TivlYctSv9S2sHAw3vbztpNCKOnP/3y3REJ9YhAABu4vs0/3m22fwvjwfqyt1T7KGMRMS9EbEtIu6LiO0RcX9EteyDEfHQGutv3CG5cf6TX7qlwFYpzf9eKPa2ls//ytlfjPQVua3V+Aeyo8fnZvcVz8neGBhK+YkV6vjh5d8/L9MbGq7Vz//Skeov54JFOy71NyzQzUwtTrUbd+nyJxE7+5vFn0W5jZNFxI6I2HmLdRx/+utdra7dPP4VrLDPtFqVryKeqvX/+VgW//WuylruT048f2jy4PiGmJvdN17eFTf65bcLb7Sqv634OyD1/6am9//SLvBItiFi4czZE9X92oW113Hhz8/qxvSy3eUUf/5txJrv/8HsrWp6sDj34dTi4umJiMHstRvPT17/3TJflk/x793TfPxvq2vxwxGRbuLdEfFIsYmb+u6xiHg8IvasEP9PLz3xXqtrrft/hVX5Dkrxz9ys/6O+/9ee6Dvx43drj7+U+v9ANbW3OLOav3+rbWA7zx0AAADcLfLqZ+CzfGwpnedjY7XP8G+PTfnc/MLiM0fnPzg1U/us/EgM5OVK13DdeuhEsTZc5icb8vuLdeMv+jZW82PT83Mz3Q4eetzmFuM/+auv260D1l0H9tGAu5TxD73L+IfeZfxD7zL+oXc1G/8fd6EdwO3n9R96l/EPvcv4h95l/ENPavnd+Lytr/x3OVH+74Q7pT1dSmxczyoi736APZHoX+/beKjppS7/YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQ/wIAAP//YKPiyQ==") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 1m13.298256857s ago: executing program 2 (id=2037): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffbfc, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1m13.220615508s ago: executing program 5 (id=2041): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x8000) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_free\x00', r3}, 0x18) dup3(r1, r0, 0x0) 1m12.903379684s ago: executing program 2 (id=2047): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1m12.843878626s ago: executing program 2 (id=2050): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a000005"], 0x0) 1m12.843157845s ago: executing program 2 (id=2052): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 1m12.662374969s ago: executing program 5 (id=2059): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r0, &(0x7f0000000100)='\x005,$', 0x4, 0x9218b965c8ec6ce3, 0x0, 0x0) 1m12.662243039s ago: executing program 34 (id=2059): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r0, &(0x7f0000000100)='\x005,$', 0x4, 0x9218b965c8ec6ce3, 0x0, 0x0) 1m12.63236562s ago: executing program 2 (id=2062): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x8000000000000}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xffffffff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 1m12.281308666s ago: executing program 2 (id=2068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x3, 0xa, 0x1, 0xed8, 0x7, 0x8c, 0x80, 0x925e, [{0x101, 0xffffffa9, 0x200, 0x43}]}}, @TCA_U32_LINK={0x8, 0x3, 0xa}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_virt_wifi\x00'}]}}]}, 0x70}}, 0x20040054) 1m12.262069607s ago: executing program 35 (id=2068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x3, 0xa, 0x1, 0xed8, 0x7, 0x8c, 0x80, 0x925e, [{0x101, 0xffffffa9, 0x200, 0x43}]}}, @TCA_U32_LINK={0x8, 0x3, 0xa}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_virt_wifi\x00'}]}}]}, 0x70}}, 0x20040054) 1m9.033215709s ago: executing program 7 (id=2060): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)={0x2c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0) 1m8.98911787s ago: executing program 7 (id=2094): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x4, 0x8, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x4000200, 0x0, 0x0, 0x0, 0x0, 0x0) 1m8.934652041s ago: executing program 7 (id=2097): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$eJzs3E1sVEUcAPD/e/3i01bEDxC0ikbiR0vLhxy8aDTxoImJHjCealsIUqihNRFCFD3g0ZB4Nx5NvJt40otRD8bEq94NCTFcQE9rZve9sl12S8tuWXB/v+RtZ96bZua/86Y7O7PbAHrWaHrIIrZExB8RMVzLLi8wWvtx7cq56X+unJvOolJ58++sWu7qlXPTZdHy9zbXMpVKxFBKDjWp98I7EVNzc7Oni/z44sn3xxfOnH3u+MmpY7PHZk9NHj58YP/uwUOTB9uKLy9+priu7vxofteOV9+++Pr0kYvv/vxNau+W4np9HLckRdtgtPbsNno0PTzZVmV3lF/Tw9a6E1l/68Jjt6FBrF5fRKTuGqiO/+Hoi41L14bjlU+72jhgXVUqlUqz1+fC+QrwP5ZFt1sAdEf5Qp/e/5bHbZp63BEuv1h7A5TivlYctSv9S2sHAw3vbztpNCKOnP/3y3REJ9YhAABu4vs0/3m22fwvjwfqyt1T7KGMRMS9EbEtIu6LiO0RcX9EteyDEfHQGutv3CG5cf6TX7qlwFYpzf9eKPa2ls//ytlfjPQVua3V+Aeyo8fnZvcVz8neGBhK+YkV6vjh5d8/L9MbGq7Vz//Skeov54JFOy71NyzQzUwtTrUbd+nyJxE7+5vFn0W5jZNFxI6I2HmLdRx/+utdra7dPP4VrLDPtFqVryKeqvX/+VgW//WuylruT048f2jy4PiGmJvdN17eFTf65bcLb7Sqv634OyD1/6am9//SLvBItiFi4czZE9X92oW113Hhz8/qxvSy3eUUf/5txJrv/8HsrWp6sDj34dTi4umJiMHstRvPT17/3TJflk/x793TfPxvq2vxwxGRbuLdEfFIsYmb+u6xiHg8IvasEP9PLz3xXqtrrft/hVX5Dkrxz9ys/6O+/9ee6Dvx43drj7+U+v9ANbW3OLOav3+rbWA7zx0AAADcLfLqZ+CzfGwpnedjY7XP8G+PTfnc/MLiM0fnPzg1U/us/EgM5OVK13DdeuhEsTZc5icb8vuLdeMv+jZW82PT83Mz3Q4eetzmFuM/+auv260D1l0H9tGAu5TxD73L+IfeZfxD7zL+oXc1G/8fd6EdwO3n9R96l/EPvcv4h95l/ENPavnd+Lytr/x3OVH+74Q7pT1dSmxczyoi736APZHoX+/beKjppS7/YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQ/wIAAP//YKPiyQ==") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 1m8.47628391s ago: executing program 7 (id=2109): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000400000006"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m6.881342691s ago: executing program 7 (id=2179): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x5}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r1, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) syz_io_uring_setup(0x499, 0x0, 0x0, 0x0) 1m6.852643581s ago: executing program 36 (id=2179): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x5}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r1, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) syz_io_uring_setup(0x499, 0x0, 0x0, 0x0) 56.695587427s ago: executing program 3 (id=2466): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES64], 0x38}}, 0x20000004) 56.663121027s ago: executing program 3 (id=2477): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0xff, 0x7, 0x1000, 0x6, 0x806, 0x7, 0xc386}, 0x1c) 56.625640228s ago: executing program 3 (id=2468): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000}, 0x48) 56.294580694s ago: executing program 3 (id=2484): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$eJzs3M9PE1sUwPHTH5S2BMri5b08E8ONbnQzgepaaQwkxiYSpMYfickAU206tqTTQGqM6Mqt8Y9wQViyI1H+ATbudOPGHRsTF7Iwjul0htIyUCmljfT7Scgceu+ZObct5EzTmZ17b57ms5aW1csSjCoJiIjsioxKUDwBdxt04ojs91IuD33/dP7O/Qe3Uun01KxS06m5K0ml1MjY+5XnMXfa5qBsjz7a+Zb8uv3v9v87v+ae5CyVs1ShWFa6mi9+KevzpqEWc1ZeU2rGNHTLULmCZZRq48XaeNYsLi1VlF5YHI4vlQzLUnqhovJGRZWLqlyqqNBjPVdQmqap4biglcza7KyeajN5ocPF4JSUSik9JCKxAyOZtZ4UBAAAeqq5/w+K6mT/v35hqzx0d2PE7f83I379/9XPtX019P9REfHt/73j+/b/+vH6/4MdUX85Uf9fFe1gMWjPWOTAQ4F6WB0spfS4+/frePVwfdwJ6P8BAAAAAAAAAAAAAAAAAAAAAPgb7Np2wrbthLf1fgbdizu8331SQyJyvQclo4NO8PrjDKhfuBceETFfL2eWM7WtO2FLREwxZFwS8tN5P7iqsXflkaoalQ/mqpu/upwJOSOprOSc/AlJDEhzvm1P30xPTaiaxvwBie/PT0pC/vHPT/rmR+TSxX35miTk44IUxZRFp456/osJpW7cTjflx5x5AAAAAACcBZra43v+rmmHjdfy986vmz8fCNXPr8d9z8/Dci7c27UDAAAAANAvrMqzvG6aRumIICat57QfhE9pz94K/zTL+y7D6a30iMA7eMOQd3Pdjj8tgWM8LYcEwYZSV7xKW2SNVeeok67C+9josDkyM9n9V9AJ/nv77kfndnhtI9pipe0HoaPfAANd+ecDAAAAoKvqTb/3yGRvCwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoA914+5ojUfkpv8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoX78DAAD//0WxAls=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_clone(0x25888200, 0x0, 0x0, 0x0, 0x0, 0x0) fdatasync(r0) 56.123756068s ago: executing program 3 (id=2490): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x157]}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_io_uring_setup(0x6934, &(0x7f0000000300)={0x0, 0x125a, 0x10100, 0xffffffff, 0x16f, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffe}}) io_uring_enter(r1, 0x44fd, 0x3, 0x1, 0x0, 0x0) signalfd(r0, &(0x7f00000002c0), 0x8) 55.730819075s ago: executing program 3 (id=2501): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r2, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x5c, r2, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) 55.720990846s ago: executing program 37 (id=2501): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r2, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x5c, r2, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) 2.805374755s ago: executing program 6 (id=4241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 2.751762237s ago: executing program 6 (id=4243): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 2.739006757s ago: executing program 6 (id=4246): r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) 741.150835ms ago: executing program 9 (id=4340): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200"], 0xfc}}, 0x0) 740.251385ms ago: executing program 0 (id=4341): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x30, r3, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0xc7, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0) 719.518966ms ago: executing program 1 (id=4342): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xcb6c, 0x40, 0x3, 0x12d}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480), 0x66) 662.800697ms ago: executing program 1 (id=4344): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 662.688357ms ago: executing program 0 (id=4345): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff9}, 0xe) listen(r0, 0x800) r1 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000020940)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 662.116547ms ago: executing program 9 (id=4346): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300), 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=f']) 643.952827ms ago: executing program 8 (id=4347): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 498.47162ms ago: executing program 8 (id=4348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 497.82539ms ago: executing program 0 (id=4358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close(r0) 496.75231ms ago: executing program 9 (id=4359): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) 477.94523ms ago: executing program 1 (id=4349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 458.829151ms ago: executing program 9 (id=4350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) 437.311831ms ago: executing program 8 (id=4351): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x3, 0x4) 193.379276ms ago: executing program 6 (id=4352): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000140)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 192.866066ms ago: executing program 0 (id=4364): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 192.686956ms ago: executing program 9 (id=4353): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) splice(r2, 0x0, r1, 0x0, 0x100000004, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x8}}, 0x20) write(r0, 0x0, 0x0) 192.547726ms ago: executing program 1 (id=4354): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000040018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 163.448276ms ago: executing program 8 (id=4355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {0x0, 0x0, 0x0, 0x101}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffc01}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 162.610526ms ago: executing program 0 (id=4356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_ADDEND={0x6, 0x5, 0x2}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x4848) 135.595567ms ago: executing program 8 (id=4357): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x6, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000280)={0x0, 0x80000000, 0x0, 'queue0\x00', 0xffffff00}) 135.014677ms ago: executing program 6 (id=4360): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff9}, 0xe) listen(r0, 0x800) r1 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000020940)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 134.074147ms ago: executing program 1 (id=4361): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x32801, 0x0, 0x0, 0x0, &(0x7f0000000040)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 99.604278ms ago: executing program 8 (id=4362): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 99.020008ms ago: executing program 1 (id=4363): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 536.7µs ago: executing program 0 (id=4365): r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) 407.39µs ago: executing program 6 (id=4366): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f", 0xe) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 0s ago: executing program 9 (id=4367): creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x1, 0x550, &(0x7f0000001780)="$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") kernel console output (not intermixed with test programs): ding directory block [ 108.933255][ T4902] EXT4-fs error (device loop0): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 108.947048][ T4902] EXT4-fs (loop0): I/O error while writing superblock [ 108.947888][ T6829] team0 (unregistering): Port device team_slave_1 removed [ 108.954065][ T4902] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: IO failure [ 108.970657][ T4902] EXT4-fs (loop0): I/O error while writing superblock [ 108.977522][ T4902] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 108.990065][ T4902] EXT4-fs (loop0): I/O error while writing superblock [ 108.991344][ T6829] team0 (unregistering): Port device team_slave_0 removed [ 109.013481][ T6831] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:58: unable to read itable block [ 109.027690][ T6831] EXT4-fs (loop0): I/O error while writing superblock [ 109.035089][ T4902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.044755][ T4902] EXT4-fs (loop0): I/O error while writing superblock [ 109.065300][ T8601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.077888][ T8601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.105565][ T8601] team0: Port device team_slave_0 added [ 109.122144][ T8601] team0: Port device team_slave_1 added [ 109.163231][ T8601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.170292][ T8601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.196235][ T8601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.207866][ T8601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.214844][ T8601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.240864][ T8601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.280860][ T8695] netlink: 'syz.3.2091': attribute type 3 has an invalid length. [ 109.300584][ T8601] hsr_slave_0: entered promiscuous mode [ 109.307824][ T8601] hsr_slave_1: entered promiscuous mode [ 109.313826][ T8601] debugfs: 'hsr0' already exists in 'hsr' [ 109.319749][ T8601] Cannot create hsr debugfs directory [ 109.350463][ T8628] chnl_net:caif_netlink_parms(): no params data found [ 109.457312][ T8628] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.464608][ T8628] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.471990][ T8628] bridge_slave_0: entered allmulticast mode [ 109.478598][ T8628] bridge_slave_0: entered promiscuous mode [ 109.502498][ T8628] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.509696][ T8628] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.516915][ T8628] bridge_slave_1: entered allmulticast mode [ 109.523451][ T8628] bridge_slave_1: entered promiscuous mode [ 109.541785][ T6829] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.565950][ T8628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.596168][ T8628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.618578][ T8601] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 109.630338][ T6829] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.642242][ T8628] team0: Port device team_slave_0 added [ 109.650649][ T8628] team0: Port device team_slave_1 added [ 109.656383][ T8601] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 109.674640][ T6829] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.689685][ T8601] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 109.698912][ T8601] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 109.714895][ T8628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.721931][ T8628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.747869][ T8628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.762856][ T8628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.769882][ T8628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.795903][ T8628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.811178][ T6829] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.858816][ T8628] hsr_slave_0: entered promiscuous mode [ 109.864972][ T8628] hsr_slave_1: entered promiscuous mode [ 109.870973][ T8628] debugfs: 'hsr0' already exists in 'hsr' [ 109.876729][ T8628] Cannot create hsr debugfs directory [ 109.928610][ T8706] chnl_net:caif_netlink_parms(): no params data found [ 109.966399][ T6829] bridge_slave_1: left allmulticast mode [ 109.972223][ T6829] bridge_slave_1: left promiscuous mode [ 109.977888][ T6829] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.985829][ T6829] bridge_slave_0: left allmulticast mode [ 109.991518][ T6829] bridge_slave_0: left promiscuous mode [ 109.997284][ T6829] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.091133][ T6829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.100996][ T6829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.110759][ T6829] bond0 (unregistering): Released all slaves [ 110.118976][ T6829] bond1 (unregistering): Released all slaves [ 110.154452][ T8706] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.161613][ T8706] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.169144][ T8706] bridge_slave_0: entered allmulticast mode [ 110.175669][ T8706] bridge_slave_0: entered promiscuous mode [ 110.184282][ T8706] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.191430][ T8706] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.198660][ T8706] bridge_slave_1: entered allmulticast mode [ 110.205337][ T8706] bridge_slave_1: entered promiscuous mode [ 110.213414][ T8601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.243686][ T6829] hsr_slave_0: left promiscuous mode [ 110.249663][ T6829] hsr_slave_1: left promiscuous mode [ 110.255260][ T6829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.262722][ T6829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.270473][ T6829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.279027][ T6829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.289197][ T6829] veth1_macvtap: left promiscuous mode [ 110.294680][ T6829] veth0_macvtap: left promiscuous mode [ 110.300240][ T6829] veth1_vlan: left promiscuous mode [ 110.305581][ T6829] veth0_vlan: left promiscuous mode [ 110.364412][ T6829] team0 (unregistering): Port device team_slave_1 removed [ 110.375811][ T6829] team0 (unregistering): Port device team_slave_0 removed [ 110.412561][ T8706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.423213][ T8706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.446091][ T8601] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.460076][ T8706] team0: Port device team_slave_0 added [ 110.473087][ T6831] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.480300][ T6831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.492556][ T6831] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.499662][ T6831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.511511][ T8706] team0: Port device team_slave_1 added [ 110.527892][ T8706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.534965][ T8706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.561193][ T8706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.574924][ T8706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.582035][ T8706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.608406][ T8706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.653171][ T8628] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 110.663785][ T8706] hsr_slave_0: entered promiscuous mode [ 110.670057][ T8706] hsr_slave_1: entered promiscuous mode [ 110.680558][ T8628] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 110.695729][ T8628] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 110.710516][ T8628] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 110.792028][ T8601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.799741][ T6829] IPVS: stop unused estimator thread 0... [ 110.831629][ T8628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.845014][ T8628] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.857826][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.864922][ T6821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.880037][ T6781] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.887147][ T6781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.966961][ T8628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.007040][ T8601] veth0_vlan: entered promiscuous mode [ 111.020253][ T8601] veth1_vlan: entered promiscuous mode [ 111.039463][ T8601] veth0_macvtap: entered promiscuous mode [ 111.047292][ T8601] veth1_macvtap: entered promiscuous mode [ 111.072207][ T8601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.089214][ T8706] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.100521][ T8601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.109790][ T8706] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.120633][ T8706] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.131007][ T8706] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.144268][ T6809] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.158417][ T6809] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.175729][ T6809] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.184561][ T6809] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.208708][ T8628] veth0_vlan: entered promiscuous mode [ 111.227629][ T8628] veth1_vlan: entered promiscuous mode [ 111.255981][ T8781] loop6: detected capacity change from 0 to 512 [ 111.290273][ T8628] veth0_macvtap: entered promiscuous mode [ 111.301175][ T8628] veth1_macvtap: entered promiscuous mode [ 111.312620][ T8706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.321956][ T8781] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.341850][ T8628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.356981][ T8706] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.359133][ T8781] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.385300][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.392428][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.406010][ T8790] loop7: detected capacity change from 0 to 512 [ 111.412237][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.414159][ T8790] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 111.419569][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.428828][ T8790] EXT4-fs (loop7): invalid journal inode [ 111.439442][ T8628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.459212][ T8706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.460329][ T7451] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.469654][ T8706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.490342][ T8792] __nla_validate_parse: 6 callbacks suppressed [ 111.490417][ T8792] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2112'. [ 111.493276][ T8790] EXT4-fs (loop7): can't get journal size [ 111.534758][ T6809] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.549717][ T8790] EXT4-fs (loop7): 1 truncate cleaned up [ 111.556885][ T8790] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.572517][ T6809] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.586700][ T6821] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.605739][ T6821] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.630656][ T8706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.639853][ T8797] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 111.687794][ T8790] loop7: detected capacity change from 512 to 0 [ 111.714813][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2116'. [ 111.723821][ T8812] netlink: 348 bytes leftover after parsing attributes in process `syz.6.2116'. [ 111.726189][ T8810] netlink: 'syz.3.2102': attribute type 10 has an invalid length. [ 111.732926][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2116'. [ 111.749780][ T8812] netlink: 348 bytes leftover after parsing attributes in process `syz.6.2116'. [ 111.781809][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2116'. [ 111.794544][ T8601] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 111.808656][ T8706] veth0_vlan: entered promiscuous mode [ 111.814596][ T8818] loop8: detected capacity change from 0 to 512 [ 111.821838][ T8706] veth1_vlan: entered promiscuous mode [ 111.828111][ T8818] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.834638][ T8601] EXT4-fs error (device loop7): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 111.857651][ T8818] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 111.862043][ T8706] veth0_macvtap: entered promiscuous mode [ 111.876955][ T8706] veth1_macvtap: entered promiscuous mode [ 111.887626][ T8601] EXT4-fs (loop7): I/O error while writing superblock [ 111.891538][ T8706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.894499][ T8601] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: IO failure [ 111.904630][ T8706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.923570][ T8601] EXT4-fs (loop7): I/O error while writing superblock [ 111.930536][ T8601] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 111.951681][ T8818] EXT4-fs (loop8): 1 truncate cleaned up [ 111.952081][ T8601] EXT4-fs (loop7): I/O error while writing superblock [ 111.964788][ T8818] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.977804][ T6821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.994229][ T6829] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:56: unable to read itable block [ 112.003029][ T3397] hid_parser_main: 74 callbacks suppressed [ 112.003055][ T3397] hid-generic 0000:0000:0000.0005: unknown main item tag 0x1 [ 112.014138][ T6821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.021450][ T3397] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 112.021480][ T3397] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 112.040327][ T6829] EXT4-fs (loop7): I/O error while writing superblock [ 112.045173][ T3397] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 112.045201][ T3397] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 112.067428][ T3397] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 112.074954][ T3397] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 112.082693][ T3397] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 112.090170][ T3397] hid-generic 0000:0000:0000.0005: unknown main item tag 0x2 [ 112.097737][ T3397] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 112.099905][ T6821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.107385][ T3397] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 112.125350][ T8601] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.134625][ T6821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.143788][ C1] blk_print_req_error: 48 callbacks suppressed [ 112.143807][ C1] I/O error, dev loop7, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 112.159516][ C1] I/O error, dev loop7, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 112.169004][ C1] buffer_io_error: 9 callbacks suppressed [ 112.169034][ C1] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 112.202476][ T8601] EXT4-fs (loop7): I/O error while writing superblock [ 112.268840][ T8839] loop3: detected capacity change from 0 to 256 [ 112.284157][ T8628] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.309091][ T8842] loop8: detected capacity change from 0 to 1024 [ 112.319136][ T8842] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 112.330129][ T8842] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 112.336226][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2121'. [ 112.341559][ T8842] JBD2: no valid journal superblock found [ 112.354588][ T8842] EXT4-fs (loop8): Could not load journal inode [ 112.383909][ T8842] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 112.600784][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2137'. [ 112.620661][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2137'. [ 112.631229][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2137'. [ 112.863196][ T8913] loop0: detected capacity change from 0 to 1024 [ 112.871333][ T8913] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.884849][ T8913] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.893904][ T8913] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.905906][ T8913] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.2153: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 112.926421][ T8913] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2153: couldn't read orphan inode 11 (err -117) [ 112.940797][ T8913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.957633][ T8913] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2153: Invalid block bitmap block 0 in block_group 0 [ 112.994371][ T8913] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2153: Failed to acquire dquot type 0 [ 113.013075][ T8913] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 113.035161][ T8706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.241291][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 113.241309][ T29] audit: type=1326 audit(113.235:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8957 comm="syz.0.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 113.280621][ T29] audit: type=1326 audit(113.235:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8957 comm="syz.0.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 113.303607][ T29] audit: type=1326 audit(113.275:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8957 comm="syz.0.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 113.329004][ T29] audit: type=1326 audit(113.325:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8957 comm="syz.0.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 113.351868][ T29] audit: type=1326 audit(113.325:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8957 comm="syz.0.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 113.393340][ T6809] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.491525][ T8976] loop8: detected capacity change from 0 to 1024 [ 113.499780][ T8976] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.506621][ T8976] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.521403][ T8976] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.562536][ T8976] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz.8.2193: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 113.589231][ T8976] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.2193: couldn't read orphan inode 11 (err -117) [ 113.604452][ T8976] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.628122][ T8976] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.2193: Invalid block bitmap block 0 in block_group 0 [ 113.654858][ T8999] loop0: detected capacity change from 0 to 256 [ 113.665433][ T8976] Quota error (device loop8): write_blk: dquota write failed [ 113.673029][ T8976] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 113.684883][ T8976] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.2193: Failed to acquire dquot type 0 [ 113.717064][ T9002] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 113.751038][ T29] audit: type=1326 audit(113.735:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.3.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5904ebe9 code=0x7ffc0000 [ 113.774157][ T29] audit: type=1326 audit(113.735:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.3.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f3b5904ebe9 code=0x7ffc0000 [ 113.797102][ T29] audit: type=1400 audit(113.735:1815): avc: denied { read append } for pid=9008 comm="syz.0.2203" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.832943][ T8628] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.856285][ T8981] chnl_net:caif_netlink_parms(): no params data found [ 113.898789][ T8981] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.905912][ T8981] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.913362][ T8981] bridge_slave_0: entered allmulticast mode [ 113.919988][ T8981] bridge_slave_0: entered promiscuous mode [ 113.927075][ T8981] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.934414][ T8981] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.944931][ T8981] bridge_slave_1: entered allmulticast mode [ 113.951719][ T8981] bridge_slave_1: entered promiscuous mode [ 113.972844][ T8981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.985205][ T8981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.009186][ T8981] team0: Port device team_slave_0 added [ 114.015991][ T8981] team0: Port device team_slave_1 added [ 114.034365][ T8981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.041410][ T8981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.067487][ T8981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.079263][ T8981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.086263][ T8981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.112360][ T8981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.160179][ T9030] netlink: 'syz.6.2198': attribute type 10 has an invalid length. [ 114.202170][ T9030] team0: Device hsr_slave_0 failed to register rx_handler [ 114.251472][ T8981] hsr_slave_0: entered promiscuous mode [ 114.258782][ T8981] hsr_slave_1: entered promiscuous mode [ 114.264683][ T8981] debugfs: 'hsr0' already exists in 'hsr' [ 114.270537][ T8981] Cannot create hsr debugfs directory [ 114.281177][ T6809] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.320603][ T6809] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.339701][ T9044] loop3: detected capacity change from 0 to 1024 [ 114.346686][ T9044] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 114.369603][ T6809] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.386258][ T3474] hid-generic 0000:0000:0000.0006: hidraw0: HID v8.00 Device [syz0] on syz0 [ 114.443957][ T8981] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 114.455898][ T8981] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 114.466852][ T8981] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 114.488846][ T8981] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 114.507253][ T6809] bridge_slave_1: left allmulticast mode [ 114.512994][ T6809] bridge_slave_1: left promiscuous mode [ 114.518700][ T6809] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.530998][ T6809] bridge_slave_0: left allmulticast mode [ 114.536702][ T6809] bridge_slave_0: left promiscuous mode [ 114.542445][ T6809] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.652513][ T6809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.663914][ T6809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.680882][ T6809] bond0 (unregistering): Released all slaves [ 114.723736][ T6809] hsr_slave_0: left promiscuous mode [ 114.732955][ T6809] hsr_slave_1: left promiscuous mode [ 114.742935][ T6809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.750525][ T6809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.761844][ T6809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.769361][ T6809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.783704][ T6809] veth1_macvtap: left promiscuous mode [ 114.792197][ T6809] veth0_macvtap: left promiscuous mode [ 114.799769][ T6809] veth1_vlan: left promiscuous mode [ 114.805091][ T6809] veth0_vlan: left promiscuous mode [ 114.819939][ T9076] netlink: 'syz.0.2217': attribute type 10 has an invalid length. [ 114.881634][ T6809] team0 (unregistering): Port device team_slave_1 removed [ 114.891643][ T6809] team0 (unregistering): Port device team_slave_0 removed [ 114.931163][ T9076] team0: Device hsr_slave_0 failed to register rx_handler [ 115.002633][ T8981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.018211][ T8981] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.021665][ T3474] hid-generic 0000:0000:0000.0007: hidraw0: HID v8.00 Device [syz0] on syz0 [ 115.036339][ T6781] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.043530][ T6781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.043718][ T9087] loop3: detected capacity change from 0 to 1024 [ 115.056883][ T6781] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.064274][ T6781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.072150][ T9087] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.079806][ T9087] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.101163][ T8981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.111540][ T9087] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.120356][ T9092] loop0: detected capacity change from 0 to 1024 [ 115.129854][ T9092] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 115.130288][ T9087] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.2223: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 115.141026][ T9092] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 115.174207][ T9087] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2223: couldn't read orphan inode 11 (err -117) [ 115.182308][ T9092] JBD2: no valid journal superblock found [ 115.191986][ T9092] EXT4-fs (loop0): Could not load journal inode [ 115.196992][ T9087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.228234][ T9087] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2223: Invalid block bitmap block 0 in block_group 0 [ 115.245198][ T9092] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 115.254976][ T9087] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2223: Failed to acquire dquot type 0 [ 115.261515][ T8981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.292205][ T9087] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 115.334347][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.560053][ T8981] veth0_vlan: entered promiscuous mode [ 115.570452][ T8981] veth1_vlan: entered promiscuous mode [ 115.586943][ T8981] veth0_macvtap: entered promiscuous mode [ 115.594733][ T8981] veth1_macvtap: entered promiscuous mode [ 115.607340][ T8981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.621033][ T8981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.632592][ T292] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.641846][ T292] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.657230][ T292] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.666999][ T292] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.740091][ T9142] loop9: detected capacity change from 0 to 1024 [ 115.751120][ T9142] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.761320][ T9142] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.774571][ T9146] loop8: detected capacity change from 0 to 1024 [ 115.781548][ T9142] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.793159][ T9146] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 115.804654][ T9142] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.2238: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 115.824954][ T6821] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 115.838247][ T9142] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.2238: couldn't read orphan inode 11 (err -117) [ 115.850971][ T9142] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.869804][ T9142] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.2238: Invalid block bitmap block 0 in block_group 0 [ 115.893092][ T9142] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.2238: Failed to acquire dquot type 0 [ 115.906088][ T9142] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 115.927375][ T8981] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.138171][ T9173] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 116.195649][ T9172] infiniband syz!: set active [ 116.200636][ T9172] infiniband syz!: added team_slave_0 [ 116.219239][ T9172] RDS/IB: syz!: added [ 116.223495][ T9172] smc: adding ib device syz! with port count 1 [ 116.231379][ T9172] smc: ib device syz! port 1 has pnetid [ 116.361796][ T9182] loop6: detected capacity change from 0 to 1024 [ 116.370382][ T9182] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 116.433855][ T9188] loop6: detected capacity change from 0 to 1024 [ 116.440646][ T9188] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.447441][ T9188] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.456181][ T9188] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.469681][ T9188] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.2255: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 116.491890][ T9188] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2255: couldn't read orphan inode 11 (err -117) [ 116.504720][ T9188] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.522982][ T9188] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2255: Invalid block bitmap block 0 in block_group 0 [ 116.537108][ T9188] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.2255: Failed to acquire dquot type 0 [ 116.549647][ T292] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 116.563976][ T9188] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 116.592240][ T7451] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.208339][ T6821] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 118.132950][ T9299] __nla_validate_parse: 8 callbacks suppressed [ 118.132988][ T9299] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2299'. [ 118.148281][ T9299] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2299'. [ 119.124432][ T9315] team_slave_0: entered promiscuous mode [ 119.130335][ T9315] team_slave_1: entered promiscuous mode [ 119.144277][ T9315] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 119.165091][ T9315] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 119.204769][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2312'. [ 119.220381][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 119.220448][ T29] audit: type=1326 audit(119.215:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.3.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5904ebe9 code=0x7ffc0000 [ 119.271016][ T29] audit: type=1326 audit(119.245:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.3.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b5904ebe9 code=0x7ffc0000 [ 119.294065][ T29] audit: type=1326 audit(119.245:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.3.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5904ebe9 code=0x7ffc0000 [ 119.317098][ T29] audit: type=1326 audit(119.245:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.3.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f3b5904ebe9 code=0x7ffc0000 [ 119.340112][ T29] audit: type=1326 audit(119.245:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.3.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5904ebe9 code=0x7ffc0000 [ 119.363285][ T29] audit: type=1326 audit(119.245:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.3.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5904ebe9 code=0x7ffc0000 [ 119.386276][ T29] audit: type=1326 audit(119.255:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 119.409374][ T29] audit: type=1326 audit(119.255:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 119.432305][ T29] audit: type=1326 audit(119.265:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 119.455283][ T29] audit: type=1326 audit(119.265:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 119.480970][ T9339] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2319'. [ 119.490136][ T9335] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 119.563640][ T9351] loop3: detected capacity change from 0 to 128 [ 119.599725][ T9351] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.621806][ T9351] EXT4-fs error (device loop3): ext4_validate_block_bitmap:423: comm syz.3.2326: bg 0: bad block bitmap checksum [ 119.685154][ T9366] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2332'. [ 119.694400][ T9366] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2332'. [ 119.736624][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.784194][ T9372] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 120.306022][ T9407] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2351'. [ 120.401906][ T9411] team_slave_0: entered promiscuous mode [ 120.407769][ T9411] team_slave_1: entered promiscuous mode [ 120.473460][ T9411] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 120.520020][ T9414] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 120.627188][ T9424] loop8: detected capacity change from 0 to 128 [ 120.656564][ T9424] FAT-fs (loop8): Directory bread(block 32) failed [ 120.669102][ T9424] FAT-fs (loop8): Directory bread(block 33) failed [ 120.683086][ T9424] FAT-fs (loop8): Directory bread(block 34) failed [ 120.691212][ T9428] loop6: detected capacity change from 0 to 128 [ 120.697791][ T9424] FAT-fs (loop8): Directory bread(block 35) failed [ 120.707097][ T9424] FAT-fs (loop8): Directory bread(block 36) failed [ 120.715856][ T9424] FAT-fs (loop8): Directory bread(block 37) failed [ 120.729494][ T9428] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.731952][ T9424] FAT-fs (loop8): Directory bread(block 38) failed [ 120.757556][ T9424] FAT-fs (loop8): Directory bread(block 39) failed [ 120.764367][ T9424] FAT-fs (loop8): Directory bread(block 40) failed [ 120.772878][ T9424] FAT-fs (loop8): Directory bread(block 41) failed [ 120.785035][ T9428] EXT4-fs error (device loop6): ext4_validate_block_bitmap:423: comm syz.6.2361: bg 0: bad block bitmap checksum [ 120.853867][ T7451] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.970790][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2365'. [ 121.134888][ T9456] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 121.151438][ T9454] loop8: detected capacity change from 0 to 4096 [ 121.162523][ T9454] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 121.326070][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2383'. [ 121.493246][ T9493] wireguard0: entered promiscuous mode [ 121.498818][ T9493] wireguard0: entered allmulticast mode [ 121.675711][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2397'. [ 121.757214][ T9520] loop0: detected capacity change from 0 to 128 [ 121.786486][ T9520] FAT-fs (loop0): Directory bread(block 32) failed [ 121.793249][ T9520] FAT-fs (loop0): Directory bread(block 33) failed [ 121.801545][ T9520] FAT-fs (loop0): Directory bread(block 34) failed [ 121.808206][ T9520] FAT-fs (loop0): Directory bread(block 35) failed [ 121.814791][ T9520] FAT-fs (loop0): Directory bread(block 36) failed [ 121.822816][ T9520] FAT-fs (loop0): Directory bread(block 37) failed [ 121.829729][ T9520] FAT-fs (loop0): Directory bread(block 38) failed [ 121.836342][ T9520] FAT-fs (loop0): Directory bread(block 39) failed [ 121.844619][ T9520] FAT-fs (loop0): Directory bread(block 40) failed [ 121.851244][ T9520] FAT-fs (loop0): Directory bread(block 41) failed [ 121.920075][ T9522] team_slave_0: entered promiscuous mode [ 121.925780][ T9522] team_slave_1: entered promiscuous mode [ 121.935065][ T9522] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 121.951735][ T9522] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 121.992037][ T9527] program syz.8.2408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.021371][ T9534] netlink: 'syz.9.2411': attribute type 21 has an invalid length. [ 122.144586][ T9548] loop3: detected capacity change from 0 to 4096 [ 122.152879][ T9548] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 122.153512][ T9554] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.168269][ T9552] hub 9-0:1.0: USB hub found [ 122.177348][ T9554] FAT-fs (loop13): unable to read boot sector [ 122.177708][ T9552] hub 9-0:1.0: 8 ports detected [ 122.251439][ T9561] program syz.6.2422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.282759][ T9566] program syz.9.2435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.296051][ T9568] netlink: 'syz.6.2423': attribute type 21 has an invalid length. [ 122.355345][ T9574] loop6: detected capacity change from 0 to 2048 [ 122.397144][ T9574] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2427: bg 0: block 464: padding at end of block bitmap is not set [ 122.418993][ T9585] loop9: detected capacity change from 0 to 128 [ 122.492814][ T9591] bio_check_eod: 212 callbacks suppressed [ 122.492833][ T9591] syz.9.2442: attempt to access beyond end of device [ 122.492833][ T9591] loop9: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 122.494304][ T9592] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 122.499862][ T9591] syz.9.2442: attempt to access beyond end of device [ 122.499862][ T9591] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 122.535203][ T9591] syz.9.2442: attempt to access beyond end of device [ 122.535203][ T9591] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 122.550733][ T9595] loop6: detected capacity change from 0 to 512 [ 122.555546][ T9591] syz.9.2442: attempt to access beyond end of device [ 122.555546][ T9591] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 122.570621][ T9591] syz.9.2442: attempt to access beyond end of device [ 122.570621][ T9591] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 122.584340][ T9591] syz.9.2442: attempt to access beyond end of device [ 122.584340][ T9591] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 122.598111][ T9591] syz.9.2442: attempt to access beyond end of device [ 122.598111][ T9591] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 122.613430][ T9591] syz.9.2442: attempt to access beyond end of device [ 122.613430][ T9591] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 122.627111][ T9591] syz.9.2442: attempt to access beyond end of device [ 122.627111][ T9591] loop9: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 122.641144][ T9591] syz.9.2442: attempt to access beyond end of device [ 122.641144][ T9591] loop9: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 123.113762][ T9619] tipc: Started in network mode [ 123.118814][ T9619] tipc: Node identity fffeffff, cluster identity 4711 [ 123.125622][ T9619] tipc: Node number set to 4294901759 [ 123.162694][ T9621] hub 9-0:1.0: USB hub found [ 123.170468][ T9623] loop6: detected capacity change from 0 to 512 [ 123.176900][ T9621] hub 9-0:1.0: 8 ports detected [ 123.200078][ T9623] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 123.218642][ T9623] EXT4-fs (loop6): 1 truncate cleaned up [ 123.435887][ T9641] loop0: detected capacity change from 0 to 512 [ 123.453753][ T9642] loop3: detected capacity change from 0 to 2048 [ 123.463079][ T9644] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 123.479503][ T9642] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2458: bg 0: block 464: padding at end of block bitmap is not set [ 123.492705][ T9641] syz.0.2459 (9641) used greatest stack depth: 8960 bytes left [ 123.532455][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.536166][ T9655] loop0: detected capacity change from 0 to 128 [ 123.542941][ T9654] FAT-fs (loop7): unable to read boot sector [ 123.723874][ T9677] rdma_op ffff8881032ba180 conn xmit_rdma 0000000000000000 [ 123.749616][ T9679] __nla_validate_parse: 3 callbacks suppressed [ 123.749632][ T9679] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2473'. [ 123.771328][ T9681] tipc: Started in network mode [ 123.776373][ T9681] tipc: Node identity ac14142f, cluster identity 4711 [ 123.784964][ T9681] tipc: New replicast peer: 0.0.0.0 [ 123.790434][ T9681] tipc: Enabled bearer , priority 10 [ 123.799607][ T9681] tipc: New replicast peer: 255.255.255.255 [ 123.823946][ T9685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2476'. [ 123.833444][ T9685] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 123.992765][ T9700] loop3: detected capacity change from 0 to 128 [ 124.057250][ T9706] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2497'. [ 124.069641][ T9708] rdma_op ffff8881216ffd80 conn xmit_rdma 0000000000000000 [ 124.100826][ T9711] tipc: New replicast peer: 0.0.0.0 [ 124.106379][ T9711] tipc: Enabled bearer , priority 10 [ 124.113413][ T9711] tipc: New replicast peer: 255.255.255.255 [ 124.150824][ T9716] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2489'. [ 124.160194][ T9716] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 124.199251][ T9718] loop9: detected capacity change from 0 to 256 [ 124.207806][ T9718] msdos: Bad value for 'fmask' [ 124.290025][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 124.290044][ T29] audit: type=1326 audit(124.285:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 124.319215][ T29] audit: type=1326 audit(124.285:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 124.345425][ T29] audit: type=1326 audit(124.335:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 124.368505][ T29] audit: type=1326 audit(124.335:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 124.391397][ T29] audit: type=1326 audit(124.335:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 124.414849][ T29] audit: type=1326 audit(124.335:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 124.437412][ T9736] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2499'. [ 124.437782][ T29] audit: type=1326 audit(124.345:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 124.469727][ T29] audit: type=1326 audit(124.345:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 124.492549][ T29] audit: type=1326 audit(124.345:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 124.517727][ T29] audit: type=1326 audit(124.405:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 124.560880][ T6809] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.579895][ T9741] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2505'. [ 124.617960][ T9745] openvswitch: netlink: Message has 6 unknown bytes. [ 124.629982][ T9748] loop8: detected capacity change from 0 to 256 [ 124.638187][ T6809] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.649812][ T9748] msdos: Bad value for 'fmask' [ 124.694474][ T6809] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.713469][ T9758] loop8: detected capacity change from 0 to 128 [ 124.760329][ T6809] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.797521][ T3404] tipc: Node number set to 2886997039 [ 124.951455][ T9785] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2520'. [ 125.011658][ T6809] bond1 (unregistering): (slave geneve2): Releasing active interface [ 125.023372][ T9792] loop6: detected capacity change from 0 to 256 [ 125.038800][ T9794] openvswitch: netlink: Message has 6 unknown bytes. [ 125.062520][ T9792] msdos: Bad value for 'fmask' [ 125.079971][ T6809] bond0 (unregistering): Released all slaves [ 125.086241][ T9798] netlink: 'syz.9.2527': attribute type 10 has an invalid length. [ 125.098473][ T6809] bond1 (unregistering): Released all slaves [ 125.109232][ T6809] bond2 (unregistering): Released all slaves [ 125.119109][ T6809] bond3 (unregistering): Released all slaves [ 125.160703][ T9798] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 125.266805][ T9805] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 125.330181][ T6809] hsr_slave_0: left promiscuous mode [ 125.336168][ T6809] hsr_slave_1: left promiscuous mode [ 125.346380][ T6809] veth1_macvtap: left promiscuous mode [ 125.351976][ T6809] veth0_macvtap: left promiscuous mode [ 125.358134][ T6809] veth1_vlan: left promiscuous mode [ 125.363414][ T6809] veth0_vlan: left promiscuous mode [ 125.439777][ T9747] chnl_net:caif_netlink_parms(): no params data found [ 125.489224][ T9747] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.496350][ T9747] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.503996][ T9747] bridge_slave_0: entered allmulticast mode [ 125.514779][ T9747] bridge_slave_0: entered promiscuous mode [ 125.523421][ T9747] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.530600][ T9747] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.539732][ T9747] bridge_slave_1: entered allmulticast mode [ 125.546374][ T9747] bridge_slave_1: entered promiscuous mode [ 125.567627][ T9747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.578805][ T9747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.598578][ T9747] team0: Port device team_slave_0 added [ 125.605244][ T9747] team0: Port device team_slave_1 added [ 125.621265][ T9747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.628285][ T9747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.654225][ T9747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.665690][ T9747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.672729][ T9747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.698721][ T9747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.727374][ T9747] hsr_slave_0: entered promiscuous mode [ 125.733554][ T9747] hsr_slave_1: entered promiscuous mode [ 125.739508][ T9747] debugfs: 'hsr0' already exists in 'hsr' [ 125.745245][ T9747] Cannot create hsr debugfs directory [ 125.756954][ T6809] IPVS: stop unused estimator thread 0... [ 125.815552][ T9747] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.860521][ T9747] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.931689][ T9747] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.000143][ T9747] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.073159][ T9747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 126.082344][ T9747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 126.091371][ T9747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 126.100143][ T9747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 126.115160][ T9747] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.122368][ T9747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.129740][ T9747] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.136774][ T9747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.164160][ T9747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.175929][ T6809] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.184082][ T6809] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.196612][ T9747] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.206833][ T6809] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.213936][ T6809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.224110][ T6809] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.231215][ T6809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.291760][ T9747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.357120][ T9747] veth0_vlan: entered promiscuous mode [ 126.364676][ T9747] veth1_vlan: entered promiscuous mode [ 126.380181][ T9747] veth0_macvtap: entered promiscuous mode [ 126.387588][ T9747] veth1_macvtap: entered promiscuous mode [ 126.398552][ T9747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.409426][ T9747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.419980][ T6829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.428970][ T6829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.438319][ T6829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.447283][ T6829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.356546][ T9845] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2534'. [ 127.404748][ T9858] loop8: detected capacity change from 0 to 512 [ 127.412537][ T9858] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 127.432605][ T9858] EXT4-fs (loop8): 1 truncate cleaned up [ 127.624004][ T9888] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2556'. [ 128.005649][ T9925] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2570'. [ 128.035602][ T9928] loop8: detected capacity change from 0 to 2048 [ 128.064323][ T9928] EXT4-fs (loop8): shut down requested (0) [ 128.186551][ T9949] loop8: detected capacity change from 0 to 164 [ 128.194355][ T9949] iso9660: Unknown parameter '18446744073709551615)-B' [ 128.295100][ T9965] 9pnet: Could not find request transport: 0xffffffffffffffff [ 128.512370][ T9983] loop9: detected capacity change from 0 to 164 [ 128.519556][ T9983] iso9660: Unknown parameter '18446744073709551615)-B' [ 128.556941][ T9986] loop9: detected capacity change from 0 to 512 [ 128.590489][ T9986] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #18: comm syz.9.2598: corrupted inode contents [ 128.603653][ T9986] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #18: comm syz.9.2598: mark_inode_dirty error [ 128.615471][ T9986] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #18: comm syz.9.2598: corrupted inode contents [ 128.638716][ T9995] vhci_hcd: invalid port number 96 [ 128.644345][ T9995] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 128.655022][ T9986] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2991: inode #18: comm syz.9.2598: mark_inode_dirty error [ 128.673147][ T9986] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2994: inode #18: comm syz.9.2598: mark inode dirty (error -117) [ 128.699130][ T9986] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 128.809962][T10012] 9pnet: Could not find request transport: 0xffffffffffffffff [ 128.833772][T10015] macvtap0: refused to change device tx_queue_len [ 129.275679][T10039] netlink: 'syz.1.2622': attribute type 1 has an invalid length. [ 129.283694][T10039] netlink: 'syz.1.2622': attribute type 2 has an invalid length. [ 129.319048][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 129.319065][ T29] audit: type=1400 audit(129.315:2187): avc: denied { accept } for pid=10043 comm="syz.6.2625" lport=54971 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 129.347920][ T29] audit: type=1400 audit(129.315:2188): avc: denied { setopt } for pid=10043 comm="syz.6.2625" lport=54971 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 129.376449][ T29] audit: type=1400 audit(129.315:2189): avc: denied { getopt } for pid=10043 comm="syz.6.2625" lport=54971 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 129.402445][T10047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2627'. [ 129.413278][T10047] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2627'. [ 129.422545][ T29] audit: type=1400 audit(129.405:2190): avc: denied { nlmsg_read } for pid=10046 comm="syz.1.2627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.525127][T10064] macvtap0: refused to change device tx_queue_len [ 129.629883][ T29] audit: type=1326 audit(129.625:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10083 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 129.664396][ T29] audit: type=1326 audit(129.645:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10083 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 129.687478][ T29] audit: type=1326 audit(129.645:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10083 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 129.710531][ T29] audit: type=1326 audit(129.645:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10083 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 129.733521][ T29] audit: type=1326 audit(129.645:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10083 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 129.756538][ T29] audit: type=1326 audit(129.645:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10083 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 129.914275][T10104] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2651'. [ 130.016010][T10117] @: renamed from vlan0 (while UP) [ 130.057858][T10115] netlink: 'syz.6.2658': attribute type 1 has an invalid length. [ 130.065652][T10115] netlink: 'syz.6.2658': attribute type 2 has an invalid length. [ 130.103858][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2671'. [ 130.134875][T10121] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2671'. [ 130.299475][T10142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.332870][T10142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.345411][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2677'. [ 130.359641][T10151] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2677'. [ 132.114226][T10178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.124135][T10178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.219926][T10197] ALSA: seq fatal error: cannot create timer (-22) [ 132.301745][T10213] hub 9-0:1.0: USB hub found [ 132.306526][T10213] hub 9-0:1.0: 8 ports detected [ 132.404937][T10227] ALSA: seq fatal error: cannot create timer (-22) [ 132.862821][T10266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.876644][T10266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.981087][T10285] ALSA: seq fatal error: cannot create timer (-22) [ 133.430079][T10307] hub 9-0:1.0: USB hub found [ 133.434856][T10307] hub 9-0:1.0: 8 ports detected [ 133.624695][T10336] hub 9-0:1.0: USB hub found [ 133.637784][T10336] hub 9-0:1.0: 8 ports detected [ 133.774445][T10355] rdma_op ffff88810f9d4980 conn xmit_rdma 0000000000000000 [ 133.868527][T10368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.894709][T10368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.927502][T10377] hub 9-0:1.0: USB hub found [ 133.932364][T10377] hub 9-0:1.0: 8 ports detected [ 134.440173][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 134.440191][ T29] audit: type=1400 audit(134.435:2332): avc: denied { write } for pid=10411 comm="syz.6.2801" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 134.481575][T10413] hub 9-0:1.0: USB hub found [ 134.497060][T10413] hub 9-0:1.0: 8 ports detected [ 134.529481][ T29] audit: type=1400 audit(134.465:2333): avc: denied { map } for pid=10415 comm="syz.0.2803" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 134.553319][ T29] audit: type=1400 audit(134.465:2334): avc: denied { read write } for pid=10415 comm="syz.0.2803" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 134.577953][ T29] audit: type=1400 audit(134.485:2335): avc: denied { name_bind } for pid=10421 comm="syz.1.2806" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 134.599054][ T29] audit: type=1400 audit(134.485:2336): avc: denied { create } for pid=10417 comm="syz.8.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.618103][ T29] audit: type=1400 audit(134.495:2337): avc: denied { write } for pid=10417 comm="syz.8.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.637016][ T29] audit: type=1400 audit(134.515:2338): avc: denied { create } for pid=10412 comm="syz.9.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.657209][ T29] audit: type=1400 audit(134.515:2339): avc: denied { write } for pid=10412 comm="syz.9.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.710145][ T29] audit: type=1326 audit(134.705:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10431 comm="syz.6.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc369f8ebe9 code=0x7ffc0000 [ 134.775448][T10437] SELinux: failed to load policy [ 134.800231][ T29] audit: type=1326 audit(134.705:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10431 comm="syz.6.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fc369f8ebe9 code=0x7ffc0000 [ 134.847372][T10451] netlink: 'syz.8.2823': attribute type 10 has an invalid length. [ 134.855340][T10451] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2823'. [ 134.860075][T10454] hub 9-0:1.0: USB hub found [ 134.872319][T10454] hub 9-0:1.0: 8 ports detected [ 134.886635][T10451] dummy0: entered promiscuous mode [ 134.892791][T10451] bridge0: port 3(dummy0) entered blocking state [ 134.899290][T10451] bridge0: port 3(dummy0) entered disabled state [ 134.905900][T10451] dummy0: entered allmulticast mode [ 134.912292][T10451] bridge0: port 3(dummy0) entered blocking state [ 134.918802][T10451] bridge0: port 3(dummy0) entered forwarding state [ 135.489885][T10514] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2848'. [ 135.527107][T10520] rdma_op ffff8881023b5d80 conn xmit_rdma 0000000000000000 [ 135.540089][T10514] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2848'. [ 135.561881][T10523] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2848'. [ 135.596723][T10514] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2848'. [ 135.633682][T10523] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2848'. [ 135.684659][T10523] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2848'. [ 135.707752][T10540] IPVS: stopping master sync thread 10541 ... [ 135.714676][T10541] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 135.841893][T10558] netlink: 340 bytes leftover after parsing attributes in process `syz.1.2865'. [ 135.914242][T10566] netlink: 'syz.9.2869': attribute type 10 has an invalid length. [ 135.922165][T10566] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2869'. [ 135.932918][T10566] dummy0: entered promiscuous mode [ 135.939548][T10566] bond0: (slave dummy0): Releasing backup interface [ 135.949958][T10566] bridge0: port 3(dummy0) entered blocking state [ 135.956380][T10566] bridge0: port 3(dummy0) entered disabled state [ 135.970076][T10566] dummy0: entered allmulticast mode [ 135.988506][T10568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.997041][T10568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.112254][T10580] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2884'. [ 136.263674][T10592] pim6reg: entered allmulticast mode [ 136.281335][T10592] pim6reg: left allmulticast mode [ 136.320784][T10599] netlink: 'syz.6.2883': attribute type 10 has an invalid length. [ 136.329346][T10598] veth3: entered promiscuous mode [ 136.334698][T10599] dummy0: entered promiscuous mode [ 136.340622][T10599] bridge0: port 3(dummy0) entered blocking state [ 136.347126][T10599] bridge0: port 3(dummy0) entered disabled state [ 136.353951][T10599] dummy0: entered allmulticast mode [ 136.361423][T10599] bridge0: port 3(dummy0) entered blocking state [ 136.367869][T10599] bridge0: port 3(dummy0) entered forwarding state [ 136.432135][T10606] SELinux: failed to load policy [ 136.511734][T10611] SELinux: failed to load policy [ 136.563773][T10624] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 136.564035][T10621] IPVS: stopping master sync thread 10624 ... [ 136.952087][T10648] netlink: 'syz.1.2901': attribute type 10 has an invalid length. [ 136.960147][T10648] dummy0: entered promiscuous mode [ 136.965998][T10648] bridge0: port 3(dummy0) entered blocking state [ 136.972537][T10648] bridge0: port 3(dummy0) entered disabled state [ 136.979379][T10648] dummy0: entered allmulticast mode [ 136.985766][T10648] bridge0: port 3(dummy0) entered blocking state [ 136.992222][T10648] bridge0: port 3(dummy0) entered forwarding state [ 137.069587][T10657] SELinux: failed to load policy [ 137.096945][T10661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.105632][T10661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.113713][T10660] veth3: entered promiscuous mode [ 137.664501][T10710] syzkaller0: entered promiscuous mode [ 137.670223][T10710] syzkaller0: entered allmulticast mode [ 137.717304][T10719] netlink: 'syz.6.2937': attribute type 13 has an invalid length. [ 137.748565][T10719] gretap0: refused to change device tx_queue_len [ 137.765721][T10719] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 137.860442][T10737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.883050][T10737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.464028][T10797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.489078][T10797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.163025][T10850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.177415][T10850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.491483][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 139.491500][ T29] audit: type=1326 audit(139.485:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.9.3004" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbba24febe9 code=0x0 [ 139.516411][T10856] syzkaller0: entered promiscuous mode [ 139.525603][T10856] syzkaller0: entered allmulticast mode [ 139.618996][ T29] audit: type=1400 audit(139.615:2616): avc: denied { create } for pid=10867 comm="syz.0.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 139.640822][T10868] IPVS: stopping master sync thread 10869 ... [ 139.664340][ T29] audit: type=1400 audit(139.635:2617): avc: denied { setopt } for pid=10867 comm="syz.0.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 139.683425][ T29] audit: type=1400 audit(139.655:2618): avc: denied { create } for pid=10871 comm="syz.0.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.708242][ T29] audit: type=1400 audit(139.705:2619): avc: denied { read } for pid=10871 comm="syz.0.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.777653][ T29] audit: type=1400 audit(139.725:2620): avc: denied { write } for pid=10871 comm="syz.0.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.796694][ T29] audit: type=1400 audit(139.745:2621): avc: denied { mount } for pid=10877 comm="syz.6.2999" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 139.840189][T10881] netlink: 'syz.1.3000': attribute type 13 has an invalid length. [ 139.855623][T10881] gretap0: refused to change device tx_queue_len [ 139.863759][T10881] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 139.974506][T10890] netlink: 'syz.1.3006': attribute type 21 has an invalid length. [ 139.982512][T10890] __nla_validate_parse: 22 callbacks suppressed [ 139.982527][T10890] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3006'. [ 140.565727][ T29] audit: type=1400 audit(140.555:2622): avc: denied { write } for pid=10897 comm="syz.9.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 140.608480][T10896] syzkaller0: entered promiscuous mode [ 140.614051][T10896] syzkaller0: entered allmulticast mode [ 140.694456][ T29] audit: type=1400 audit(140.685:2623): avc: denied { create } for pid=10907 comm="syz.9.3014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.719388][ T29] audit: type=1326 audit(140.715:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10907 comm="syz.9.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba24febe9 code=0x7ffc0000 [ 140.829370][T10918] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3017'. [ 140.855659][T10928] netlink: 'syz.9.3024': attribute type 21 has an invalid length. [ 140.863359][T10918] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3017'. [ 140.863687][T10928] netlink: 156 bytes leftover after parsing attributes in process `syz.9.3024'. [ 140.909854][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3017'. [ 140.934254][T10936] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 140.952632][T10918] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3017'. [ 140.987352][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3017'. [ 141.003140][T10946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.017332][T10946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.047982][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3017'. [ 141.191328][T10960] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3043'. [ 141.209187][T10960] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3043'. [ 141.711947][T10979] netlink: 'syz.8.3037': attribute type 21 has an invalid length. [ 141.934420][ C1] hrtimer: interrupt took 27525 ns [ 142.571079][T11056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.580217][T11056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.149810][T11083] IPv6: Can't replace route, no match found [ 143.195658][T11089] usb usb1: usbfs: process 11089 (syz.9.3089) did not claim interface 4 before use [ 143.597048][T11127] netlink: 'syz.1.3095': attribute type 2 has an invalid length. [ 143.605019][T11127] netlink: 'syz.1.3095': attribute type 1 has an invalid length. [ 143.755928][T11145] serio: Serial port ptm0 [ 143.994422][T11176] IPv6: Can't replace route, no match found [ 144.181442][T11184] usb usb1: usbfs: process 11184 (syz.6.3125) did not claim interface 4 before use [ 144.390233][T11211] netlink: 'syz.9.3134': attribute type 2 has an invalid length. [ 144.398314][T11211] netlink: 'syz.9.3134': attribute type 1 has an invalid length. [ 144.619765][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 144.619784][ T29] audit: type=1326 audit(144.615:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11229 comm="syz.8.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072eb3ebe9 code=0x7ffc0000 [ 144.650736][ T29] audit: type=1326 audit(144.645:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11229 comm="syz.8.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f072eb3ebe9 code=0x7ffc0000 [ 144.673819][ T29] audit: type=1326 audit(144.645:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11229 comm="syz.8.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072eb3ebe9 code=0x7ffc0000 [ 144.696806][ T29] audit: type=1326 audit(144.645:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11229 comm="syz.8.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072eb3ebe9 code=0x7ffc0000 [ 144.719798][ T29] audit: type=1326 audit(144.645:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11229 comm="syz.8.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f072eb3ebe9 code=0x7ffc0000 [ 144.742892][ T29] audit: type=1326 audit(144.645:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11229 comm="syz.8.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072eb3ebe9 code=0x7ffc0000 [ 144.765920][ T29] audit: type=1326 audit(144.645:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11229 comm="syz.8.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072eb3ebe9 code=0x7ffc0000 [ 144.796855][ T29] audit: type=1326 audit(144.785:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11229 comm="syz.8.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f072eb3ebe9 code=0x7ffc0000 [ 144.820017][ T29] audit: type=1326 audit(144.785:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11229 comm="syz.8.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072eb3ebe9 code=0x7ffc0000 [ 144.843133][ T29] audit: type=1326 audit(144.785:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11229 comm="syz.8.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072eb3ebe9 code=0x7ffc0000 [ 144.886779][T11230] vhci_hcd: invalid port number 96 [ 144.892093][T11230] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 144.933295][T11241] netlink: 'syz.6.3148': attribute type 2 has an invalid length. [ 144.941228][T11241] netlink: 'syz.6.3148': attribute type 1 has an invalid length. [ 145.716360][T11326] vhci_hcd: invalid port number 96 [ 145.721576][T11326] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 145.973632][T11358] vhci_hcd: invalid port number 96 [ 145.978975][T11358] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 146.263070][T11393] serio: Serial port ptm0 [ 146.350127][T11402] hub 6-0:1.0: USB hub found [ 146.354816][T11402] hub 6-0:1.0: 8 ports detected [ 147.374227][T11479] hub 6-0:1.0: USB hub found [ 147.388073][T11479] hub 6-0:1.0: 8 ports detected [ 147.441171][T11492] serio: Serial port ptm0 [ 148.043028][T11523] hub 6-0:1.0: USB hub found [ 148.048004][T11523] hub 6-0:1.0: 8 ports detected [ 148.179548][T11532] IPv6: Can't replace route, no match found [ 148.315716][T11548] netlink: 'syz.9.3285': attribute type 1 has an invalid length. [ 148.323750][T11548] __nla_validate_parse: 20 callbacks suppressed [ 148.323768][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3285'. [ 148.343391][T11548] netlink: 'syz.9.3285': attribute type 1 has an invalid length. [ 148.351289][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3285'. [ 148.782918][T11579] hub 6-0:1.0: USB hub found [ 148.787837][T11579] hub 6-0:1.0: 8 ports detected [ 148.875761][T11596] IPv6: Can't replace route, no match found [ 148.905848][T11600] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3307'. [ 148.942954][T11600] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3307'. [ 148.974279][T11606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3311'. [ 148.983354][T11606] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3311'. [ 148.998211][T11606] bridge0: port 4(vlan2) entered blocking state [ 149.004558][T11606] bridge0: port 4(vlan2) entered disabled state [ 149.015758][T11606] vlan2: entered allmulticast mode [ 149.020969][T11606] bridge0: entered allmulticast mode [ 149.064724][T11606] vlan2: left allmulticast mode [ 149.069663][T11606] bridge0: left allmulticast mode [ 149.091726][T11618] SELinux: security policydb version 17 (MLS) not backwards compatible [ 149.100189][T11618] SELinux: failed to load policy [ 149.128754][T11620] netlink: 'syz.8.3315': attribute type 10 has an invalid length. [ 149.150374][T11620] team_slave_0: left promiscuous mode [ 149.155920][T11620] team_slave_1: left promiscuous mode [ 149.205313][T11625] atomic_op ffff8881024bf928 conn xmit_atomic 0000000000000000 [ 149.248437][T11620] team0 (unregistering): Port device team_slave_0 removed [ 149.273332][T11620] team0 (unregistering): Port device team_slave_1 removed [ 149.359421][T11631] netlink: 'syz.8.3321': attribute type 1 has an invalid length. [ 149.367234][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3321'. [ 149.381064][T11631] netlink: 'syz.8.3321': attribute type 1 has an invalid length. [ 149.388926][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3321'. [ 149.796583][T11651] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3328'. [ 149.805791][T11651] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3328'. [ 149.820393][T11651] bridge0: port 4(vlan0) entered blocking state [ 149.826840][T11651] bridge0: port 4(vlan0) entered disabled state [ 149.835104][T11651] vlan0: entered allmulticast mode [ 149.840291][T11651] bridge0: entered allmulticast mode [ 149.847333][T11651] vlan0: left allmulticast mode [ 149.852324][T11651] bridge0: left allmulticast mode [ 150.028041][T11664] SELinux: security policydb version 17 (MLS) not backwards compatible [ 150.053340][T11664] SELinux: failed to load policy [ 150.611414][T11693] atomic_op ffff888116308928 conn xmit_atomic 0000000000000000 [ 150.646037][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 150.646055][ T29] audit: type=1400 audit(150.635:2852): avc: denied { firmware_load } for pid=11695 comm="syz.1.3361" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 151.034084][T11735] netlink: 'syz.9.3368': attribute type 10 has an invalid length. [ 151.056013][T11735] team0 (unregistering): Port device team_slave_0 removed [ 151.069825][T11735] team0 (unregistering): Port device team_slave_1 removed [ 151.084690][ T3397] syz!: Port: 1 Link DOWN [ 151.176064][ T29] audit: type=1400 audit(151.165:2853): avc: denied { write } for pid=11744 comm="syz.9.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.240168][ T29] audit: type=1326 audit(151.235:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 151.263180][ T29] audit: type=1326 audit(151.235:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 151.286234][ T29] audit: type=1326 audit(151.235:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 151.309393][ T29] audit: type=1326 audit(151.235:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 151.332447][ T29] audit: type=1326 audit(151.235:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 151.355390][ T29] audit: type=1326 audit(151.235:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 151.378510][ T29] audit: type=1326 audit(151.235:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 151.401516][ T29] audit: type=1326 audit(151.235:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 151.746313][T11798] netlink: 'syz.6.3396': attribute type 10 has an invalid length. [ 151.774579][T11798] geneve1: entered promiscuous mode [ 151.782009][T11798] team0: Port device geneve1 added [ 151.791046][T11800] can0: slcan on ttyS3. [ 151.847658][T11800] can0 (unregistered): slcan off ttyS3. [ 152.092455][T11840] can0: slcan on ttyS3. [ 152.158232][T11840] can0 (unregistered): slcan off ttyS3. [ 152.273199][T11852] netlink: 'syz.0.3419': attribute type 10 has an invalid length. [ 152.290911][T11852] geneve1: entered promiscuous mode [ 152.311463][T11852] team0: Port device geneve1 added [ 152.365957][T11864] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 152.392101][T11867] can0: slcan on ttyS3. [ 152.457921][T11867] can0 (unregistered): slcan off ttyS3. [ 152.640545][T11899] netlink: 'syz.1.3442': attribute type 10 has an invalid length. [ 152.652746][T11899] team0: Port device geneve1 added [ 152.778194][T11911] netdevsim netdevsim8: Direct firmware load for 0. failed with error -2 [ 152.836352][T11919] netlink: 'syz.8.3461': attribute type 10 has an invalid length. [ 152.857246][T11919] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 153.807324][T11943] can0: slcan on ttyS3. [ 153.847732][T11943] can0 (unregistered): slcan off ttyS3. [ 154.653613][T11959] netlink: 'syz.9.3466': attribute type 10 has an invalid length. [ 154.661656][T11959] __nla_validate_parse: 18 callbacks suppressed [ 154.661675][T11959] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3466'. [ 154.699477][T11959] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 154.928353][T11990] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 155.513962][T12030] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 155.901418][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 155.901434][ T29] audit: type=1326 audit(155.895:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12066 comm="syz.9.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba24febe9 code=0x7ffc0000 [ 155.934690][ T29] audit: type=1326 audit(155.895:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12066 comm="syz.9.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba24febe9 code=0x7ffc0000 [ 155.957694][ T29] audit: type=1326 audit(155.895:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12066 comm="syz.9.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbba24febe9 code=0x7ffc0000 [ 155.980733][ T29] audit: type=1326 audit(155.925:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12066 comm="syz.9.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba24febe9 code=0x7ffc0000 [ 156.003773][ T29] audit: type=1326 audit(155.925:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12066 comm="syz.9.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbba24febe9 code=0x7ffc0000 [ 156.026835][ T29] audit: type=1326 audit(155.925:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12066 comm="syz.9.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbba24fec23 code=0x7ffc0000 [ 156.050402][ T29] audit: type=1326 audit(155.955:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12066 comm="syz.9.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbba24fd69f code=0x7ffc0000 [ 156.073210][ T29] audit: type=1326 audit(155.955:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12066 comm="syz.9.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbba24fec77 code=0x7ffc0000 [ 156.096030][ T29] audit: type=1326 audit(156.015:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12066 comm="syz.9.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbba24fd550 code=0x7ffc0000 [ 156.118993][ T29] audit: type=1326 audit(156.015:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12066 comm="syz.9.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbba24fd84a code=0x7ffc0000 [ 156.185485][T12073] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 156.409201][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3535'. [ 156.418202][T12105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3535'. [ 156.440605][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3536'. [ 156.696278][T12128] netlink: 3 bytes leftover after parsing attributes in process `syz.9.3543'. [ 156.709573][T12129] pim6reg1: entered promiscuous mode [ 156.714982][T12129] pim6reg1: entered allmulticast mode [ 156.724692][T12128] 0X: renamed from caif0 [ 156.733565][T12128] 0X: entered allmulticast mode [ 156.738864][T12128] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 156.849839][T12140] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3549'. [ 156.892124][T12143] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3550'. [ 156.901141][T12143] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3550'. [ 157.203019][T12148] Set syz1 is full, maxelem 65536 reached [ 157.234176][T12157] netdevsim netdevsim6: Direct firmware load for 0. failed with error -2 [ 157.380645][T12167] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3561'. [ 157.447231][T12175] macvtap0: refused to change device tx_queue_len [ 157.514086][T12185] netdevsim netdevsim9: Direct firmware load for 0. failed with error -2 [ 157.778128][T12183] Set syz1 is full, maxelem 65536 reached [ 157.801422][T12198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3575'. [ 157.866814][T12202] 0X: renamed from caif0 [ 157.873678][T12202] 0X: entered allmulticast mode [ 157.878960][T12202] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 157.979390][T12214] macvtap0: refused to change device tx_queue_len [ 158.018580][T12217] netdevsim netdevsim1: Direct firmware load for 0. failed with error -2 [ 158.032690][T12219] pim6reg1: entered promiscuous mode [ 158.038161][T12219] pim6reg1: entered allmulticast mode [ 158.657321][T12262] pim6reg1: entered promiscuous mode [ 158.662786][T12262] pim6reg1: entered allmulticast mode [ 158.823280][T12278] netlink: 'syz.9.3611': attribute type 4 has an invalid length. [ 158.850506][T12282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=12282 comm=syz.1.3614 [ 159.135698][T12309] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=12309 comm=syz.0.3626 [ 159.180060][T12315] netlink: 'syz.0.3628': attribute type 4 has an invalid length. [ 159.335654][T12339] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=12339 comm=syz.8.3639 [ 160.202937][T12429] __nla_validate_parse: 1 callbacks suppressed [ 160.202951][T12429] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3677'. [ 160.390068][T12416] chnl_net:caif_netlink_parms(): no params data found [ 160.456392][T12416] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.463694][T12416] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.471696][T12416] bridge_slave_0: entered allmulticast mode [ 160.478541][T12416] bridge_slave_0: entered promiscuous mode [ 160.486160][T12416] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.493321][T12416] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.501208][T12416] bridge_slave_1: entered allmulticast mode [ 160.508086][T12416] bridge_slave_1: entered promiscuous mode [ 160.532310][T12416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.544421][T12416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.580934][T12416] team0: Port device team_slave_0 added [ 160.588136][T12416] team0: Port device team_slave_1 added [ 160.611921][T12416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.619079][T12416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.645186][T12416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.659841][T12416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.666878][T12416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.692962][T12416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.736330][ T292] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.746791][ T292] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.767341][T12416] hsr_slave_0: entered promiscuous mode [ 160.774183][T12416] hsr_slave_1: entered promiscuous mode [ 160.782838][T12416] debugfs: 'hsr0' already exists in 'hsr' [ 160.788669][T12416] Cannot create hsr debugfs directory [ 160.820111][ T292] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.830582][ T292] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.917965][ T292] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.928566][ T292] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.984735][ T292] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.995292][ T292] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.058374][ T292] dummy0: left allmulticast mode [ 161.063753][ T292] bridge0: port 3(dummy0) entered disabled state [ 161.076399][ T292] bridge_slave_1: left allmulticast mode [ 161.082187][ T292] bridge_slave_1: left promiscuous mode [ 161.088046][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.098764][ T292] bridge_slave_0: left allmulticast mode [ 161.104465][ T292] bridge_slave_0: left promiscuous mode [ 161.110348][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.180657][ T292] team0: Port device geneve1 removed [ 161.230260][ T292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.260144][ T292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.282751][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 161.282779][ T29] audit: type=1326 audit(161.275:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12469 comm="syz.1.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 161.311961][ T29] audit: type=1326 audit(161.275:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12469 comm="syz.1.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 161.334939][ T29] audit: type=1326 audit(161.275:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12469 comm="syz.1.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 161.357812][ T29] audit: type=1326 audit(161.275:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12469 comm="syz.1.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 161.380826][ T29] audit: type=1326 audit(161.275:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12469 comm="syz.1.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 161.403742][ T29] audit: type=1326 audit(161.275:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12469 comm="syz.1.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 161.426675][ T29] audit: type=1326 audit(161.275:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12469 comm="syz.1.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 161.449763][ T29] audit: type=1326 audit(161.275:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12469 comm="syz.1.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 161.475597][ T292] bond0 (unregistering): Released all slaves [ 161.491168][ T292] bond1 (unregistering): Released all slaves [ 161.504664][ T29] audit: type=1326 audit(161.355:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12469 comm="syz.1.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 161.527852][ T29] audit: type=1326 audit(161.355:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12469 comm="syz.1.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14cdfbebe9 code=0x7ffc0000 [ 161.600042][ T292] tipc: Disabling bearer [ 161.605395][ T292] tipc: Left network mode [ 161.657965][ T292] hsr_slave_0: left promiscuous mode [ 161.665229][ T292] hsr_slave_1: left promiscuous mode [ 161.673224][ T292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.680714][ T292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.689533][ T292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.697040][ T292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.728496][ T292] team_slave_0: left promiscuous mode [ 161.733927][ T292] team_slave_1: left promiscuous mode [ 161.741732][ T292] veth1_macvtap: left promiscuous mode [ 161.747272][ T292] veth0_macvtap: left promiscuous mode [ 161.754791][ T292] veth1_vlan: left promiscuous mode [ 161.763319][ T292] veth0_vlan: left promiscuous mode [ 161.829315][ T292] team0 (unregistering): Port device team_slave_1 removed [ 161.839512][ T292] team0 (unregistering): Port device team_slave_0 removed [ 161.964754][T12416] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 161.974047][T12416] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 161.985452][T12416] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 161.994711][T12416] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 162.031141][T12416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.043243][T12416] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.052917][ T6813] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.060097][ T6813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.072273][ T6813] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.079459][ T6813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.149029][T12416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.256563][T12416] veth0_vlan: entered promiscuous mode [ 162.264796][T12416] veth1_vlan: entered promiscuous mode [ 162.279908][T12416] veth0_macvtap: entered promiscuous mode [ 162.287091][T12416] veth1_macvtap: entered promiscuous mode [ 162.297725][T12416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.308909][T12416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.318657][ T6808] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.328966][ T6808] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.338057][ T6808] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.346888][ T6781] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.504722][T12539] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 162.514886][T12539] block device autoloading is deprecated and will be removed. [ 162.604317][T12549] netlink: 5 bytes leftover after parsing attributes in process `syz.9.3727'. [ 162.613919][T12549] 0{X: renamed from gretap0 (while UP) [ 162.621550][T12549] 0{X: entered allmulticast mode [ 162.627919][T12549] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 162.824933][T12566] program syz.6.3725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.836451][T12566] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 162.889780][T12574] IPv6: Can't replace route, no match found [ 163.245803][T12596] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 163.245803][T12596] program syz.6.3739 not setting count and/or reply_len properly [ 163.371130][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3747'. [ 163.508053][T12633] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3766'. [ 164.307978][T12664] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3769'. [ 164.545589][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3775'. [ 164.569468][T12683] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3775'. [ 164.643380][T12691] IPv6: Can't replace route, no match found [ 164.995963][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3786'. [ 165.104267][T12717] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 165.104267][T12717] program syz.9.3793 not setting count and/or reply_len properly [ 165.200571][T12729] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3799'. [ 165.218155][T12729] 0{X: renamed from gretap0 (while UP) [ 165.226237][T12729] 0{X: entered allmulticast mode [ 165.234136][T12729] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 165.620092][T12760] netlink: 5 bytes leftover after parsing attributes in process `syz.8.3814'. [ 165.638294][T12760] 0{X: renamed from gretap0 (while UP) [ 165.659228][T12760] 0{X: entered allmulticast mode [ 165.665187][T12760] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 166.632561][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 166.632580][ T29] audit: type=1400 audit(166.625:3214): avc: denied { read } for pid=12806 comm="syz.1.3845" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.661321][ T29] audit: type=1400 audit(166.625:3215): avc: denied { open } for pid=12806 comm="syz.1.3845" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.702215][ T29] audit: type=1400 audit(166.695:3216): avc: denied { read } for pid=12806 comm="syz.1.3845" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.739490][ T29] audit: type=1400 audit(166.725:3217): avc: denied { prog_load } for pid=12809 comm="syz.8.3837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 166.758267][ T29] audit: type=1400 audit(166.725:3218): avc: denied { bpf } for pid=12809 comm="syz.8.3837" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 166.778307][ T29] audit: type=1400 audit(166.725:3219): avc: denied { perfmon } for pid=12809 comm="syz.8.3837" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 166.861713][ T29] audit: type=1400 audit(166.735:3220): avc: denied { create } for pid=12814 comm="syz.0.3847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.881011][ T29] audit: type=1400 audit(166.735:3221): avc: denied { setopt } for pid=12814 comm="syz.0.3847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.889707][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3837'. [ 166.900107][ T29] audit: type=1400 audit(166.735:3222): avc: denied { bind } for pid=12814 comm="syz.0.3847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.927753][ T29] audit: type=1400 audit(166.735:3223): avc: denied { name_bind } for pid=12814 comm="syz.0.3847" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 167.550449][T12850] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3853'. [ 167.574402][T12850] 0{X: renamed from gretap0 (while UP) [ 167.582418][T12850] 0{X: entered allmulticast mode [ 167.588957][T12850] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 167.691564][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3863'. [ 167.706516][T12866] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3863'. [ 167.798825][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3877'. [ 167.816372][T12876] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3877'. [ 167.864101][T12884] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3870'. [ 167.873273][T12884] 0{X: renamed from gretap0 (while UP) [ 167.880959][T12884] 0{X: entered allmulticast mode [ 167.887040][T12884] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 168.592876][T12961] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 168.699687][T12966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.710828][T12966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.908838][T12988] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 169.314029][T13005] SELinux: security_context_str_to_sid ($iqr埋A?U<{ט'5?}}wz-&ד\kOwv7c?5'QoٝsmSz=gʯc) failed with errno=-22 [ 169.386100][T13017] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 169.683335][T13041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.692004][T13041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.196620][T13092] SELinux: security_context_str_to_sid ($iqr埋A?U<{ט'5?}}wz-&ד\kOwv7c?5'QoٝsmSz=gʯc) failed with errno=-22 [ 170.359669][T13119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3976'. [ 170.368790][T13119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3976'. [ 170.383033][T13118] SELinux: security_context_str_to_sid ($iqr埋A?U<{ט'5?}}wz-&ד\kOwv7c?5'QoٝsmSz=gʯc) failed with errno=-22 [ 170.401157][T13119] netlink: 'syz.0.3976': attribute type 6 has an invalid length. [ 170.700947][T13150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.728290][T13150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.712408][T13220] __nla_validate_parse: 2 callbacks suppressed [ 171.712428][T13220] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4016'. [ 171.727670][T13220] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4016'. [ 171.736618][T13220] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4016'. [ 171.756870][T13220] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4016'. [ 171.766029][T13220] netlink: 'syz.9.4016': attribute type 6 has an invalid length. [ 171.869368][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 171.869385][ T29] audit: type=1400 audit(171.865:3462): avc: denied { mount } for pid=13233 comm="syz.1.4024" name="/" dev="configfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 171.913948][ T29] audit: type=1400 audit(171.865:3463): avc: denied { search } for pid=13233 comm="syz.1.4024" name="/" dev="configfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.935945][ T29] audit: type=1400 audit(171.865:3464): avc: denied { search } for pid=13233 comm="syz.1.4024" name="/" dev="configfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.957714][ T29] audit: type=1400 audit(171.865:3465): avc: denied { read open } for pid=13233 comm="syz.1.4024" path="/" dev="configfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 172.054321][ T29] audit: type=1400 audit(172.045:3466): avc: denied { mounton } for pid=13247 comm="syz.1.4030" path="/324/bus" dev="tmpfs" ino=1671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 172.093090][ T29] audit: type=1400 audit(172.085:3467): avc: denied { tracepoint } for pid=13247 comm="syz.1.4030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 172.113339][T13253] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4032'. [ 172.122423][T13253] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4032'. [ 172.131476][T13253] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4032'. [ 172.144791][T13253] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4032'. [ 172.153850][T13253] netlink: 'syz.6.4032': attribute type 6 has an invalid length. [ 172.217728][ T29] audit: type=1400 audit(172.215:3468): avc: denied { name_connect } for pid=13262 comm="syz.6.4037" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 172.296253][ T29] audit: type=1400 audit(172.285:3469): avc: denied { shutdown } for pid=13262 comm="syz.6.4037" lport=43542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.316764][ T29] audit: type=1400 audit(172.285:3470): avc: denied { read } for pid=13262 comm="syz.6.4037" lport=43542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.336648][ T29] audit: type=1400 audit(172.285:3471): avc: denied { ioctl } for pid=13262 comm="syz.6.4037" path="socket:[39787]" dev="sockfs" ino=39787 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.412725][T13280] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4044'. [ 172.421773][T13280] netlink: 348 bytes leftover after parsing attributes in process `syz.8.4044'. [ 172.460161][T13289] netlink: 'syz.1.4046': attribute type 6 has an invalid length. [ 172.474193][T13292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.484370][T13292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.686718][T13321] ref_ctr_offset mismatch. inode: 0x7cb offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 173.063400][T13333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.073174][T13333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.445052][T13396] ref_ctr_offset mismatch. inode: 0x1aa offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 173.622515][T13420] usb usb1: usbfs: process 13420 (syz.6.4101) did not claim interface 4 before use [ 173.861689][T13440] ipvlan2: entered promiscuous mode [ 173.869024][T13440] bridge0: port 3(ipvlan2) entered blocking state [ 173.875006][T13442] ref_ctr_offset mismatch. inode: 0x802 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 173.875590][T13440] bridge0: port 3(ipvlan2) entered disabled state [ 173.895354][T13440] ipvlan2: entered allmulticast mode [ 173.900731][T13440] bridge0: entered allmulticast mode [ 173.907089][T13440] ipvlan2: left allmulticast mode [ 173.912229][T13440] bridge0: left allmulticast mode [ 174.138121][T13444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.146650][T13444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.211727][T13471] usb usb1: usbfs: process 13471 (syz.8.4131) did not claim interface 4 before use [ 174.305127][T13481] ref_ctr_offset mismatch. inode: 0x866 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 174.656644][T13512] usb usb1: usbfs: process 13512 (syz.0.4134) did not claim interface 4 before use [ 174.699599][T13519] ref_ctr_offset mismatch. inode: 0x6e4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 174.895217][T13518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.908320][T13518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.596524][T13620] netlink: 'syz.1.4187': attribute type 21 has an invalid length. [ 175.611719][T13620] netlink: 'syz.1.4187': attribute type 21 has an invalid length. [ 175.623423][ T6829] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.640634][ T6829] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.656271][ T6829] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.666238][ T6829] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.451950][T13671] netlink: 'syz.1.4212': attribute type 30 has an invalid length. [ 176.467227][T13632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.487738][T13632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.506635][T13676] netlink: 'syz.9.4215': attribute type 21 has an invalid length. [ 176.515410][T13676] netlink: 'syz.9.4215': attribute type 21 has an invalid length. [ 176.716064][T13705] netlink: 'syz.0.4229': attribute type 21 has an invalid length. [ 176.724266][T13705] __nla_validate_parse: 83 callbacks suppressed [ 176.724341][T13705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4229'. [ 176.745778][ T6808] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.755119][ T6808] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.765592][T13705] netlink: 'syz.0.4229': attribute type 21 has an invalid length. [ 176.773493][T13705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4229'. [ 176.782649][ T6829] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.794674][ T6829] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.894530][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 176.894550][ T29] audit: type=1326 audit(176.865:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13718 comm="syz.0.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 176.923919][ T29] audit: type=1326 audit(176.875:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13718 comm="syz.0.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 176.947015][ T29] audit: type=1326 audit(176.875:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13718 comm="syz.0.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 176.970000][ T29] audit: type=1326 audit(176.875:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13718 comm="syz.0.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 176.993086][ T29] audit: type=1326 audit(176.875:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13718 comm="syz.0.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b8afebe9 code=0x7ffc0000 [ 177.025810][ T29] audit: type=1400 audit(177.015:3813): avc: denied { setopt } for pid=13721 comm="syz.8.4236" laddr=::1 lport=33699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 177.075026][ T29] audit: type=1326 audit(177.065:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13728 comm="syz.6.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99336ebe9 code=0x7ffc0000 [ 177.097997][ T29] audit: type=1326 audit(177.065:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13728 comm="syz.6.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99336ebe9 code=0x7ffc0000 [ 177.121244][ T29] audit: type=1326 audit(177.065:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13728 comm="syz.6.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fb99336ebe9 code=0x7ffc0000 [ 177.144405][ T29] audit: type=1326 audit(177.065:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13728 comm="syz.6.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99336ebe9 code=0x7ffc0000 [ 177.548453][T13744] netlink: 'syz.8.4245': attribute type 21 has an invalid length. [ 177.556341][T13744] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4245'. [ 177.598241][T13744] netlink: 'syz.8.4245': attribute type 21 has an invalid length. [ 177.606132][T13744] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4245'. [ 177.788428][T13766] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4254'. [ 177.981724][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4265'. [ 177.990749][T13782] netlink: 'syz.8.4265': attribute type 30 has an invalid length. [ 178.017807][ T6821] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.053020][ T6821] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.075467][ T6821] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.086512][ T6821] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.186476][ T3474] hid_parser_main: 78 callbacks suppressed [ 178.186545][ T3474] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.200006][ T3474] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.207572][ T3474] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.214981][ T3474] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.222479][ T3474] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.230067][ T3474] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.237581][ T3474] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.245021][ T3474] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.252454][ T3474] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.259874][ T3474] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.281464][ T3474] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 178.581885][T13843] 9pnet_fd: Insufficient options for proto=fd [ 178.636926][T13849] bridge0: entered promiscuous mode [ 178.652672][T13849] bridge0: port 3(macsec1) entered blocking state [ 178.659343][T13849] bridge0: port 3(macsec1) entered disabled state [ 178.689759][T13849] macsec1: entered allmulticast mode [ 178.695192][T13849] bridge0: entered allmulticast mode [ 178.726176][T13855] 9pnet: Could not find request transport: f [ 178.738166][T13849] macsec1: left allmulticast mode [ 178.743269][T13849] bridge0: left allmulticast mode [ 178.759583][T13849] bridge0: left promiscuous mode [ 178.894867][T13868] vhci_hcd: invalid port number 23 [ 178.899754][T13874] 9pnet_fd: Insufficient options for proto=fd [ 178.918817][T13876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4305'. [ 179.043312][T13890] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4323'. [ 179.052480][T13890] netlink: 108 bytes leftover after parsing attributes in process `syz.9.4323'. [ 179.077904][T13890] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4323'. [ 179.199648][T13910] vhci_hcd: invalid port number 23 [ 179.230718][T13912] 9pnet_fd: Insufficient options for proto=fd [ 179.392091][T13931] ipvlan0: entered allmulticast mode [ 179.397494][T13931] veth0_vlan: entered allmulticast mode [ 179.426945][T13933] 9pnet: Could not find request transport: f [ 179.449585][T13937] vhci_hcd: invalid port number 23 [ 179.607413][T13962] 9pnet: Could not find request transport: f [ 179.649424][T13961] bridge0: entered promiscuous mode [ 179.665890][T13961] bridge0: port 4(macsec1) entered blocking state [ 179.672458][T13961] bridge0: port 4(macsec1) entered disabled state [ 179.689726][T13961] macsec1: entered allmulticast mode [ 179.695098][T13961] bridge0: entered allmulticast mode [ 179.710189][T13961] macsec1: left allmulticast mode [ 179.715355][T13961] bridge0: left allmulticast mode [ 179.722629][T13961] bridge0: left promiscuous mode [ 180.158778][T14002] bridge0: entered promiscuous mode [ 180.165850][T14002] bridge0: port 4(macsec1) entered blocking state [ 180.172520][T14002] bridge0: port 4(macsec1) entered disabled state [ 180.179405][T14002] macsec1: entered allmulticast mode [ 180.184752][T14002] bridge0: entered allmulticast mode [ 180.191407][T14002] macsec1: left allmulticast mode [ 180.196529][T14002] bridge0: left allmulticast mode [ 180.202095][T14002] bridge0: left promiscuous mode [ 180.352794][T14011] ================================================================== [ 180.360949][T14011] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 180.369573][T14011] [ 180.371926][T14011] write to 0xffff888103c08ca8 of 8 bytes by task 14016 on cpu 0: [ 180.379662][T14011] shmem_file_splice_read+0x470/0x600 [ 180.385079][T14011] splice_direct_to_actor+0x26f/0x680 [ 180.390474][T14011] do_splice_direct+0xda/0x150 [ 180.395255][T14011] do_sendfile+0x380/0x650 [ 180.399703][T14011] __x64_sys_sendfile64+0x105/0x150 [ 180.404934][T14011] x64_sys_call+0x2bb0/0x2ff0 [ 180.409648][T14011] do_syscall_64+0xd2/0x200 [ 180.414190][T14011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.420121][T14011] [ 180.422631][T14011] write to 0xffff888103c08ca8 of 8 bytes by task 14011 on cpu 1: [ 180.430349][T14011] shmem_file_splice_read+0x470/0x600 [ 180.435744][T14011] splice_direct_to_actor+0x26f/0x680 [ 180.441140][T14011] do_splice_direct+0xda/0x150 [ 180.445926][T14011] do_sendfile+0x380/0x650 [ 180.450474][T14011] __x64_sys_sendfile64+0x105/0x150 [ 180.455701][T14011] x64_sys_call+0x2bb0/0x2ff0 [ 180.460398][T14011] do_syscall_64+0xd2/0x200 [ 180.464960][T14011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.470873][T14011] [ 180.473217][T14011] value changed: 0x000000000000ec5c -> 0x000000000000ec6a [ 180.480335][T14011] [ 180.482667][T14011] Reported by Kernel Concurrency Sanitizer on: [ 180.488837][T14011] CPU: 1 UID: 0 PID: 14011 Comm: syz.6.4366 Not tainted syzkaller #0 PREEMPT(voluntary) [ 180.498657][T14011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.508733][T14011] ==================================================================