last executing test programs: 42.648874847s ago: executing program 4 (id=1337): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 42.554444409s ago: executing program 4 (id=1338): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000030000008400000010"], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 42.382387871s ago: executing program 4 (id=1340): close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x5, 0x4, 0x3, @rand_addr=0x64010102, @local}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x4b, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x5, "5c1bda64d9bbb795506667f359c477398e7a5ec5cb38489b4507e009453d7b60d6"}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85}, 0x3c) 42.381462851s ago: executing program 4 (id=1342): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xe, 0x9f, &(0x7f0000006680)) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000280), 0x6, 0x64d, &(0x7f0000000d40)="$eJzs3c9rHG8ZAPBnZpM0SWPTiogNigEPLUjTpBarXmzrwR4KFuxBxENDk9TQ7Q+SFGwtNAEPCgoiXov04j/gXXr3IIig3jwLVaRiQUv3y8zONpvNbnbbJLtJ5vOBzb4z77t53yezb+admX13Aiit6exHGnE64t2tJGKyKW8i6pnTRbnX/356O3skUat9919JJMW6RvmkeD5eLIxGxJ+uRny6sr3e1cdP7s5Xa3XPIs6v3Xt4fvXxk3PL9+bvLN5ZvD934WsXL81+fe7iXFNDP97x4vna9e98/hc/+eFXl/5cPZfE5bg5/OOFaIljr0zHdLwrQmxePxQRl7JEm7/LYXMEQii1SvF+HI6Iz8ZkVPKluslY/vlAGwfsq1olorazpFsB4LDSvaGsGuOAxrF9b8fBN/d5VNI/r67UD4C2xz9UnHIYzY+Nxl8nTUdG9XMbJ/eg/qyOt09Hn799OvU8tpyHePN+6wztQT2drG9ExOfaxZ/kbTuZR5rFn2451k8iYjYiRor2fWsXbUia0vtxHmYnPcZfyeJv3g5pRFwunrP1Vz+y/tbTWv2OH4Byenml2JGvZ0ub+79s7NEY/8Tm+OdZ43UTu78kkxv0/q/z+K+xvx/Nxz1pyzgsG7PcaP8rh1tX/P1n137Vqf76+G/qeeOR1d8YC/bDq42IqZb4f5oFW4x/sviTNuPfrMity73V8e2//PNap7xBx197EXGm7fHP5qg0S+1wffL80nJ1cbb+s20dv//DD37bqf728R/bh0jby7b/eIf4m7Z/2vq67G/ysP2v3Ghd8bsbL+51qn+i6/ZP/zGS1I83R4o1P9pYW1uZixhJrhdFivXza2srF3aOt17mTS1/nqvHf/ZL7fv/lvd/S1RjjX+ZPXj4vbuvO+V9zPu/6WLyu1qPbegki3+h+/bf7P9jjdyIX/ZYx3+//+gLnfLax5/sMioAAAAAAAAopzS/BpukM+/TaTozU58v+5kYT6sPVte+vPTg0f2FiLP55yGH00iT/CMjk/XlZGm5ujhXfB62sXyhZfkrEXEqIn5dGcuXZ24/qC4MOngAAAAAAAAAAAAAAAAAAAA4II4X8/8b96n+T6U+/x8oie43mNt2/wfgiNjPG0wCB1ve/3faxZ/oX1uA/rL/h/LS/6G89H8oL/0fykv/h/LS/6G89H8oL/0fAAAAAI6kU198+bckIta/MZY/MiNFnkm/cLQNf1Dpyr61A+g/PRrK6/2lf4N9KJ2exv//K74ccP+bAwxA0m5lPjio7dz5X7Z95aaN3bcNAAAAAAAAAAAAAKg7c7rz/P8PmxsMHDam/UF57WL+v68OgEPOV/9DeTnGB7rM4o/RThnd5v8DAAAAAAAAAAAAAHtmIn8k6UwxF3gi0nRmJuJTEXEyhpOl5eribESciIi/VoaPZctzg240AAAAAAAAAAAAAAAAAAAAHDGrj5/cna9WF1eaE//ftuZoJxp3Qe1euNZDmR0T34wPfFUk/f+zjEXEwDfK3iT+WLzPm7KGmsokEetZ9kFo6uLKahyMZuSJAf5TAgAAAAAAAAAAAAAAAACAkmqae9ze1G/63CIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6L/N+/93SSyM11/QU+GtiUHHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcTp8EAAD//wYPOVw=") open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000240)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 42.288742633s ago: executing program 4 (id=1344): r0 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000440)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}], [{@uid_lt={'uid<', r1}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@measure}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") mlockall(0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) lchown(0x0, r1, 0x0) 42.140522625s ago: executing program 4 (id=1348): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 42.108498175s ago: executing program 32 (id=1348): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 38.054378063s ago: executing program 3 (id=1439): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0xd34d, 0x800, 0x80000003, 0x20e}, &(0x7f0000000540)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 37.668466868s ago: executing program 3 (id=1442): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xf, 0xffff}}}, 0x24}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x6) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140), 0xee, 0x478, &(0x7f0000000e40)="$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") 37.266467684s ago: executing program 3 (id=1450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r0}, &(0x7f00000014c0), &(0x7f0000001500)=r1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f000000050030000000000005002f00a005000008000300", @ANYRES32=r5], 0x2c}}, 0x0) 37.244005973s ago: executing program 3 (id=1451): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x3) socket$tipc(0x1e, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46, 0x43]}, 0x2b) 37.114099676s ago: executing program 3 (id=1453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x494, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000001640)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r2, r3, 0x0) 37.075244246s ago: executing program 3 (id=1456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) socket$inet6_udp(0xa, 0x2, 0x0) 37.050846636s ago: executing program 33 (id=1456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) socket$inet6_udp(0xa, 0x2, 0x0) 2.333299957s ago: executing program 6 (id=2118): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000655eb07d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x80008, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) 2.16707309s ago: executing program 6 (id=2111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 2.13301086s ago: executing program 6 (id=2113): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getpgrp(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x516, &(0x7f0000000740)="$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") open(0x0, 0x169a7c, 0x41) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x40000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000001240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) 2.026207072s ago: executing program 2 (id=2117): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x40010, r3, 0x10000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) 2.025690722s ago: executing program 6 (id=2119): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x1200, &(0x7f0000001f80)="$eJzs3E2LW1UYB/Bn4jidTp0Xtb60IB50owiXThdudDPIFKQBpW2EVhBunRsNuSYhNwxExNaVWz+HuHQniDvddON3cDUbl12IV0xa20iUSu2kHX6/TR4455/nHA4EEnLuwZtffdJtV1k7H0VjaSkag4h0M0WKRtx2PV5948efXrh4+cr5nWZz90JK53Yubb+eUtp48fv3P/vmpR9GJ977duO7Y3Fj64ODX/u/RNw4dfD7pY87VepUqdcfpTxd7fdH+dWySHudqpul9G5Z5FWROr2qGM6Mt8v+YDBOeW9vfW0wLKoq5b1x6hbjNOqn0XCc8o/yTi9lWfba+lpwP1pf36zrOqKuH4+VqOu6Ph5rcSKeiPXYiM3YiifjqXg6TsYz8Ww8F8/HqcmsRa8bAAAAAAAAAAAAAAAAAAAAjpb7uf+/sujFAwAAAAAAAAAAAAAAAAAAwBFx8fKV8zvN5u6FlFYjyi/3W/ut6et0fKcdnSijiDOxGb/F5Pb/1LQ+93Zz90ya2Iovymu38tf2W4/N5rcnjxOYm9+e5tNs/lis3Z0/G5txcn7+7Nz8arzy8l35LDbj5w+jH2XsxZ/ZO/nPt1N6653m3/KnJ/MAAADgKMjSX+Z+f8+yfxqf5u/l94HG7WYz+eU4vbywbXNLNf60m5dlMXxgxUo88Bb/VqxGxOK633uxHP/vGy5FXH8Y9rW4ovFInPtDWyz6k4nDcOfQF70SAAAAAAAAAAAA/ovD+Dvh3MbHD32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA//9LKs5v") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x10507e, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000000c0)) open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0, 0x60}) 1.949259063s ago: executing program 6 (id=2120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000200001800400028008000300fdffffff0e0001006574683a766c616e30"], 0x68}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r2}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 1.647691347s ago: executing program 6 (id=2125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYBLOB], 0xfc}}, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) shmget(0x2, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) write(r3, &(0x7f0000000140)="5c000000010006", 0x7) 1.537345709s ago: executing program 0 (id=2129): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x180800) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 1.490739789s ago: executing program 34 (id=2125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYBLOB], 0xfc}}, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) shmget(0x2, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) write(r3, &(0x7f0000000140)="5c000000010006", 0x7) 1.175910643s ago: executing program 2 (id=2132): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003407133a3f6de31be6c69b94c6100000005520000001100010000000000000000000000000aeef0817de193ff45534c88cc1856d37f303bf4ad05092473fafd90b155e8734ac18ba35e27ff1c586639df8cde785fd47b4a284d6929cc711ec1bcae549bfa92d001843aa4f80ac4dd3f56ab407a8afae9d6d400e06fc3aa4f357a00"/214], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000240)={'mangle\x00', 0x0, [0x4, 0x6, 0x1, 0x40, 0x7]}, &(0x7f0000000200)=0x54) 1.175098843s ago: executing program 0 (id=2141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r5 = io_uring_setup(0xaab, &(0x7f0000000940)={0x0, 0x2c97, 0x1000, 0x3, 0x17b}) close_range(r5, 0xffffffffffffffff, 0x0) sendfile(r4, r4, 0x0, 0x40000f63c) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) 1.113719824s ago: executing program 1 (id=2134): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 1.095519565s ago: executing program 0 (id=2135): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4044940) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x4000040) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000380)=ANY=[], 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgctl$IPC_INFO(r0, 0x3, &(0x7f00000002c0)=""/14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.018323396s ago: executing program 1 (id=2136): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0xfffffffd}}, 0xe8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) close(r3) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.006066626s ago: executing program 1 (id=2137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e040600bc5cb601288763"], 0xffdd) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r4, 0xffffffffffffffff, 0x0) 1.000900086s ago: executing program 5 (id=2147): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = dup(r1) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 480.620134ms ago: executing program 2 (id=2138): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 480.265384ms ago: executing program 5 (id=2139): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x604a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 444.571294ms ago: executing program 1 (id=2140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) socket$nl_route(0x10, 0x3, 0x0) 432.077694ms ago: executing program 5 (id=2142): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYRESDEC=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) modify_ldt$write(0x1, &(0x7f0000000300)={0x9, 0x20000000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x1}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) 369.952635ms ago: executing program 5 (id=2143): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r2, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x7797, 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, '\x00', "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x4000}], 0x11) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 354.589445ms ago: executing program 2 (id=2144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 240.851857ms ago: executing program 0 (id=2145): connect$inet6(0xffffffffffffffff, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x9, 0x88800) read$usbmon(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000200)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigpending(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x18, 0x0, @wg=@data={0x4, 0xeab, 0x3}}}}}}, 0x0) 240.490897ms ago: executing program 5 (id=2146): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) lsm_set_self_attr(0x64, 0x0, 0xfc, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) close(0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x10) r1 = syz_open_dev$sg(0x0, 0x1, 0x40080) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) 193.110548ms ago: executing program 0 (id=2148): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000540)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 180.933208ms ago: executing program 1 (id=2149): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0xfffd, 0x0, 0x1, 0xa, 0x20002, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 159.448758ms ago: executing program 5 (id=2150): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x1200, &(0x7f0000001f80)="$eJzs3E2LW1UYB/Bn4jidTp0Xtb60IB50owiXThdudDPIFKQBpW2EVhBunRsNuSYhNwxExNaVWz+HuHQniDvddON3cDUbl12IV0xa20iUSu2kHX6/TR4455/nHA4EEnLuwZtffdJtV1k7H0VjaSkag4h0M0WKRtx2PV5948efXrh4+cr5nWZz90JK53Yubb+eUtp48fv3P/vmpR9GJ977duO7Y3Fj64ODX/u/RNw4dfD7pY87VepUqdcfpTxd7fdH+dWySHudqpul9G5Z5FWROr2qGM6Mt8v+YDBOeW9vfW0wLKoq5b1x6hbjNOqn0XCc8o/yTi9lWfba+lpwP1pf36zrOqKuH4+VqOu6Ph5rcSKeiPXYiM3YiifjqXg6TsYz8Ww8F8/HqcmsRa8bAAAAAAAAAAAAAAAAAAAAjpb7uf+/sujFAwAAAAAAAAAAAAAAAAAAwBFx8fKV8zvN5u6FlFYjyi/3W/ut6et0fKcdnSijiDOxGb/F5Pb/1LQ+93Zz90ya2Iovymu38tf2W4/N5rcnjxOYm9+e5tNs/lis3Z0/G5txcn7+7Nz8arzy8l35LDbj5w+jH2XsxZ/ZO/nPt1N6653m3/KnJ/MAAADgKMjSX+Z+f8+yfxqf5u/l94HG7WYz+eU4vbywbXNLNf60m5dlMXxgxUo88Bb/VqxGxOK633uxHP/vGy5FXH8Y9rW4ovFInPtDWyz6k4nDcOfQF70SAAAAAAAAAAAA/ovD+Dvh3MbHD32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA//9LKs5v") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x10507e, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000000c0)) open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0, 0x60}) 145.702408ms ago: executing program 2 (id=2151): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000200), 0x4287, 0xfff) syz_emit_ethernet(0xfa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0x4f, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x828000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa0, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x10}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010102}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x22}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}]}, 0xa0}, 0x1, 0x0, 0x0, 0x200008d0}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) 82.315209ms ago: executing program 2 (id=2152): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4000000) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 81.855089ms ago: executing program 0 (id=2153): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) 0s ago: executing program 1 (id=2154): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3008c86, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ff00"}) r4 = syz_open_pts(r1, 0x0) r5 = dup3(r4, r1, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x12) kernel console output (not intermixed with test programs): d(5) [ 64.259110][ T5768] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 64.266858][ T5768] vhci_hcd vhci_hcd.0: Device attached [ 64.276083][ T5769] vhci_hcd: connection closed [ 64.276793][ T4555] vhci_hcd: stop threads [ 64.286210][ T4555] vhci_hcd: release socket [ 64.290884][ T4555] vhci_hcd: disconnect device [ 64.599358][ T5783] macvlan2: entered promiscuous mode [ 64.604707][ T5783] macvlan2: entered allmulticast mode [ 64.611763][ T5783] batadv0: entered promiscuous mode [ 64.617043][ T5783] batadv0: entered allmulticast mode [ 64.625045][ T5783] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 64.633881][ T5783] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 64.740737][ T5794] loop3: detected capacity change from 0 to 512 [ 64.747759][ T5794] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.760475][ T5794] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.823766][ T5794] EXT4-fs (loop3): 1 truncate cleaned up [ 64.834241][ T5794] EXT4-fs (loop3): shut down requested (0) [ 64.946069][ T5816] loop3: detected capacity change from 0 to 164 [ 64.975271][ T5816] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 65.102597][ T5829] loop4: detected capacity change from 0 to 164 [ 65.118180][ T5829] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 65.127288][ T5829] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 65.135808][ T5829] Symlink component flag not implemented [ 65.141640][ T5829] Symlink component flag not implemented [ 65.147584][ T5829] Symlink component flag not implemented (7) [ 65.153623][ T5829] Symlink component flag not implemented (116) [ 65.345539][ T5853] netlink: 32 bytes leftover after parsing attributes in process `syz.4.951'. [ 65.438078][ T5862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.954'. [ 65.467152][ T5862] hub 9-0:1.0: USB hub found [ 65.472042][ T5862] hub 9-0:1.0: 8 ports detected [ 65.516026][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 65.516045][ T29] audit: type=1326 audit(1749463431.098:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a10be929 code=0x7ffc0000 [ 65.546882][ T29] audit: type=1326 audit(1749463431.098:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff6a10be929 code=0x7ffc0000 [ 65.570355][ T29] audit: type=1326 audit(1749463431.098:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a10be929 code=0x7ffc0000 [ 65.593750][ T29] audit: type=1326 audit(1749463431.098:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a10be929 code=0x7ffc0000 [ 65.617271][ T29] audit: type=1326 audit(1749463431.098:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6a10be929 code=0x7ffc0000 [ 65.640749][ T29] audit: type=1326 audit(1749463431.098:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a10be929 code=0x7ffc0000 [ 65.664116][ T29] audit: type=1326 audit(1749463431.098:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a10be929 code=0x7ffc0000 [ 65.687532][ T29] audit: type=1326 audit(1749463431.098:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff6a10be929 code=0x7ffc0000 [ 65.711077][ T29] audit: type=1326 audit(1749463431.098:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a10be929 code=0x7ffc0000 [ 65.734470][ T29] audit: type=1326 audit(1749463431.098:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6a10be929 code=0x7ffc0000 [ 65.762128][ T5873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.957'. [ 65.853914][ T5881] loop4: detected capacity change from 0 to 1024 [ 65.862318][ T5881] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.015260][ T5895] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 66.043192][ T5897] smc: net device bond0 applied user defined pnetid SYZ2 [ 66.051805][ T5897] smc: net device bond0 erased user defined pnetid SYZ2 [ 66.103723][ T5903] netlink: 'syz.3.970': attribute type 1 has an invalid length. [ 66.117953][ T5903] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.127115][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.970'. [ 66.139418][ T5903] bond2 (unregistering): Released all slaves [ 66.642317][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.978'. [ 66.776447][ T5938] Set syz1 is full, maxelem 65536 reached [ 66.930185][ T5952] bridge0: entered promiscuous mode [ 66.936928][ T5952] bridge0: port 3(macvlan3) entered blocking state [ 66.943570][ T5952] bridge0: port 3(macvlan3) entered disabled state [ 66.951500][ T5952] macvlan3: entered allmulticast mode [ 66.951826][ T5954] xt_connbytes: Forcing CT accounting to be enabled [ 66.956972][ T5952] bridge0: entered allmulticast mode [ 66.969406][ T5952] macvlan3: left allmulticast mode [ 66.974696][ T5952] bridge0: left allmulticast mode [ 66.980911][ T5954] Cannot find set identified by id 0 to match [ 66.987593][ T5952] bridge0: left promiscuous mode [ 67.083544][ T5961] loop4: detected capacity change from 0 to 512 [ 67.129778][ T5961] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.161072][ T5969] syz_tun: entered allmulticast mode [ 67.168209][ T5968] syz_tun: left allmulticast mode [ 67.200456][ T5971] loop3: detected capacity change from 0 to 512 [ 67.217680][ T5971] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 67.225824][ T5971] System zones: 1-12 [ 67.230277][ T5971] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.1000: Directory hole found for htree index block 0 [ 67.243035][ T5971] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 67.251655][ T5971] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.1000: Directory hole found for htree index block 0 [ 67.264281][ T5971] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 67.362492][ T5978] netlink: 'syz.4.1003': attribute type 12 has an invalid length. [ 67.511507][ T5998] loop3: detected capacity change from 0 to 2048 [ 67.660711][ T6009] loop2: detected capacity change from 0 to 512 [ 67.689989][ T6009] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 67.699608][ T6009] System zones: 1-12 [ 67.703927][ T6009] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.1013: Directory hole found for htree index block 0 [ 67.716842][ T6009] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 67.725262][ T6009] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.1013: Directory hole found for htree index block 0 [ 67.740051][ T6009] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 67.859970][ T6024] pim6reg1: entered promiscuous mode [ 67.865520][ T6024] pim6reg1: entered allmulticast mode [ 68.172572][ T6053] sd 0:0:1:0: device reset [ 68.187110][ T6049] syzkaller1: entered promiscuous mode [ 68.192736][ T6049] syzkaller1: entered allmulticast mode [ 68.388316][ T6069] netlink: 'syz.0.1038': attribute type 39 has an invalid length. [ 68.528867][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1045'. [ 68.555590][ T6084] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 68.590881][ T6087] loop3: detected capacity change from 0 to 512 [ 68.598246][ T6087] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 68.613968][ T6087] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.1048: bad orphan inode 15 [ 68.624994][ T6087] ext4_test_bit(bit=14, block=18) = 1 [ 68.630587][ T6087] is_bad_inode(inode)=0 [ 68.634764][ T6087] NEXT_ORPHAN(inode)=1023 [ 68.639224][ T6087] max_ino=32 [ 68.642448][ T6087] i_nlink=0 [ 68.646764][ T6087] ext2 filesystem being mounted at /200/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 69.338088][ T4709] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set [ 69.354053][ T6080] 9pnet_fd: p9_fd_create_tcp (6080): problem connecting socket to 127.0.0.1 [ 69.381381][ T6120] xt_hashlimit: size too large, truncated to 1048576 [ 69.520975][ T6123] netlink: 'syz.3.1063': attribute type 12 has an invalid length. [ 69.635331][ T6132] loop2: detected capacity change from 0 to 1024 [ 69.642382][ T6132] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.237369][ T6171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1083'. [ 70.443993][ T6182] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1088'. [ 70.511619][ T6186] sd 0:0:1:0: device reset [ 70.636027][ T6190] SELinux: syz.2.1091 (6190) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 70.742418][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 70.742436][ T29] audit: type=1326 audit(1749463436.328:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.2.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 70.772362][ T29] audit: type=1326 audit(1749463436.328:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.2.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 70.827176][ T29] audit: type=1326 audit(1749463436.398:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.2.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 70.850741][ T29] audit: type=1326 audit(1749463436.408:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.2.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 70.874942][ T29] audit: type=1326 audit(1749463436.408:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.2.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 70.903011][ T29] audit: type=1326 audit(1749463436.488:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.2.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 70.926602][ T29] audit: type=1326 audit(1749463436.488:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.2.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 70.950238][ T29] audit: type=1326 audit(1749463436.488:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.2.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 71.069595][ T6216] gtp0: entered promiscuous mode [ 71.133464][ T6221] loop2: detected capacity change from 0 to 1024 [ 71.145396][ T6225] loop4: detected capacity change from 0 to 256 [ 71.146305][ T6221] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 71.161100][ T6221] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 71.170638][ T6221] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1104: Failed to acquire dquot type 0 [ 71.194586][ T6221] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 71.225637][ T6221] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #13: comm syz.2.1104: corrupted inode contents [ 71.291775][ T6221] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #13: comm syz.2.1104: mark_inode_dirty error [ 71.305318][ T6221] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #13: comm syz.2.1104: corrupted inode contents [ 71.317669][ T6221] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.1104: mark_inode_dirty error [ 71.333441][ T6221] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #13: comm syz.2.1104: corrupted inode contents [ 71.345833][ T6221] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 71.356013][ T6221] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #13: comm syz.2.1104: corrupted inode contents [ 71.371344][ T6221] EXT4-fs error (device loop2): ext4_truncate:4597: inode #13: comm syz.2.1104: mark_inode_dirty error [ 71.382854][ T6221] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 71.393426][ T6221] EXT4-fs (loop2): 1 truncate cleaned up [ 72.540237][ T6261] loop3: detected capacity change from 0 to 1024 [ 72.549608][ T6261] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.559280][ T6261] EXT4-fs mount: 20 callbacks suppressed [ 72.559293][ T6261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.601764][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.857514][ T6288] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.885151][ T6286] loop2: detected capacity change from 0 to 1024 [ 72.898062][ T6286] EXT4-fs: Ignoring removed oldalloc option [ 72.906236][ T6286] EXT4-fs: Ignoring removed orlov option [ 72.915865][ T6288] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.930140][ T6293] netlink: 'syz.3.1132': attribute type 1 has an invalid length. [ 72.951189][ T6286] EXT4-fs (loop2): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 72.957425][ T6293] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.972311][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1132'. [ 72.982909][ T6286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.999381][ T6293] bond2 (unregistering): Released all slaves [ 73.051070][ T6288] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.108353][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.140466][ T6288] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.200328][ T6288] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.212175][ T6310] netlink: '+}[@': attribute type 13 has an invalid length. [ 73.212284][ T6288] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.231677][ T6288] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.357408][ T6310] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.366614][ T6310] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.375783][ T6310] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.385008][ T6310] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.398328][ T5180] lo speed is unknown, defaulting to 1000 [ 73.401272][ T6288] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.404092][ T5180] syz0: Port: 1 Link DOWN [ 73.502307][ T6327] loop3: detected capacity change from 0 to 256 [ 73.503995][ T6328] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 73.604033][ T6342] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1153'. [ 73.638168][ T6340] Falling back ldisc for ttyS3. [ 73.638196][ T6346] netlink: '+}[@': attribute type 13 has an invalid length. [ 73.763262][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.770569][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.815019][ T6356] IPv4: Oversized IP packet from 127.202.26.0 [ 73.882342][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.911827][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.022138][ T6372] xt_hashlimit: size too large, truncated to 1048576 [ 74.056262][ T6346] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.065258][ T6346] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.074207][ T6346] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.083172][ T6346] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.110842][ T6346] batadv0: left allmulticast mode [ 74.379021][ T6387] loop3: detected capacity change from 0 to 128 [ 74.404156][ T6387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.413051][ T6387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.423789][ T6389] bridge0: entered promiscuous mode [ 74.432196][ T6389] bridge0: port 3(macvlan2) entered blocking state [ 74.439009][ T6389] bridge0: port 3(macvlan2) entered disabled state [ 74.446895][ T6389] macvlan2: entered allmulticast mode [ 74.452336][ T6389] bridge0: entered allmulticast mode [ 74.460284][ T6389] macvlan2: left allmulticast mode [ 74.465439][ T6389] bridge0: left allmulticast mode [ 74.471360][ T6389] bridge0: left promiscuous mode [ 74.558691][ T6394] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1173'. [ 74.652055][ T6407] loop4: detected capacity change from 0 to 1024 [ 74.659122][ T6407] EXT4-fs: Ignoring removed bh option [ 74.670757][ T6407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.733148][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.825725][ T6419] xt_hashlimit: size too large, truncated to 1048576 [ 75.461407][ T6443] loop2: detected capacity change from 0 to 1024 [ 75.550348][ T6443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.579660][ T6442] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 75.681674][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.699527][ T6451] ref_ctr increment failed for inode: 0x4eb offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811aa44ac0 [ 75.719451][ T6450] uprobe: syz.1.1194:6450 failed to unregister, leaking uprobe [ 75.741218][ T6457] netlink: '+}[@': attribute type 13 has an invalid length. [ 75.826924][ T6457] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.834247][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.929990][ T29] kauditd_printk_skb: 832 callbacks suppressed [ 75.930008][ T29] audit: type=1326 audit(1749463441.518:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 75.971705][ T6462] SELinux: Context system_u:object_r:fixed_disk_device_t:s0 is not valid (left unmapped). [ 76.027209][ T29] audit: type=1326 audit(1749463441.548:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 76.050792][ T29] audit: type=1326 audit(1749463441.548:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 76.074219][ T29] audit: type=1326 audit(1749463441.548:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 76.097862][ T29] audit: type=1326 audit(1749463441.548:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 76.121343][ T29] audit: type=1326 audit(1749463441.548:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 76.144922][ T29] audit: type=1326 audit(1749463441.558:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 76.168591][ T29] audit: type=1326 audit(1749463441.558:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 76.192133][ T29] audit: type=1326 audit(1749463441.558:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 76.215782][ T29] audit: type=1326 audit(1749463441.558:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 76.354487][ T6457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.369088][ T6457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.475618][ T6457] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.484115][ T6457] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.492671][ T6457] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.501147][ T6457] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.580903][ T6491] tipc: Started in network mode [ 76.585863][ T6491] tipc: Node identity 7, cluster identity 4711 [ 76.592325][ T6491] tipc: Node number set to 7 [ 76.613457][ T6493] xt_hashlimit: size too large, truncated to 1048576 [ 76.636357][ T6496] netlink: 'syz.4.1207': attribute type 9 has an invalid length. [ 76.823315][ T6502] bridge0: port 3(macvlan3) entered blocking state [ 76.829966][ T6502] bridge0: port 3(macvlan3) entered disabled state [ 76.854258][ T6502] macvlan3: entered allmulticast mode [ 76.859830][ T6502] bridge0: entered allmulticast mode [ 76.868487][ T6502] macvlan3: left allmulticast mode [ 76.873721][ T6502] bridge0: left allmulticast mode [ 76.881740][ T6508] block device autoloading is deprecated and will be removed. [ 77.070529][ T6526] loop0: detected capacity change from 0 to 128 [ 77.080698][ T6525] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 77.088634][ T6525] FAT-fs (loop0): Filesystem has been set read-only [ 77.096606][ T6525] syz.0.1216: attempt to access beyond end of device [ 77.096606][ T6525] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 77.112929][ T6525] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 77.120904][ T6525] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 77.136099][ T6525] syz.0.1216: attempt to access beyond end of device [ 77.136099][ T6525] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 77.150697][ T6525] syz.0.1216: attempt to access beyond end of device [ 77.150697][ T6525] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 77.165266][ T6525] syz.0.1216: attempt to access beyond end of device [ 77.165266][ T6525] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 77.180909][ T6526] syz.0.1216: attempt to access beyond end of device [ 77.180909][ T6526] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 77.194325][ T6526] syz.0.1216: attempt to access beyond end of device [ 77.194325][ T6526] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 77.207778][ T6526] syz.0.1216: attempt to access beyond end of device [ 77.207778][ T6526] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 77.221341][ T6526] syz.0.1216: attempt to access beyond end of device [ 77.221341][ T6526] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 77.279646][ T6532] loop4: detected capacity change from 0 to 512 [ 77.286708][ T6532] EXT4-fs (loop4): can't read group descriptor 0 [ 77.372038][ T6534] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.381095][ T6534] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.385081][ T6540] netlink: '+}[@': attribute type 13 has an invalid length. [ 77.390065][ T6534] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.406009][ T6534] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.415011][ T6534] geneve2: entered promiscuous mode [ 77.420324][ T6534] geneve2: entered allmulticast mode [ 77.426360][ T6534] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.435531][ T6534] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.444512][ T6534] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.453459][ T6534] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.563821][ T6540] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.571088][ T6540] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.631215][ T6540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.643358][ T6540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.689585][ T6540] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.698860][ T6540] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.707775][ T6540] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.717044][ T6540] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.745457][ T6549] bridge0: port 3(macvlan2) entered blocking state [ 77.752227][ T6549] bridge0: port 3(macvlan2) entered disabled state [ 77.779304][ T6549] macvlan2: entered allmulticast mode [ 77.784809][ T6549] bridge0: entered allmulticast mode [ 77.794389][ T6549] macvlan2: left allmulticast mode [ 77.799707][ T6549] bridge0: left allmulticast mode [ 77.983975][ T6572] loop0: detected capacity change from 0 to 164 [ 78.013306][ T6571] loop2: detected capacity change from 0 to 1024 [ 78.023083][ T6571] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 78.034108][ T6571] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 78.044879][ T6572] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 78.045963][ T6571] jbd2_journal_init_inode: Cannot locate journal superblock [ 78.060739][ T6571] EXT4-fs (loop2): Could not load journal inode [ 78.074545][ T6572] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 78.085641][ T6572] rock: directory entry would overflow storage [ 78.091900][ T6572] rock: sig=0x4f50, size=4, remaining=3 [ 78.097563][ T6572] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 78.105592][ T6579] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.233289][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1240'. [ 78.243621][ T6586] netlink: '+}[@': attribute type 13 has an invalid length. [ 78.300582][ T6593] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 78.530970][ T6596] tipc: Started in network mode [ 78.535911][ T6596] tipc: Node identity aeffff522bdd, cluster identity 4711 [ 78.543208][ T6596] tipc: Enabled bearer , priority 0 [ 78.702596][ T6599] syzkaller0: MTU too low for tipc bearer [ 78.708442][ T6599] tipc: Disabling bearer [ 78.823455][ T6601] loop3: detected capacity change from 0 to 512 [ 78.831373][ T6601] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.859670][ T6601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.873143][ T6601] ext4 filesystem being mounted at /234/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.056085][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.060471][ T6613] netlink: 'syz.1.1248': attribute type 10 has an invalid length. [ 79.073113][ T6613] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1248'. [ 79.082420][ T6613] dummy0: entered promiscuous mode [ 79.087920][ T6613] batman_adv: batadv0: Interface activated: dummy0 [ 79.094572][ T6613] batadv0: mtu less than device minimum [ 79.100649][ T6613] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.111542][ T6613] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.122212][ T6613] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.133020][ T6613] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.143773][ T6613] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.154698][ T6613] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.165521][ T6613] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.176328][ T6613] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.187138][ T6613] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.202116][ T6613] batman_adv: batadv0: Interface deactivated: dummy0 [ 79.208890][ T6613] batman_adv: batadv0: Removing interface: dummy0 [ 79.218240][ T6613] bridge0: port 3(dummy0) entered blocking state [ 79.224631][ T6613] bridge0: port 3(dummy0) entered disabled state [ 79.231153][ T6613] dummy0: entered allmulticast mode [ 79.523523][ T6642] loop3: detected capacity change from 0 to 512 [ 79.535435][ T6642] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.572790][ T6642] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm +}[@: iget: bad extended attribute block 1 [ 79.590588][ T6642] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm +}[@: couldn't read orphan inode 15 (err -117) [ 79.607667][ T6642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.636882][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.658266][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1263'. [ 79.743497][ T6657] loop3: detected capacity change from 0 to 164 [ 79.856643][ T6664] netlink: 'syz.3.1269': attribute type 10 has an invalid length. [ 79.866594][ T6664] veth0_vlan: entered allmulticast mode [ 79.874391][ T6664] veth0_vlan: left promiscuous mode [ 79.880512][ T6664] veth0_vlan: entered promiscuous mode [ 79.887500][ T6664] team0: Device veth0_vlan failed to register rx_handler [ 80.302551][ T6689] lo: entered allmulticast mode [ 80.310155][ T6688] lo: left allmulticast mode [ 80.461904][ T6707] loop2: detected capacity change from 0 to 2048 [ 80.725365][ T6718] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1289'. [ 80.801419][ T6722] syzkaller0: entered promiscuous mode [ 80.807015][ T6722] syzkaller0: entered allmulticast mode [ 80.923727][ T6724] bridge0: port 3(macvlan2) entered blocking state [ 80.930438][ T6724] bridge0: port 3(macvlan2) entered disabled state [ 80.937453][ T6724] macvlan2: entered allmulticast mode [ 80.942934][ T6724] bridge0: entered allmulticast mode [ 80.949059][ T6724] macvlan2: left allmulticast mode [ 80.954288][ T6724] bridge0: left allmulticast mode [ 81.027135][ T6729] macvlan2: entered promiscuous mode [ 81.032600][ T6729] macvlan2: entered allmulticast mode [ 81.038962][ T6729] batadv0: entered promiscuous mode [ 81.044373][ T6729] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 81.052707][ T6729] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 81.080615][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 81.080635][ T29] audit: type=1326 audit(1749463446.668:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.0.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701508e929 code=0x7ffc0000 [ 81.110560][ T29] audit: type=1326 audit(1749463446.668:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.0.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701508e929 code=0x7ffc0000 [ 81.134122][ T29] audit: type=1326 audit(1749463446.668:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.0.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f701508e929 code=0x7ffc0000 [ 81.157719][ T29] audit: type=1326 audit(1749463446.668:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.0.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701508e929 code=0x7ffc0000 [ 81.181218][ T29] audit: type=1326 audit(1749463446.668:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.0.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701508e929 code=0x7ffc0000 [ 81.213022][ T29] audit: type=1400 audit(1749463446.798:2501): avc: denied { read write } for pid=6734 comm="syz.1.1298" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 81.236726][ T29] audit: type=1400 audit(1749463446.798:2502): avc: denied { open } for pid=6734 comm="syz.1.1298" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 81.434411][ T6739] loop3: detected capacity change from 0 to 512 [ 81.449328][ T6739] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 81.460457][ T6739] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 81.475570][ T6739] EXT4-fs (loop3): mount failed [ 81.484146][ T29] audit: type=1400 audit(1749463447.068:2503): avc: denied { getattr } for pid=6742 comm="syz.2.1301" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 81.583415][ T6748] syzkaller0: entered promiscuous mode [ 81.589078][ T6748] syzkaller0: entered allmulticast mode [ 81.831201][ T6750] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 82.087301][ T6763] loop3: detected capacity change from 0 to 2048 [ 82.118538][ T6763] loop3: p1 < > p4 [ 82.126184][ T6763] loop3: p4 size 8388608 extends beyond EOD, truncated [ 82.173993][ T29] audit: type=1326 audit(1749463447.758:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6774 comm="syz.3.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc2e0e929 code=0x7ffc0000 [ 82.228221][ T6782] loop2: detected capacity change from 0 to 512 [ 82.250147][ T6782] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.275685][ T6782] EXT4-fs (loop2): 1 truncate cleaned up [ 82.306892][ T6782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.457063][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.826618][ T6801] loop3: detected capacity change from 0 to 128 [ 82.839029][ T6801] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4622: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 82.852505][ T6801] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (fffc1829) [ 83.061317][ T6785] sd 0:0:1:0: device reset [ 83.133026][ T6812] bridge: RTM_NEWNEIGH with invalid ether address [ 83.143697][ T6815] bridge0: port 1(macvlan3) entered blocking state [ 83.150345][ T6815] bridge0: port 1(macvlan3) entered disabled state [ 83.157138][ T6815] macvlan3: entered allmulticast mode [ 83.162605][ T6815] bridge0: entered allmulticast mode [ 83.168770][ T6815] macvlan3: left allmulticast mode [ 83.173933][ T6815] bridge0: left allmulticast mode [ 83.253659][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1337'. [ 83.267666][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1337'. [ 83.481079][ T6835] syz_tun: entered allmulticast mode [ 83.487279][ T6833] syz_tun: left allmulticast mode [ 83.518276][ T6838] loop4: detected capacity change from 0 to 1024 [ 83.525333][ T6838] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.545353][ T6838] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.1342: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 83.564463][ T6838] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1342: couldn't read orphan inode 11 (err -117) [ 83.577161][ T6838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.604539][ T3309] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /286/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 83.624689][ T3309] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 83.636530][ T3309] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 83.699647][ T6846] bridge0: port 3(macvlan3) entered blocking state [ 83.706236][ T6846] bridge0: port 3(macvlan3) entered disabled state [ 83.713036][ T6846] macvlan3: entered allmulticast mode [ 83.718586][ T6846] bridge0: entered allmulticast mode [ 83.724358][ T6846] macvlan3: left allmulticast mode [ 83.729548][ T6846] bridge0: left allmulticast mode [ 83.739462][ T6842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.828816][ T6852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.838782][ T6852] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.974681][ T6856] lo speed is unknown, defaulting to 1000 [ 84.024883][ T4595] team0: Port device geneve1 removed [ 84.058942][ T6881] SELinux: failed to load policy [ 84.081401][ T4595] bond0 (unregistering): Released all slaves [ 84.140710][ T6886] xt_hashlimit: max too large, truncated to 1048576 [ 84.189709][ T4595] tipc: Left network mode [ 84.311664][ T6856] chnl_net:caif_netlink_parms(): no params data found [ 84.362046][ T6856] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.366200][ T6909] SELinux: syz.1.1366 (6909) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 84.369294][ T6856] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.390216][ T6856] bridge_slave_0: entered allmulticast mode [ 84.397126][ T6856] bridge_slave_0: entered promiscuous mode [ 84.404600][ T6856] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.411734][ T6856] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.419093][ T6856] bridge_slave_1: entered allmulticast mode [ 84.426050][ T6856] bridge_slave_1: entered promiscuous mode [ 84.449413][ T6856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.460966][ T6856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.483264][ T6856] team0: Port device team_slave_0 added [ 84.490291][ T6856] team0: Port device team_slave_1 added [ 84.508297][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.515377][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.541611][ T6856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.553114][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.560152][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.586178][ T6856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.623487][ T6856] hsr_slave_0: entered promiscuous mode [ 84.629674][ T6856] hsr_slave_1: entered promiscuous mode [ 84.710522][ T6856] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.720658][ T6856] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.729613][ T6856] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.739697][ T6856] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.756382][ T6856] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.763582][ T6856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.770897][ T6856] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.778054][ T6856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.810129][ T6856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.830112][ T5199] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.857227][ T5199] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.880334][ T6856] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.893800][ T4567] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.901018][ T4567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.918540][ T4550] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.925722][ T4550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.955075][ T6933] bridge0: port 4(macvlan2) entered blocking state [ 84.961756][ T6933] bridge0: port 4(macvlan2) entered disabled state [ 84.968617][ T6933] macvlan2: entered allmulticast mode [ 84.974070][ T6933] bridge0: entered allmulticast mode [ 84.981104][ T6933] macvlan2: left allmulticast mode [ 84.986331][ T6933] bridge0: left allmulticast mode [ 85.040044][ T6856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.170930][ T6958] loop0: detected capacity change from 0 to 512 [ 85.174894][ T6856] veth0_vlan: entered promiscuous mode [ 85.188324][ T6856] veth1_vlan: entered promiscuous mode [ 85.205939][ T6958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.212243][ T6856] veth0_macvtap: entered promiscuous mode [ 85.218807][ T6958] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.226263][ T6856] veth1_macvtap: entered promiscuous mode [ 85.287357][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.302419][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.320488][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.341674][ T6856] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.350966][ T6856] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.359904][ T6856] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.368705][ T6856] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.646808][ T6978] pim6reg1: entered promiscuous mode [ 85.652214][ T6978] pim6reg1: entered allmulticast mode [ 85.728565][ T6991] loop5: detected capacity change from 0 to 512 [ 85.735876][ T6991] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 85.749657][ T6991] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c0a8, mo2=0002] [ 85.759104][ T6991] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.1389: missing EA_INODE flag [ 85.772019][ T6991] EXT4-fs (loop5): Remounting filesystem read-only [ 85.779298][ T6991] EXT4-fs (loop5): 1 orphan inode deleted [ 85.785865][ T6991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.839797][ T6856] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.862022][ T7004] loop2: detected capacity change from 0 to 512 [ 85.884963][ T7006] bridge0: entered promiscuous mode [ 85.891534][ T7004] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.1394: corrupted in-inode xattr: invalid ea_ino [ 85.896120][ T7006] bridge0: port 3(macvlan2) entered blocking state [ 85.911763][ T7006] bridge0: port 3(macvlan2) entered disabled state [ 85.921470][ T7004] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1394: couldn't read orphan inode 15 (err -117) [ 85.936452][ T7004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.951707][ T7006] macvlan2: entered allmulticast mode [ 85.957244][ T7006] bridge0: entered allmulticast mode [ 85.981544][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.999200][ T7006] macvlan2: left allmulticast mode [ 86.004411][ T7006] bridge0: left allmulticast mode [ 86.010816][ T7006] bridge0: left promiscuous mode [ 86.043932][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1397'. [ 86.056470][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1397'. [ 86.173099][ T7023] netlink: 'syz.5.1399': attribute type 13 has an invalid length. [ 86.251487][ T7023] net_ratelimit: 11 callbacks suppressed [ 86.251515][ T7023] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.346942][ T7030] loop2: detected capacity change from 0 to 2048 [ 86.360351][ T7030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.625528][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.802161][ T7059] serio: Serial port ttyS3 [ 86.887676][ T7065] loop2: detected capacity change from 0 to 128 [ 87.018948][ T7071] syz.2.1416: attempt to access beyond end of device [ 87.018948][ T7071] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 87.046682][ T7071] syz.2.1416: attempt to access beyond end of device [ 87.046682][ T7071] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 87.095347][ T7071] syz.2.1416: attempt to access beyond end of device [ 87.095347][ T7071] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 87.152870][ T7077] bridge0: entered promiscuous mode [ 87.174680][ T7071] syz.2.1416: attempt to access beyond end of device [ 87.174680][ T7071] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 87.209646][ T7077] bridge0: port 3(macvlan2) entered blocking state [ 87.216242][ T7077] bridge0: port 3(macvlan2) entered disabled state [ 87.236642][ T7077] macvlan2: entered allmulticast mode [ 87.242170][ T7077] bridge0: entered allmulticast mode [ 87.258166][ T7077] macvlan2: left allmulticast mode [ 87.263398][ T7077] bridge0: left allmulticast mode [ 87.269508][ T7077] bridge0: left promiscuous mode [ 87.413790][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 87.413810][ T29] audit: type=1400 audit(1749463452.998:2615): avc: denied { write } for pid=7098 comm="syz.1.1430" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.506940][ T29] audit: type=1400 audit(1749463452.998:2616): avc: denied { open } for pid=7098 comm="syz.1.1430" path="/280/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.640332][ T29] audit: type=1326 audit(1749463453.208:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.0.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701508e929 code=0x7ffc0000 [ 87.664033][ T29] audit: type=1326 audit(1749463453.208:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.0.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701508e929 code=0x7ffc0000 [ 87.687777][ T29] audit: type=1326 audit(1749463453.208:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.0.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f701508e929 code=0x7ffc0000 [ 87.711254][ T29] audit: type=1326 audit(1749463453.208:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.0.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701508e929 code=0x7ffc0000 [ 87.734996][ T29] audit: type=1326 audit(1749463453.208:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.0.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f701508e929 code=0x7ffc0000 [ 87.758651][ T29] audit: type=1326 audit(1749463453.208:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.0.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701508e929 code=0x7ffc0000 [ 87.782150][ T29] audit: type=1326 audit(1749463453.208:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.0.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f701508e929 code=0x7ffc0000 [ 87.805542][ T29] audit: type=1326 audit(1749463453.208:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.0.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701508e929 code=0x7ffc0000 [ 87.913745][ T7120] bridge0: port 3(macvlan3) entered blocking state [ 87.920629][ T7120] bridge0: port 3(macvlan3) entered disabled state [ 87.940732][ T7120] macvlan3: entered allmulticast mode [ 87.946170][ T7120] bridge0: entered allmulticast mode [ 87.982697][ T7120] macvlan3: left allmulticast mode [ 87.987936][ T7120] bridge0: left allmulticast mode [ 88.104381][ T7128] pim6reg1: entered promiscuous mode [ 88.109837][ T7128] pim6reg1: entered allmulticast mode [ 88.198303][ T7121] ip6gre2: entered allmulticast mode [ 88.271155][ T7135] loop0: detected capacity change from 0 to 128 [ 88.281305][ T7137] loop2: detected capacity change from 0 to 128 [ 88.319778][ T7135] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.328098][ T7137] EXT4-fs: Ignoring removed nobh option [ 88.337754][ T7135] ext4 filesystem being mounted at /305/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.375921][ T7140] batman_adv: batadv0: Adding interface: ip6gretap1 [ 88.382711][ T7140] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.408466][ T7140] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 88.426145][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.439523][ T7137] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.449557][ T7140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.459265][ T7140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.459479][ T7137] ext4 filesystem being mounted at /266/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.477698][ T7140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.485183][ T7140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.511659][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.524057][ T7133] loop3: detected capacity change from 0 to 512 [ 88.531117][ T7140] batman_adv: batadv0: Removing interface: ip6gretap1 [ 88.531888][ T7133] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 88.538461][ T7148] loop0: detected capacity change from 0 to 512 [ 88.560631][ T7148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.570901][ T7153] loop2: detected capacity change from 0 to 1024 [ 88.590706][ T7148] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.661489][ T7162] loop3: detected capacity change from 0 to 512 [ 88.669993][ T7162] EXT4-fs (loop3): orphan cleanup on readonly fs [ 88.677359][ T7162] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1451: bg 0: block 248: padding at end of block bitmap is not set [ 88.692084][ T7162] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1451: Failed to acquire dquot type 1 [ 88.704589][ T7162] EXT4-fs (loop3): 1 truncate cleaned up [ 88.711128][ T7162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.736712][ T3314] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 88.748927][ T3314] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 88.780980][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'. [ 88.791056][ T7168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1454'. [ 88.798041][ T7170] loop5: detected capacity change from 0 to 512 [ 88.830789][ T7170] EXT4-fs (loop5): orphan cleanup on readonly fs [ 88.837695][ T7170] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1455: bg 0: block 248: padding at end of block bitmap is not set [ 88.858459][ T7170] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1455: Failed to acquire dquot type 1 [ 88.899324][ T7170] EXT4-fs (loop5): 1 truncate cleaned up [ 88.906026][ T7170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.949322][ T7170] tmpfs: Unknown parameter 'noquota' [ 88.965808][ T6856] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.053089][ T4357] bridge_slave_1: left allmulticast mode [ 89.058852][ T4357] bridge_slave_1: left promiscuous mode [ 89.064596][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.088140][ T4357] bridge_slave_0: left allmulticast mode [ 89.094003][ T4357] bridge_slave_0: left promiscuous mode [ 89.099769][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.161012][ T4357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.172273][ T4357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.182227][ T4357] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 89.192514][ T4357] bond0 (unregistering): Released all slaves [ 89.202045][ T4357] bond1 (unregistering): Released all slaves [ 89.273609][ T4357] hsr_slave_0: left promiscuous mode [ 89.279708][ T4357] hsr_slave_1: left promiscuous mode [ 89.286011][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.293772][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.330635][ T7207] sd 0:0:1:0: device reset [ 89.364993][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.382177][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 89.398318][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 89.479665][ T7205] veth1_to_bond: entered allmulticast mode [ 89.485554][ T7205] veth1_to_bond: left allmulticast mode [ 89.516131][ T7178] chnl_net:caif_netlink_parms(): no params data found [ 89.658304][ T7178] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.665511][ T7178] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.688806][ T7227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.717607][ T7227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.726070][ T7178] bridge_slave_0: entered allmulticast mode [ 89.740782][ T7178] bridge_slave_0: entered promiscuous mode [ 89.769016][ T7178] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.776166][ T7178] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.790096][ T7178] bridge_slave_1: entered allmulticast mode [ 89.806823][ T7178] bridge_slave_1: entered promiscuous mode [ 89.857149][ T7178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.867438][ T4357] IPVS: stop unused estimator thread 0... [ 89.869818][ T7178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.912743][ T7216] syzkaller0: entered promiscuous mode [ 89.918337][ T7216] syzkaller0: entered allmulticast mode [ 89.958163][ T7178] team0: Port device team_slave_0 added [ 89.965048][ T7178] team0: Port device team_slave_1 added [ 89.983878][ T7178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.991082][ T7178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.017145][ T7178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.028619][ T7178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.035590][ T7178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.061956][ T7178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.091588][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1479'. [ 90.108318][ T7239] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1479'. [ 90.132171][ T7178] hsr_slave_0: entered promiscuous mode [ 90.145932][ T7178] hsr_slave_1: entered promiscuous mode [ 90.152524][ T7178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.160366][ T7178] Cannot create hsr debugfs directory [ 90.265383][ T7178] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 90.280178][ T7178] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 90.303652][ T7178] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 90.314453][ T7178] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 90.350339][ T7178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.362300][ T7178] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.371374][ T4567] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.378478][ T4567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.409529][ T4567] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.416679][ T4567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.533699][ T7178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.746826][ T7178] veth0_vlan: entered promiscuous mode [ 90.757305][ T7178] veth1_vlan: entered promiscuous mode [ 90.780905][ T7178] veth0_macvtap: entered promiscuous mode [ 90.788797][ T7178] veth1_macvtap: entered promiscuous mode [ 90.802958][ T7178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.817382][ T7178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.829412][ T7178] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.838249][ T7178] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.846964][ T7178] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.855722][ T7178] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.007828][ T7288] serio: Serial port ptm0 [ 91.013062][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1486'. [ 91.168080][ T7293] loop5: detected capacity change from 0 to 8192 [ 91.211683][ T7295] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1490'. [ 91.276634][ T7297] loop0: detected capacity change from 0 to 512 [ 91.300924][ T7297] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1491: Failed to acquire dquot type 1 [ 91.313668][ T7297] EXT4-fs (loop0): 1 truncate cleaned up [ 91.320483][ T7297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.333990][ T7297] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.386724][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.414402][ T5194] kernel write not supported for file /meminfo (pid: 5194 comm: kworker/0:14) [ 91.442580][ T7326] loop5: detected capacity change from 0 to 512 [ 91.589906][ T7326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.603958][ T7326] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.637298][ T6856] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.954301][ T7413] bridge0: port 3(macvlan3) entered blocking state [ 91.961000][ T7413] bridge0: port 3(macvlan3) entered disabled state [ 91.978665][ T7413] macvlan3: entered allmulticast mode [ 91.984232][ T7413] bridge0: entered allmulticast mode [ 91.992058][ T7413] macvlan3: left allmulticast mode [ 91.997324][ T7413] bridge0: left allmulticast mode [ 92.169329][ T7450] netlink: 'syz.0.1506': attribute type 10 has an invalid length. [ 92.177225][ T7450] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1506'. [ 92.227255][ T7452] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 92.237242][ T7450] dummy0: entered promiscuous mode [ 92.250171][ T7450] bridge0: port 3(dummy0) entered blocking state [ 92.256689][ T7450] bridge0: port 3(dummy0) entered disabled state [ 92.264598][ T7450] dummy0: entered allmulticast mode [ 92.299401][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1509'. [ 92.346045][ T5184] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 92.365466][ T5184] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 92.420373][ T7467] xt_hashlimit: size too large, truncated to 1048576 [ 92.684012][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1515'. [ 92.695918][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.714513][ T7485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.783347][ T7492] loop6: detected capacity change from 0 to 512 [ 92.797300][ T7492] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.830452][ T7492] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 92.850979][ T7492] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.034528][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 93.034546][ T29] audit: type=1326 audit(1749463458.618:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595a2ce929 code=0x7ffc0000 [ 93.064267][ T29] audit: type=1326 audit(1749463458.618:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595a2ce929 code=0x7ffc0000 [ 93.137891][ T29] audit: type=1326 audit(1749463458.618:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f595a2ce929 code=0x7ffc0000 [ 93.161380][ T29] audit: type=1326 audit(1749463458.618:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595a2ce929 code=0x7ffc0000 [ 93.185010][ T29] audit: type=1326 audit(1749463458.618:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595a2ce929 code=0x7ffc0000 [ 93.208486][ T29] audit: type=1326 audit(1749463458.688:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f595a2ce929 code=0x7ffc0000 [ 93.232031][ T29] audit: type=1326 audit(1749463458.688:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595a2ce929 code=0x7ffc0000 [ 93.255593][ T29] audit: type=1326 audit(1749463458.688:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f595a2ce929 code=0x7ffc0000 [ 93.278959][ T29] audit: type=1326 audit(1749463458.688:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595a2ce929 code=0x7ffc0000 [ 93.302420][ T29] audit: type=1326 audit(1749463458.688:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f595a2ce929 code=0x7ffc0000 [ 93.400179][ T7178] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 93.410322][ T7524] SELinux: Context @ is not valid (left unmapped). [ 94.052117][ T7563] serio: Serial port ttyS3 [ 94.332119][ T7570] macvlan1: entered promiscuous mode [ 94.338079][ T7570] ipvlan0: entered promiscuous mode [ 94.343911][ T7570] ipvlan0: left promiscuous mode [ 94.349597][ T7570] macvlan1: left promiscuous mode [ 94.376937][ T7577] loop5: detected capacity change from 0 to 128 [ 94.384272][ T7577] EXT4-fs: Ignoring removed nobh option [ 94.391724][ T7577] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.404552][ T7577] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.453488][ T6856] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.517387][ T7593] loop5: detected capacity change from 0 to 1024 [ 94.539777][ T7593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.558578][ T7593] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.624777][ T7596] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 94.763084][ T7609] netlink: 'syz.6.1554': attribute type 1 has an invalid length. [ 94.773551][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1554'. [ 94.827540][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.838237][ T7610] bridge_slave_0 (unregistering): left allmulticast mode [ 94.845298][ T7610] bridge_slave_0 (unregistering): left promiscuous mode [ 94.852598][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.224291][ T7633] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.291948][ T7633] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.339979][ T7636] loop2: detected capacity change from 0 to 2048 [ 95.347268][ T7633] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.388134][ T7636] loop2: p1 < > p4 [ 95.392739][ T7636] loop2: p4 size 8388608 extends beyond EOD, truncated [ 95.402191][ T6856] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.422614][ T7633] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.465076][ T7633] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.485513][ T7642] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.504783][ T7633] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.520470][ T7633] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.533302][ T7633] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.560886][ T7642] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.593605][ T7650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1570'. [ 95.656104][ T7642] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.722696][ T7662] bridge0: entered promiscuous mode [ 95.729451][ T7662] bridge0: port 1(macvlan2) entered blocking state [ 95.736028][ T7662] bridge0: port 1(macvlan2) entered disabled state [ 95.743037][ T7662] macvlan2: entered allmulticast mode [ 95.748546][ T7662] bridge0: entered allmulticast mode [ 95.754406][ T7662] macvlan2: left allmulticast mode [ 95.759703][ T7662] bridge0: left allmulticast mode [ 95.765082][ T7662] bridge0: left promiscuous mode [ 95.779371][ T7642] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.845027][ T7642] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.856792][ T7642] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.868928][ T7642] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.881603][ T7642] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.978060][ T7672] Falling back ldisc for ttyS3. [ 96.075045][ T4567] nci: nci_ntf_packet: unknown ntf opcode 0x10d [ 96.304381][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 96.314374][ T7697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.322178][ T7697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.557903][ T7708] Falling back ldisc for ttyS3. [ 96.900436][ T7727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1599'. [ 97.523533][ T7762] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 97.810769][ T7810] macvlan1: entered promiscuous mode [ 97.823457][ T7810] ipvlan0: entered promiscuous mode [ 97.832381][ T7810] ipvlan0: left promiscuous mode [ 97.839935][ T7810] macvlan1: left promiscuous mode [ 97.993243][ T7848] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1615'. [ 98.053426][ T7856] xt_hashlimit: size too large, truncated to 1048576 [ 98.057508][ T7858] loop2: detected capacity change from 0 to 2048 [ 98.099938][ T7860] bridge0: entered promiscuous mode [ 98.106510][ T7860] bridge0: port 1(macvlan2) entered blocking state [ 98.113318][ T7860] bridge0: port 1(macvlan2) entered disabled state [ 98.120433][ T7860] macvlan2: entered allmulticast mode [ 98.125828][ T7860] bridge0: entered allmulticast mode [ 98.134947][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1622'. [ 98.144805][ T7860] macvlan2: left allmulticast mode [ 98.150017][ T7860] bridge0: left allmulticast mode [ 98.156593][ T7860] bridge0: left promiscuous mode [ 98.163198][ T7858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.461598][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.512512][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 98.512528][ T29] audit: type=1326 audit(1749463464.098:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.1.1627" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f595a2ce929 code=0x0 [ 99.412955][ T7905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1634'. [ 99.527504][ T7912] serio: Serial port ttyS3 [ 99.594036][ T7926] loop6: detected capacity change from 0 to 1024 [ 99.616382][ T7926] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 99.627547][ T7926] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 99.671385][ T7926] jbd2_journal_init_inode: Cannot locate journal superblock [ 99.678806][ T7926] EXT4-fs (loop6): Could not load journal inode [ 99.868258][ T7947] ipvlan2: entered promiscuous mode [ 99.873553][ T7947] ipvlan2: entered allmulticast mode [ 99.878928][ T7947] bridge0: entered allmulticast mode [ 99.990464][ T7957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.038650][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1655'. [ 100.055142][ T29] audit: type=1326 audit(1749463465.638:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.0.1643" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f701508e929 code=0x0 [ 100.106399][ T7976] loop6: detected capacity change from 0 to 1024 [ 100.124350][ T7976] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 100.154466][ T7976] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 100.178173][ T7976] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: inode #32: comm syz.6.1647: iget: special inode unallocated [ 100.226340][ T7976] EXT4-fs (loop6): no journal found [ 100.231899][ T7976] EXT4-fs (loop6): can't get journal size [ 100.298032][ T7976] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz.6.1647: iget: special inode unallocated [ 100.324768][ T7976] EXT4-fs (loop6): get root inode failed [ 100.330547][ T7976] EXT4-fs (loop6): mount failed [ 100.386919][ T8023] loop6: detected capacity change from 0 to 128 [ 100.401435][ T8022] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 100.409377][ T8022] FAT-fs (loop6): Filesystem has been set read-only [ 100.416099][ T8022] syz.6.1651: attempt to access beyond end of device [ 100.416099][ T8022] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 100.430900][ T8022] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 100.438833][ T8022] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 100.458513][ T8022] syz.6.1651: attempt to access beyond end of device [ 100.458513][ T8022] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 100.472058][ T8022] syz.6.1651: attempt to access beyond end of device [ 100.472058][ T8022] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 100.486184][ T8022] syz.6.1651: attempt to access beyond end of device [ 100.486184][ T8022] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 100.505347][ T8023] syz.6.1651: attempt to access beyond end of device [ 100.505347][ T8023] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 100.519473][ T8023] syz.6.1651: attempt to access beyond end of device [ 100.519473][ T8023] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 100.532871][ T8023] syz.6.1651: attempt to access beyond end of device [ 100.532871][ T8023] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 100.547925][ T8023] syz.6.1651: attempt to access beyond end of device [ 100.547925][ T8023] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 100.601265][ T8031] netlink: 'syz.6.1654': attribute type 10 has an invalid length. [ 100.609230][ T8031] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1654'. [ 100.618404][ T8031] dummy0: entered promiscuous mode [ 100.624319][ T8031] bridge0: port 1(dummy0) entered blocking state [ 100.630815][ T8031] bridge0: port 1(dummy0) entered disabled state [ 100.637471][ T8031] dummy0: entered allmulticast mode [ 100.644020][ T8031] bridge0: port 1(dummy0) entered blocking state [ 100.650529][ T8031] bridge0: port 1(dummy0) entered forwarding state [ 101.053889][ T8048] tipc: Started in network mode [ 101.058891][ T8048] tipc: Node identity ac14140f, cluster identity 4711 [ 101.066456][ T8048] tipc: New replicast peer: 255.255.255.255 [ 101.072683][ T8048] tipc: Enabled bearer , priority 10 [ 101.157934][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1663'. [ 101.166911][ T8054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.174456][ T8054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.208273][ T8054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.215918][ T8054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.237587][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1664'. [ 101.393323][ T8064] TCP: out of memory -- consider tuning tcp_mem [ 101.444429][ T29] audit: type=1400 audit(1749463467.008:2848): avc: denied { create } for pid=8065 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 101.463567][ T29] audit: type=1326 audit(1749463467.008:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 101.486783][ T29] audit: type=1326 audit(1749463467.008:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 101.509753][ T29] audit: type=1326 audit(1749463467.008:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 101.532943][ T29] audit: type=1326 audit(1749463467.008:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 101.555903][ T29] audit: type=1326 audit(1749463467.008:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 101.706292][ T29] audit: type=1326 audit(1749463467.288:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.5.1677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f020163e929 code=0x0 [ 101.734510][ T8082] bridge0: port 4(macvlan2) entered blocking state [ 101.741266][ T8082] bridge0: port 4(macvlan2) entered disabled state [ 101.749443][ T8082] macvlan2: entered allmulticast mode [ 101.754857][ T8082] bridge0: entered allmulticast mode [ 101.761443][ T8082] macvlan2: left allmulticast mode [ 101.766676][ T8082] bridge0: left allmulticast mode [ 101.791837][ T8086] geneve2: entered promiscuous mode [ 101.797138][ T8086] geneve2: entered allmulticast mode [ 101.818597][ T8089] pim6reg1: entered promiscuous mode [ 101.824055][ T8089] pim6reg1: entered allmulticast mode [ 101.889947][ T8094] ipvlan2: entered promiscuous mode [ 101.894773][ T8095] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.895254][ T8094] ipvlan2: entered allmulticast mode [ 101.908947][ T8094] bridge0: entered allmulticast mode [ 101.961926][ T8101] loop6: detected capacity change from 0 to 1024 [ 101.990031][ T8101] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.002740][ T8101] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.070492][ T5184] tipc: Node number set to 2886997007 [ 102.139504][ T29] audit: type=1326 audit(1749463467.728:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8115 comm="syz.0.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701508e929 code=0x7ffc0000 [ 102.237504][ T8126] bridge0: port 3(macvlan2) entered blocking state [ 102.244213][ T8126] bridge0: port 3(macvlan2) entered disabled state [ 102.250841][ T8126] macvlan2: entered allmulticast mode [ 102.256267][ T8126] bridge0: entered allmulticast mode [ 102.261977][ T4561] nci: nci_ntf_packet: unknown ntf opcode 0x10d [ 102.265486][ T8126] macvlan2: left allmulticast mode [ 102.273546][ T8126] bridge0: left allmulticast mode [ 102.564413][ T8132] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 102.710656][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1699'. [ 102.850310][ T7178] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.009693][ T8159] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1705'. [ 103.339202][ T8177] loop6: detected capacity change from 0 to 512 [ 103.351261][ T8177] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.370216][ T8177] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm +}[@: iget: bad extended attribute block 1 [ 103.383294][ T8177] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm +}[@: couldn't read orphan inode 15 (err -117) [ 103.397575][ T8177] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.424581][ T7178] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.633513][ T8192] ipvlan2: entered promiscuous mode [ 103.639021][ T8192] ipvlan2: entered allmulticast mode [ 103.644376][ T8192] bridge0: entered allmulticast mode [ 103.663510][ T8195] netlink: 'syz.0.1721': attribute type 10 has an invalid length. [ 103.671515][ T8195] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1721'. [ 103.844587][ T8204] syzkaller0: entered promiscuous mode [ 103.850517][ T8204] syzkaller0: entered allmulticast mode [ 103.949492][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 103.951052][ T29] audit: type=1400 audit(1749463469.538:2900): avc: denied { map } for pid=8207 comm="+}[@" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.951162][ T8208] vhci_hcd: invalid port number 96 [ 103.986071][ T8208] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 104.335764][ T8233] $H: renamed from bond0 [ 104.391633][ T8233] $H: entered promiscuous mode [ 104.396903][ T8233] bond_slave_0: entered promiscuous mode [ 104.402709][ T8233] bond_slave_1: entered promiscuous mode [ 104.688088][ T29] audit: type=1326 audit(1749463470.208:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595a2ce929 code=0x7ffc0000 [ 104.711653][ T29] audit: type=1326 audit(1749463470.208:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595a2ce929 code=0x7ffc0000 [ 104.735189][ T29] audit: type=1326 audit(1749463470.208:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f595a2ce929 code=0x7ffc0000 [ 104.758722][ T29] audit: type=1326 audit(1749463470.208:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595a2ce929 code=0x7ffc0000 [ 104.782365][ T29] audit: type=1326 audit(1749463470.208:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595a2ce929 code=0x7ffc0000 [ 104.805898][ T29] audit: type=1326 audit(1749463470.208:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f595a2ce929 code=0x7ffc0000 [ 104.829319][ T29] audit: type=1326 audit(1749463470.208:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595a2ce929 code=0x7ffc0000 [ 104.830234][ T8244] netlink: 'syz.1.1741': attribute type 21 has an invalid length. [ 104.852833][ T29] audit: type=1326 audit(1749463470.208:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595a2ce929 code=0x7ffc0000 [ 104.860667][ T8244] netlink: 'syz.1.1741': attribute type 4 has an invalid length. [ 104.892092][ T29] audit: type=1326 audit(1749463470.208:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f595a2ce929 code=0x7ffc0000 [ 105.243248][ T8282] bridge: RTM_NEWNEIGH with invalid ether address [ 105.506304][ T8300] xt_hashlimit: max too large, truncated to 1048576 [ 105.881737][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1775'. [ 105.904369][ T8323] team0 (unregistering): Port device team_slave_0 removed [ 105.925738][ T8323] team0 (unregistering): Port device team_slave_1 removed [ 106.196267][ T8333] xt_hashlimit: max too large, truncated to 1048576 [ 106.442677][ T8347] delete_channel: no stack [ 106.572704][ T8356] bridge0: port 3(macvlan2) entered blocking state [ 106.579532][ T8356] bridge0: port 3(macvlan2) entered disabled state [ 106.586573][ T8356] macvlan2: entered allmulticast mode [ 106.592026][ T8356] bridge0: entered allmulticast mode [ 106.603918][ T8356] macvlan2: left allmulticast mode [ 106.609126][ T8356] bridge0: left allmulticast mode [ 106.750785][ T8368] vhci_hcd: invalid port number 96 [ 106.755962][ T8368] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 106.842706][ T8373] syzkaller0: entered promiscuous mode [ 106.848513][ T8373] syzkaller0: entered allmulticast mode [ 106.852017][ T8381] netlink: 'syz.6.1805': attribute type 21 has an invalid length. [ 106.861977][ T8381] netlink: 'syz.6.1805': attribute type 4 has an invalid length. [ 106.874795][ T8381] loop6: detected capacity change from 0 to 512 [ 106.900963][ T8381] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.913661][ T8381] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.958507][ T8381] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.1805: Allocating blocks 18-19 which overlap fs metadata [ 106.977454][ T8381] EXT4-fs (loop6): Remounting filesystem read-only [ 107.000264][ T7178] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.010717][ T4577] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 107.371460][ T8422] $H: renamed from bond0 (while UP) [ 107.381914][ T8422] $H: entered promiscuous mode [ 107.387029][ T8422] bond_slave_0: entered promiscuous mode [ 107.392912][ T8422] bond_slave_1: entered promiscuous mode [ 107.456729][ T8426] syzkaller0: entered promiscuous mode [ 107.462442][ T8426] syzkaller0: entered allmulticast mode [ 107.464389][ T8429] netlink: 'syz.0.1812': attribute type 13 has an invalid length. [ 107.515001][ T8429] bridge0: port 3(dummy0) entered blocking state [ 107.521474][ T8429] bridge0: port 3(dummy0) entered forwarding state [ 107.529756][ T8429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.538210][ T8429] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.548522][ T8429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.648833][ T8442] delete_channel: no stack [ 107.989765][ T8470] netlink: 'syz.2.1828': attribute type 13 has an invalid length. [ 108.077607][ T8470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.105661][ T8470] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.116380][ T8470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.347810][ T8482] pim6reg1: entered promiscuous mode [ 108.353190][ T8482] pim6reg1: entered allmulticast mode [ 108.796946][ T8506] netlink: 'syz.6.1839': attribute type 13 has an invalid length. [ 108.864852][ T8510] hub 9-0:1.0: USB hub found [ 108.873412][ T8510] hub 9-0:1.0: 8 ports detected [ 108.884218][ T8506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.169894][ T8525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 109.177206][ T8525] IPv6: NLM_F_CREATE should be set when creating new route [ 109.472519][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1851'. [ 109.675701][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 109.675719][ T29] audit: type=1326 audit(1749463475.258:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8547 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 109.734804][ T29] audit: type=1326 audit(1749463475.258:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8547 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 109.758241][ T29] audit: type=1326 audit(1749463475.258:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8547 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 109.781790][ T29] audit: type=1326 audit(1749463475.258:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8547 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 109.805403][ T29] audit: type=1326 audit(1749463475.258:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8547 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 109.828919][ T29] audit: type=1326 audit(1749463475.258:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8547 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 109.852587][ T29] audit: type=1326 audit(1749463475.258:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8547 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 109.876115][ T29] audit: type=1326 audit(1749463475.258:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8547 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 109.899878][ T29] audit: type=1326 audit(1749463475.258:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8547 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 109.923779][ T29] audit: type=1326 audit(1749463475.258:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8547 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb840cbe929 code=0x7ffc0000 [ 109.953324][ T8554] bridge0: entered promiscuous mode [ 109.959255][ T8554] bridge0: port 3(macvlan2) entered blocking state [ 109.965920][ T8554] bridge0: port 3(macvlan2) entered disabled state [ 109.972674][ T8554] macvlan2: entered allmulticast mode [ 109.978196][ T8554] bridge0: entered allmulticast mode [ 109.986381][ T8554] macvlan2: left allmulticast mode [ 109.991592][ T8554] bridge0: left allmulticast mode [ 109.997328][ T8554] bridge0: left promiscuous mode [ 110.447913][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1876'. [ 110.488255][ T8571] team0 (unregistering): Port device team_slave_0 removed [ 110.507826][ T8571] team0 (unregistering): Port device team_slave_1 removed [ 110.656314][ T8580] netlink: 'syz.2.1868': attribute type 1 has an invalid length. [ 110.664163][ T8580] netlink: 'syz.2.1868': attribute type 4 has an invalid length. [ 110.671978][ T8580] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1868'. [ 110.698276][ T8580] netlink: 'syz.2.1868': attribute type 1 has an invalid length. [ 110.706220][ T8580] netlink: 'syz.2.1868': attribute type 4 has an invalid length. [ 110.714023][ T8580] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1868'. [ 110.786951][ T8584] bridge0: entered promiscuous mode [ 110.793409][ T8584] bridge0: port 3(macvlan2) entered blocking state [ 110.800024][ T8584] bridge0: port 3(macvlan2) entered disabled state [ 110.807035][ T8584] macvlan2: entered allmulticast mode [ 110.812473][ T8584] bridge0: entered allmulticast mode [ 110.818579][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1871'. [ 110.828229][ T8584] macvlan2: left allmulticast mode [ 110.833599][ T8584] bridge0: left allmulticast mode [ 110.839904][ T8584] bridge0: left promiscuous mode [ 110.862593][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1871'. [ 111.914963][ T8610] sd 0:0:1:0: device reset [ 111.915493][ T8608] hub 9-0:1.0: USB hub found [ 111.925022][ T8608] hub 9-0:1.0: 8 ports detected [ 111.970024][ T8616] bridge0: port 4(macvlan2) entered blocking state [ 111.976620][ T8616] bridge0: port 4(macvlan2) entered disabled state [ 111.983703][ T8616] macvlan2: entered allmulticast mode [ 111.989199][ T8616] bridge0: entered allmulticast mode [ 111.995020][ T8616] macvlan2: left allmulticast mode [ 112.000291][ T8616] bridge0: left allmulticast mode [ 112.040763][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1889'. [ 112.050516][ T8621] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1889'. [ 112.393879][ T8636] bridge0: port 3(gretap0) entered blocking state [ 112.400444][ T8636] bridge0: port 3(gretap0) entered disabled state [ 112.417671][ T8636] gretap0: entered allmulticast mode [ 112.424635][ T8636] gretap0: entered promiscuous mode [ 112.428393][ T8638] serio: Serial port ptm0 [ 112.437955][ T8636] bridge0: port 3(gretap0) entered blocking state [ 112.444534][ T8636] bridge0: port 3(gretap0) entered forwarding state [ 112.531797][ T8642] sd 0:0:1:0: device reset [ 112.572477][ T8645] hub 9-0:1.0: USB hub found [ 112.577207][ T8645] hub 9-0:1.0: 8 ports detected [ 112.609065][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1900'. [ 112.619062][ T8648] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1900'. [ 112.688045][ T8655] syzkaller0: entered promiscuous mode [ 112.693650][ T8655] syzkaller0: entered allmulticast mode [ 112.764975][ T8663] serio: Serial port ttyS3 [ 112.855692][ T8672] loop6: detected capacity change from 0 to 128 [ 112.887692][ T8672] EXT4-fs: Ignoring removed nobh option [ 112.917638][ T8672] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.947651][ T8672] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.997052][ T7178] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.595220][ T8699] SELinux: ebitmap: truncated map [ 113.600694][ T8699] SELinux: failed to load policy [ 113.971315][ T8720] syzkaller0: entered promiscuous mode [ 113.976933][ T8720] syzkaller0: entered allmulticast mode [ 114.086643][ T8732] loop6: detected capacity change from 0 to 512 [ 114.094711][ T8732] EXT4-fs (loop6): orphan cleanup on readonly fs [ 114.102058][ T8732] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1933: bg 0: block 248: padding at end of block bitmap is not set [ 114.117080][ T8732] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1933: Failed to acquire dquot type 1 [ 114.129302][ T8732] EXT4-fs (loop6): 1 truncate cleaned up [ 114.135606][ T8732] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.169987][ T7178] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.393207][ T8737] syzkaller0: entered promiscuous mode [ 114.398886][ T8737] syzkaller0: entered allmulticast mode [ 114.645121][ T8755] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1941'. [ 114.822860][ T8764] lo speed is unknown, defaulting to 1000 [ 114.828698][ T8764] lo speed is unknown, defaulting to 1000 [ 114.834808][ T8764] lo speed is unknown, defaulting to 1000 [ 114.841781][ T8764] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 114.852149][ T8764] lo speed is unknown, defaulting to 1000 [ 114.858489][ T8764] lo speed is unknown, defaulting to 1000 [ 114.864609][ T8764] lo speed is unknown, defaulting to 1000 [ 114.870845][ T8764] lo speed is unknown, defaulting to 1000 [ 114.877398][ T8764] lo speed is unknown, defaulting to 1000 [ 114.883573][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 114.883607][ T29] audit: type=1400 audit(1749463480.478:3173): avc: denied { read } for pid=8763 comm="syz.2.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.920606][ T29] audit: type=1400 audit(1749463480.508:3174): avc: denied { compute_member } for pid=8763 comm="syz.2.1946" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 114.996347][ T8770] binfmt_misc: register: failed to install interpreter file ./file2 [ 115.194945][ T8789] bond_slave_0: entered promiscuous mode [ 115.200711][ T8789] bond_slave_1: entered promiscuous mode [ 115.206884][ T8789] vlan2: entered promiscuous mode [ 115.212091][ T8789] bond0: entered promiscuous mode [ 115.317343][ T8793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.326039][ T8793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.339780][ T29] audit: type=1400 audit(1749463480.928:3175): avc: denied { append } for pid=8792 comm="syz.5.1959" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.364116][ T8793] loop9: detected capacity change from 0 to 7 [ 115.370636][ T8793] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.378678][ T8793] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.386574][ T8793] loop9: unable to read partition table [ 115.392494][ T8793] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 115.392494][ T8793] U) failed (rc=-5) [ 115.618836][ T8803] binfmt_misc: register: failed to install interpreter file ./file2 [ 115.833520][ T29] audit: type=1326 audit(1749463481.418:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.6.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a602e929 code=0x7ffc0000 [ 115.860185][ T8816] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.1968' sets config #0 [ 115.870090][ T8816] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.1968' sets config #1 [ 115.899792][ T29] audit: type=1326 audit(1749463481.418:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.6.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a602e929 code=0x7ffc0000 [ 115.923391][ T29] audit: type=1326 audit(1749463481.448:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.6.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46a602e929 code=0x7ffc0000 [ 115.946962][ T29] audit: type=1326 audit(1749463481.448:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.6.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a602e929 code=0x7ffc0000 [ 115.970539][ T29] audit: type=1326 audit(1749463481.448:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.6.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46a602e929 code=0x7ffc0000 [ 115.972462][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1971'. [ 115.994287][ T29] audit: type=1326 audit(1749463481.448:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.6.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a602e929 code=0x7ffc0000 [ 115.994324][ T29] audit: type=1326 audit(1749463481.448:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.6.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f46a602e929 code=0x7ffc0000 [ 116.129850][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1973'. [ 116.410714][ T8844] vlan2: entered promiscuous mode [ 116.415967][ T8844] bond0: entered promiscuous mode [ 116.421178][ T8844] bond_slave_0: entered promiscuous mode [ 116.427032][ T8844] bond_slave_1: entered promiscuous mode [ 116.645902][ T8857] delete_channel: no stack [ 116.768019][ T8868] bridge0: entered promiscuous mode [ 116.773965][ T8868] bridge0: port 3(macvlan2) entered blocking state [ 116.780697][ T8868] bridge0: port 3(macvlan2) entered disabled state [ 116.787612][ T8868] macvlan2: entered allmulticast mode [ 116.793085][ T8868] bridge0: entered allmulticast mode [ 116.799205][ T8868] macvlan2: left allmulticast mode [ 116.804356][ T8868] bridge0: left allmulticast mode [ 116.809824][ T8868] bridge0: left promiscuous mode [ 116.906019][ T8874] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1986'. [ 116.959967][ T8880] loop6: detected capacity change from 0 to 256 [ 117.277484][ T8917] syzkaller0: entered promiscuous mode [ 117.283164][ T8917] syzkaller0: entered allmulticast mode [ 117.821208][ T8998] siw: device registration error -23 [ 117.887178][ T9015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2004'. [ 117.899870][ T9015] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.908229][ T9015] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.916436][ T9015] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.924696][ T9015] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.933450][ T9015] vxlan0: entered promiscuous mode [ 118.336091][ T9028] lo speed is unknown, defaulting to 1000 [ 118.343893][ T9029] lo speed is unknown, defaulting to 1000 [ 118.436972][ T9029] SELinux: ebitmap: truncated map [ 118.443637][ T9029] SELinux: failed to load policy [ 118.734395][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2014'. [ 118.749005][ T9054] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2015'. [ 118.870447][ T9066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.879011][ T9066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.890756][ T9066] loop9: detected capacity change from 0 to 7 [ 118.896985][ T9066] Buffer I/O error on dev loop9, logical block 0, async page read [ 118.905056][ T9066] Buffer I/O error on dev loop9, logical block 0, async page read [ 118.913014][ T9066] loop9: unable to read partition table [ 118.935637][ T9066] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 118.935637][ T9066] U) failed (rc=-5) [ 118.990029][ T9070] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2013'. [ 119.275664][ T9115] loop6: detected capacity change from 0 to 128 [ 119.282740][ T9115] EXT4-fs: Ignoring removed nobh option [ 119.290254][ T9115] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.303062][ T9115] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.335443][ T7178] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.408452][ T9125] syzkaller0: create flow: hash 91775264 index 0 [ 119.459504][ T9125] syzkaller0 (unregistered): delete flow: hash 91775264 index 0 [ 119.520955][ T9146] block device autoloading is deprecated and will be removed. [ 119.624895][ T9162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2029'. [ 119.761459][ T9176] geneve2: entered promiscuous mode [ 119.766797][ T9176] geneve2: entered allmulticast mode [ 119.830577][ T3471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.016332][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2035'. [ 120.123161][ T9191] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.123196][ T9191] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.123264][ T9191] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.123312][ T9191] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.134452][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2035'. [ 120.138058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.277570][ T9207] lo speed is unknown, defaulting to 1000 [ 120.354338][ T9218] loop6: detected capacity change from 0 to 2048 [ 120.403406][ T9218] loop6: p1 < > p4 [ 120.425635][ T9233] loop2: detected capacity change from 0 to 512 [ 120.432715][ T9233] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 120.441531][ T9218] loop6: p4 size 8388608 extends beyond EOD, truncated [ 120.449385][ T9233] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.2040: bad orphan inode 15 [ 120.461761][ T9233] ext4_test_bit(bit=14, block=18) = 1 [ 120.467285][ T9233] is_bad_inode(inode)=0 [ 120.471666][ T9233] NEXT_ORPHAN(inode)=1023 [ 120.476107][ T9233] max_ino=32 [ 120.479368][ T9233] i_nlink=0 [ 120.483264][ T9233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 120.497901][ T9233] ext2 filesystem being mounted at /380/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 120.550255][ T9207] SELinux: ebitmap: truncated map [ 120.555812][ T9207] SELinux: failed to load policy [ 120.749671][ T9247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2042'. [ 120.761124][ T9245] loop6: detected capacity change from 0 to 512 [ 120.781632][ T5184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.790173][ T9245] EXT4-fs (loop6): orphan cleanup on readonly fs [ 120.804670][ T9249] bridge0: port 3($H) entered blocking state [ 120.811658][ T9249] bridge0: port 3($H) entered disabled state [ 120.823991][ T9245] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2044: bg 0: block 248: padding at end of block bitmap is not set [ 120.842956][ T9249] $H: entered allmulticast mode [ 120.848571][ T9249] bond_slave_0: entered allmulticast mode [ 120.855225][ T9249] bond_slave_1: entered allmulticast mode [ 120.863052][ T3471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.871929][ T9245] __quota_error: 76 callbacks suppressed [ 120.871944][ T9245] Quota error (device loop6): write_blk: dquota write failed [ 120.885243][ T9245] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 120.895304][ T9245] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2044: Failed to acquire dquot type 1 [ 120.943089][ T9245] EXT4-fs (loop6): 1 truncate cleaned up [ 120.949935][ T9245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.975825][ T9245] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 121.011972][ T9245] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 121.027297][ T9257] Quota error (device loop6): do_check_range: Getting block 1536 out of range 0-5 [ 121.072184][ T9245] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.2044: deleted inode referenced: 12 [ 121.128566][ T7178] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.259692][ T5194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.282704][ T9269] geneve0: entered allmulticast mode [ 121.324299][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 121.415658][ T29] audit: type=1326 audit(1749463486.998:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701508e929 code=0x7ffc0000 [ 121.456490][ T9281] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2058'. [ 121.466040][ T29] audit: type=1326 audit(1749463486.998:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f701508e929 code=0x7ffc0000 [ 121.489744][ T29] audit: type=1326 audit(1749463486.998:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701508e929 code=0x7ffc0000 [ 121.513365][ T29] audit: type=1326 audit(1749463486.998:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f701508e929 code=0x7ffc0000 [ 121.536912][ T29] audit: type=1326 audit(1749463486.998:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701508e929 code=0x7ffc0000 [ 121.560443][ T29] audit: type=1326 audit(1749463486.998:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f701508e929 code=0x7ffc0000 [ 121.583908][ T29] audit: type=1326 audit(1749463486.998:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701508e929 code=0x7ffc0000 [ 121.615116][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2058'. [ 121.624879][ T9284] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 121.833499][ T9242] syz.1.2043 (9242) used greatest stack depth: 6952 bytes left [ 121.844643][ T9298] netlink: 'syz.5.2063': attribute type 4 has an invalid length. [ 121.880290][ T9298] netlink: 'syz.5.2063': attribute type 4 has an invalid length. [ 121.898330][ T3471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.921859][ T9309] team0 (unregistering): Port device team_slave_0 removed [ 121.930366][ T9309] team0 (unregistering): Port device team_slave_1 removed [ 121.946735][ T9304] bridge2: port 1(ip6gretap1) entered blocking state [ 121.953523][ T9304] bridge2: port 1(ip6gretap1) entered disabled state [ 121.960958][ T9304] ip6gretap1: entered allmulticast mode [ 121.967414][ T9304] ip6gretap1: entered promiscuous mode [ 121.984817][ T9304] veth5: entered promiscuous mode [ 121.990400][ T9304] bridge2: port 2(veth5) entered blocking state [ 121.996737][ T9304] bridge2: port 2(veth5) entered disabled state [ 122.023684][ T9304] veth5: entered allmulticast mode [ 122.023741][ T9316] atomic_op ffff88811d46f528 conn xmit_atomic 0000000000000000 [ 122.043202][ T9315] bridge_slave_0: left allmulticast mode [ 122.048929][ T9315] bridge_slave_0: left promiscuous mode [ 122.054626][ T9315] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.086057][ T9315] bridge_slave_1: left allmulticast mode [ 122.091827][ T9315] bridge_slave_1: left promiscuous mode [ 122.097572][ T9315] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.116139][ T9315] bond0: (slave bond_slave_0): Releasing backup interface [ 122.128848][ T9315] bond_slave_0: left promiscuous mode [ 122.135180][ T9315] bond0: (slave bond_slave_1): Releasing backup interface [ 122.144298][ T9315] bond_slave_1: left promiscuous mode [ 122.151145][ T5194] lo speed is unknown, defaulting to 1000 [ 122.243679][ T9334] loop2: detected capacity change from 0 to 1024 [ 122.280556][ T9334] EXT4-fs: Ignoring removed orlov option [ 122.286393][ T9334] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.347090][ T9334] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 122.366903][ T9334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.401758][ T9354] sit0: entered allmulticast mode [ 122.436384][ T9334] System zones: 0-1, 3-12 [ 122.449429][ T9354] sit0: entered promiscuous mode [ 122.465214][ T9334] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 122.501451][ T9360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9360 comm=syz.1.2086 [ 122.552284][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.773405][ T9393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.780719][ T9391] lo speed is unknown, defaulting to 1000 [ 122.781791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.824508][ T9392] loop2: detected capacity change from 0 to 8192 [ 122.899070][ T9399] loop6: detected capacity change from 0 to 1024 [ 122.905969][ T9399] EXT4-fs: Ignoring removed oldalloc option [ 122.912259][ T9399] EXT4-fs: Ignoring removed orlov option [ 122.919294][ T9399] EXT4-fs (loop6): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 122.938265][ T3389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.089919][ T9399] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.189237][ T9399] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 123.243300][ T9399] EXT4-fs (loop6): Remounting filesystem read-only [ 123.267436][ T7178] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.415681][ T9420] __nla_validate_parse: 9 callbacks suppressed [ 123.415700][ T9420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2106'. [ 123.478116][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2106'. [ 123.567831][ T9422] syzkaller0: create flow: hash 1012724470 index 0 [ 123.619720][ T9422] syzkaller0 (unregistered): delete flow: hash 1012724470 index 0 [ 123.629414][ T9424] bridge0: port 4(bond0) entered blocking state [ 123.636391][ T9424] bridge0: port 4(bond0) entered disabled state [ 123.649262][ T9424] bond0: entered allmulticast mode [ 123.654845][ T9424] bond_slave_0: entered allmulticast mode [ 123.661257][ T9424] bond_slave_1: entered allmulticast mode [ 123.677299][ T9424] bridge0: port 4(bond0) entered blocking state [ 123.683776][ T9424] bridge0: port 4(bond0) entered forwarding state [ 123.731654][ T9432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.774559][ T9436] loop6: detected capacity change from 0 to 512 [ 123.784714][ T9436] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.795281][ T9440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2115'. [ 123.833046][ T9438] lo speed is unknown, defaulting to 1000 [ 123.881586][ T9446] loop2: detected capacity change from 0 to 2048 [ 123.900937][ T9446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.914635][ T9443] loop6: detected capacity change from 0 to 8192 [ 124.155558][ T9452] syzkaller0: create flow: hash 91775264 index 0 [ 124.185773][ T9458] bridge0: port 4($H) entered blocking state [ 124.192467][ T9458] bridge0: port 4($H) entered disabled state [ 124.199409][ T9458] $H: entered allmulticast mode [ 124.205010][ T9458] bond_slave_0: entered allmulticast mode [ 124.211199][ T9458] bond_slave_1: entered allmulticast mode [ 124.227874][ T9452] syzkaller0 (unregistered): delete flow: hash 91775264 index 0 [ 124.304302][ T9464] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2128'. [ 124.313886][ T9464] netlink: 'syz.0.2128': attribute type 9 has an invalid length. [ 124.321724][ T9464] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2128'. [ 124.330831][ T9464] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2128'. [ 124.362181][ T4567] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.430748][ T9469] geneve0: entered allmulticast mode [ 124.449614][ T4567] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.500162][ T4567] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.560664][ T9470] lo speed is unknown, defaulting to 1000 [ 124.619383][ T4567] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.633413][ T9470] chnl_net:caif_netlink_parms(): no params data found [ 124.674046][ T9470] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.681310][ T9470] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.688659][ T9470] bridge_slave_0: entered allmulticast mode [ 124.702295][ T9470] bridge_slave_0: entered promiscuous mode [ 124.714914][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.729859][ T9470] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.736996][ T9470] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.748083][ T9470] bridge_slave_1: entered allmulticast mode [ 124.755089][ T9470] bridge_slave_1: entered promiscuous mode [ 124.794165][ T9470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.803922][ T9489] lo speed is unknown, defaulting to 1000 [ 124.829843][ T4567] bond0: left allmulticast mode [ 124.834766][ T4567] bond_slave_0: left allmulticast mode [ 124.840409][ T4567] bond_slave_1: left allmulticast mode [ 124.846093][ T4567] bridge0: port 4(bond0) entered disabled state [ 124.883189][ T4567] gretap0: left allmulticast mode [ 124.888310][ T4567] gretap0: left promiscuous mode [ 124.893399][ T4567] bridge0: port 3(gretap0) entered disabled state [ 124.915500][ T4567] dummy0: left allmulticast mode [ 124.920990][ T4567] bridge0: port 1(dummy0) entered disabled state [ 124.928143][ T4567] bridge_slave_1: left allmulticast mode [ 124.933843][ T4567] bridge_slave_1: left promiscuous mode [ 124.939645][ T4567] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.059887][ T4567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.068847][ T4567] bond_slave_0: left promiscuous mode [ 125.075282][ T4567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.084224][ T4567] bond_slave_1: left promiscuous mode [ 125.090706][ T4567] bond0 (unregistering): Released all slaves [ 125.103038][ T9470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.139163][ T4567] tipc: Disabling bearer [ 125.144506][ T4567] tipc: Left network mode [ 125.144761][ T4561] syzkaller0: tun_net_xmit 76 [ 125.153641][ T4561] syzkaller0: tun_net_xmit 48 [ 125.158030][ T9500] syzkaller0: create flow: hash 91775264 index 0 [ 125.168042][ T5180] syzkaller0: tun_net_xmit 76 [ 125.172813][ T4567] hsr_slave_0: left promiscuous mode [ 125.178691][ T4567] hsr_slave_1: left promiscuous mode [ 125.186841][ T4567] veth1_vlan: left promiscuous mode [ 125.192242][ T4567] veth0_vlan: left promiscuous mode [ 125.243986][ T4567] team0 (unregistering): Port device team_slave_1 removed [ 125.254313][ T4567] team0 (unregistering): Port device team_slave_0 removed [ 125.282928][ T9470] team0: Port device team_slave_0 added [ 125.304545][ T9470] team0: Port device team_slave_1 added [ 125.328735][ T9470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.335736][ T9470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.361807][ T9470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.373305][ T9470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.378059][ T9500] syzkaller0 (unregistered): delete flow: hash 91775264 index 0 [ 125.380273][ T9470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.414007][ T9470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.429269][ T9511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2138'. [ 125.465273][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2138'. [ 125.492982][ T9470] hsr_slave_0: entered promiscuous mode [ 125.499430][ T9470] hsr_slave_1: entered promiscuous mode [ 125.505297][ T9470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.513133][ T9470] Cannot create hsr debugfs directory [ 125.542399][ T9519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2144'. [ 125.562078][ T9520] tipc: Started in network mode [ 125.567058][ T9520] tipc: Node identity 16ca37c309a1, cluster identity 4711 [ 125.574376][ T9520] tipc: Enabled bearer , priority 0 [ 125.594557][ T9519] bridge1: port 1(ip6gretap1) entered blocking state [ 125.601543][ T9519] bridge1: port 1(ip6gretap1) entered disabled state [ 125.608540][ T9519] ip6gretap1: entered allmulticast mode [ 125.614576][ T9519] ip6gretap1: entered promiscuous mode [ 125.621454][ T9512] tipc: Resetting bearer [ 125.645724][ T9512] tipc: Disabling bearer [ 125.663056][ T9522] veth3: entered promiscuous mode [ 125.668792][ T9522] bridge1: port 2(veth3) entered blocking state [ 125.675202][ T9522] bridge1: port 2(veth3) entered disabled state [ 125.687039][ T9522] veth3: entered allmulticast mode [ 125.801880][ T9537] loop2: detected capacity change from 0 to 1024 [ 125.834610][ T9470] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 125.842366][ T9537] EXT4-fs: Ignoring removed bh option [ 125.847906][ T9537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.858083][ T9470] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 125.867697][ T9470] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 125.880958][ T9470] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 125.892288][ T9537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.081127][ T9470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.089430][ T9550] ================================================================== [ 126.093839][ T9470] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.097559][ T9550] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 126.113414][ T9550] [ 126.115771][ T9550] write to 0xffff8881071d5758 of 4 bytes by task 9537 on cpu 1: [ 126.119305][ T9470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.123417][ T9550] writeback_single_inode+0x14a/0x3e0 [ 126.123455][ T9550] sync_inode_metadata+0x5b/0x90 [ 126.123479][ T9550] generic_buffers_fsync_noflush+0xd9/0x120 [ 126.133908][ T9470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.139185][ T9550] ext4_sync_file+0x1ab/0x690 [ 126.139223][ T9550] vfs_fsync_range+0x10d/0x130 [ 126.139246][ T9550] ext4_buffered_write_iter+0x34f/0x3c0 [ 126.139277][ T9550] ext4_file_write_iter+0x383/0xf00 [ 126.139301][ T9550] iter_file_splice_write+0x5f2/0x970 [ 126.186077][ T9550] direct_splice_actor+0x156/0x2a0 [ 126.191248][ T9550] splice_direct_to_actor+0x312/0x680 [ 126.196670][ T9550] do_splice_direct+0xda/0x150 [ 126.201483][ T9550] do_sendfile+0x380/0x650 [ 126.205927][ T9550] __x64_sys_sendfile64+0x105/0x150 [ 126.211175][ T9550] x64_sys_call+0xb39/0x2fb0 [ 126.215803][ T9550] do_syscall_64+0xd2/0x200 [ 126.220331][ T9550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.226254][ T9550] [ 126.228607][ T9550] read to 0xffff8881071d5758 of 4 bytes by task 9550 on cpu 0: [ 126.236176][ T9550] generic_buffers_fsync_noflush+0x80/0x120 [ 126.242125][ T9550] ext4_sync_file+0x1ab/0x690 [ 126.246855][ T9550] vfs_fsync_range+0x10d/0x130 [ 126.251650][ T9550] ext4_buffered_write_iter+0x34f/0x3c0 [ 126.257237][ T9550] ext4_file_write_iter+0x383/0xf00 [ 126.262473][ T9550] iter_file_splice_write+0x5f2/0x970 [ 126.267901][ T9550] direct_splice_actor+0x156/0x2a0 [ 126.273060][ T9550] splice_direct_to_actor+0x312/0x680 [ 126.278474][ T9550] do_splice_direct+0xda/0x150 [ 126.283284][ T9550] do_sendfile+0x380/0x650 [ 126.287767][ T9550] __x64_sys_sendfile64+0x105/0x150 [ 126.293008][ T9550] x64_sys_call+0xb39/0x2fb0 [ 126.297634][ T9550] do_syscall_64+0xd2/0x200 [ 126.302252][ T9550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.308184][ T9550] [ 126.310562][ T9550] value changed: 0x00000038 -> 0x00000002 [ 126.316305][ T9550] [ 126.318660][ T9550] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 126.324949][ T9550] CPU: 0 UID: 0 PID: 9550 Comm: syz.2.2152 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 126.335670][ T9550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.345765][ T9550] ================================================================== [ 126.357863][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 126.357880][ T29] audit: type=1400 audit(1749463491.938:3396): avc: denied { write } for pid=3297 comm="syz-executor" path="pipe:[1724]" dev="pipefs" ino=1724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 126.470093][ T4567] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.477195][ T4567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.486106][ T4567] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.493304][ T4567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.725157][ T4357] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.769439][ T9538] syz.0.2153 (9538) used greatest stack depth: 5984 bytes left [ 126.790242][ T4357] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.849370][ T4357] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.917093][ T9550] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.927187][ T4357] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.012360][ T4357] $H: left allmulticast mode [ 127.017401][ T4357] bond_slave_0: left allmulticast mode [ 127.022981][ T4357] bond_slave_1: left allmulticast mode [ 127.028671][ T4357] bridge0: port 3($H) entered disabled state [ 127.035711][ T4357] bridge_slave_1: left allmulticast mode [ 127.041399][ T4357] bridge_slave_1: left promiscuous mode [ 127.047051][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.054881][ T4357] bridge_slave_0: left allmulticast mode [ 127.060572][ T4357] bridge_slave_0: left promiscuous mode [ 127.066252][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.191313][ T4357] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.200083][ T4357] bond_slave_0: left promiscuous mode [ 127.206491][ T4357] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.215567][ T4357] bond_slave_1: left promiscuous mode [ 127.221793][ T4357] $H (unregistering): Released all slaves [ 127.281604][ T4357] hsr_slave_0: left promiscuous mode [ 127.287442][ T4357] hsr_slave_1: left promiscuous mode [ 127.295230][ T4357] veth1_vlan: left promiscuous mode [ 127.300593][ T4357] veth0_vlan: left promiscuous mode [ 128.240943][ T4357] bridge_slave_1: left allmulticast mode [ 128.246614][ T4357] bridge_slave_1: left promiscuous mode [ 128.252484][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.260757][ T4357] bridge_slave_0: left allmulticast mode [ 128.266508][ T4357] bridge_slave_0: left promiscuous mode [ 128.272262][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.349912][ T4357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.359708][ T4357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.369080][ T4357] bond0 (unregistering): Released all slaves [ 128.411419][ T4357] hsr_slave_0: left promiscuous mode [ 128.417001][ T4357] hsr_slave_1: left promiscuous mode [ 128.422602][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.430350][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.473326][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 128.482800][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 129.099267][ T4561] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.148911][ T4561] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.209065][ T4561] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.268981][ T4561] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.321556][ T4561] veth3: left allmulticast mode [ 129.326593][ T4561] bridge1: port 2(veth3) entered disabled state [ 129.333639][ T4561] ip6gretap1: left allmulticast mode [ 129.339020][ T4561] ip6gretap1: left promiscuous mode [ 129.344364][ T4561] bridge1: port 1(ip6gretap1) entered disabled state [ 129.446900][ T4561] bond0 (unregistering): Released all slaves [ 129.489178][ T4561] tipc: Left network mode [ 129.496029][ T4561] hsr_slave_0: left promiscuous mode [ 129.501704][ T4561] hsr_slave_1: left promiscuous mode [ 129.554333][ T5184] lo speed is unknown, defaulting to 1000 [ 129.560255][ T5184] infiniband syz0: ib_query_port failed (-19)