last executing test programs: 2m21.409658271s ago: executing program 3 (id=379): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 2m21.285204843s ago: executing program 3 (id=381): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4) io_setup(0x2007, &(0x7f0000000980)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) ppoll(&(0x7f00000003c0)=[{r2, 0x81}, {r0, 0x1028}], 0x2, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 2m21.141035776s ago: executing program 3 (id=387): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000) close_range(r1, 0xffffffffffffffff, 0x0) 2m21.063893767s ago: executing program 3 (id=390): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nouid32}]}, 0x1, 0x461, &(0x7f0000000540)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) 2m20.821043082s ago: executing program 3 (id=401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2004ce, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x464, &(0x7f0000000400)="$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") setresuid(0xee01, 0xee00, 0x0) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f0000000180)) 2m20.462176998s ago: executing program 3 (id=420): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x20, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x213d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x40034f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m20.420357249s ago: executing program 32 (id=420): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x20, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x213d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x40034f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m52.102677063s ago: executing program 1 (id=1245): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x3062, &(0x7f00000006c0)={0x0, 0x2b04, 0x3180, 0x2, 0x14e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1m52.008537505s ago: executing program 1 (id=1250): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000080), &(0x7f0000000680)}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m51.936040947s ago: executing program 1 (id=1254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) 1m51.934961706s ago: executing program 1 (id=1258): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m51.862725048s ago: executing program 1 (id=1260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1m50.370015584s ago: executing program 1 (id=1352): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @local}, 0x14) 1m50.361223404s ago: executing program 33 (id=1352): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @local}, 0x14) 1m46.638502201s ago: executing program 4 (id=1444): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 1m46.596445521s ago: executing program 4 (id=1449): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r3, 0x0, 0x2000}, 0x18) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 1m46.565847832s ago: executing program 4 (id=1451): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m46.369376526s ago: executing program 4 (id=1461): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m46.208120548s ago: executing program 4 (id=1463): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1m46.041586791s ago: executing program 4 (id=1466): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x90) 1m46.041385101s ago: executing program 34 (id=1466): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x90) 22.521368609s ago: executing program 0 (id=4394): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x2000000}) 22.504090119s ago: executing program 0 (id=4384): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000400)='ns\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 22.47112442s ago: executing program 0 (id=4385): r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0xfd}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 22.46662378s ago: executing program 0 (id=4388): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='./file0\x00') 22.392144061s ago: executing program 0 (id=4390): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r3, 0x30b, 0x70bd24, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) 22.062898407s ago: executing program 0 (id=4402): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = dup(r0) sendto$inet6(r0, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$unix(r3, &(0x7f0000000280)=@file={0x0, './bus\x00'}, 0x6e) 22.039347468s ago: executing program 35 (id=4402): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = dup(r0) sendto$inet6(r0, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$unix(r3, &(0x7f0000000280)=@file={0x0, './bus\x00'}, 0x6e) 3.497745768s ago: executing program 8 (id=5178): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma']) 3.497364798s ago: executing program 8 (id=5179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) 3.345192091s ago: executing program 8 (id=5193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xfff1}, {0x7, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3.214705383s ago: executing program 8 (id=5196): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) unlinkat(0xffffffffffffff9c, 0x0, 0x200) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) 3.070383166s ago: executing program 8 (id=5192): socket(0x25, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x80882, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40000333}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffff9, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.845904259s ago: executing program 8 (id=5200): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x2, 0x3bd}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) listen(r1, 0x4) close_range(r0, r1, 0x0) 2.845398639s ago: executing program 36 (id=5200): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x2, 0x3bd}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) listen(r1, 0x4) close_range(r0, r1, 0x0) 1.613804161s ago: executing program 9 (id=5202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x10, 0x7}, {0x10}, {0xffff, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x200000d0}, 0x200401c0) 1.608392242s ago: executing program 5 (id=5247): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) 1.542590543s ago: executing program 9 (id=5236): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffe00}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r2, 0x400, 0x1) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\xc0\x00\xc0\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 1.534261813s ago: executing program 5 (id=5238): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 1.476678574s ago: executing program 5 (id=5243): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) 1.431038314s ago: executing program 5 (id=5250): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 1.413921985s ago: executing program 5 (id=5251): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mq_unlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.356569066s ago: executing program 5 (id=5256): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x48, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) 1.096502921s ago: executing program 2 (id=5267): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1.039034642s ago: executing program 2 (id=5270): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xcb83, 0x0, 0x2, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x3d) 946.340023ms ago: executing program 2 (id=5272): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x218a, &(0x7f0000000240)={0x0, 0x3ffffffc, 0x800, 0x2, 0x221}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 765.327407ms ago: executing program 7 (id=5277): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40020) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xffff}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 551.33282ms ago: executing program 7 (id=5278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r2 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r2, 0x0, 0x400000000000000, 0x2) 541.14087ms ago: executing program 9 (id=5279): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x80010000}, 0x18) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0xc05c5340, &(0x7f0000000040)) tkill(r1, 0x7) 539.8206ms ago: executing program 6 (id=5280): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r1, &(0x7f0000000780)={'#! ', './file0'}, 0xb) 524.309691ms ago: executing program 7 (id=5281): mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb\xb8r~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x90\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8M$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xe1(\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xd5j*\xad\x18I\xcc\xe9\xaa{]\xef\xfb\xff\xff\xff\xff\xff\xff\xfft\xd0s\xc4\x04\xe0\xa1\xd2@\x06\xc2`H\xf7\xcc\xe3\xa0\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x00', 0x42, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0x8}, 0x4e58, 0x5, 0x0, 0x4, 0x87, 0x9, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r1, 0x0, 0x46) close(r1) 471.151152ms ago: executing program 6 (id=5282): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) 470.071582ms ago: executing program 6 (id=5283): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xcb83, 0x0, 0x2, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x3d) 338.906524ms ago: executing program 6 (id=5284): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 332.017264ms ago: executing program 6 (id=5285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)=""/4073, 0x100e) 241.700826ms ago: executing program 6 (id=5286): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='sched_switch\x00', r0}, 0x18) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f00000001c0)=0x8) 199.893017ms ago: executing program 9 (id=5287): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 161.777208ms ago: executing program 7 (id=5288): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000ec0)=ANY=[], 0xf0}}], 0x1, 0x24004c41) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0x4, 0xffb, 0x7, 0xb69, 0xc1, 0x8, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x1, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0xffffffff, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0xa, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0xf, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x9, 0x4, 0x1, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 131.264608ms ago: executing program 7 (id=5289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) semget$private(0x0, 0x0, 0x218) setgroups(0x0, 0x0) 109.168238ms ago: executing program 9 (id=5290): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffe00}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r2, 0x400, 0x1) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\xc0\x00\xc0\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 102.938908ms ago: executing program 7 (id=5291): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000040), 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x8, 0x300) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 74.882999ms ago: executing program 2 (id=5292): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 55.665749ms ago: executing program 2 (id=5293): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0xc8180, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x36) fcntl$notify(r0, 0x402, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000240)='freezer.state\x00', 0x275a, 0x0) 0s ago: executing program 2 (id=5294): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}}, 0x0) kernel console output (not intermixed with test programs): h. [ 112.512036][ T9915] vlan3: entered allmulticast mode [ 112.517225][ T9915] bridge_slave_0: entered allmulticast mode [ 112.681963][ T9946] syz_tun: entered allmulticast mode [ 112.687892][ T9946] syz_tun: left allmulticast mode [ 112.687906][ T9949] netlink: 'syz.6.2609': attribute type 10 has an invalid length. [ 112.705279][ T9949] batman_adv: batadv0: Adding interface: macsec0 [ 112.711703][ T9949] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.737156][ T9949] batman_adv: batadv0: Not using interface macsec0 (retrying later): interface not active [ 112.760616][ T9954] vlan3: entered allmulticast mode [ 112.765783][ T9954] bridge_slave_0: entered allmulticast mode [ 112.793260][ T9960] netlink: 'syz.6.2614': attribute type 10 has an invalid length. [ 112.801790][ T9960] team0: Device hsr_slave_0 failed to register rx_handler [ 112.926929][ T3413] kernel read not supported for file /vga_arbiter (pid: 3413 comm: kworker/0:5) [ 113.001963][ T9997] vlan2: entered allmulticast mode [ 113.523763][T10046] vlan3: entered allmulticast mode [ 113.552139][T10043] netlink: 'syz.2.2663': attribute type 4 has an invalid length. [ 114.001536][T10095] loop2: detected capacity change from 0 to 764 [ 114.119875][T10090] __nla_validate_parse: 18 callbacks suppressed [ 114.119891][T10090] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2676'. [ 114.135858][T10090] netlink: 'syz.6.2676': attribute type 13 has an invalid length. [ 114.143858][T10090] netlink: 'syz.6.2676': attribute type 17 has an invalid length. [ 114.145609][T10117] loop2: detected capacity change from 0 to 1024 [ 114.156299][T10090] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 114.187035][T10117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.204874][T10117] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.2688: Allocating blocks 385-513 which overlap fs metadata [ 114.225771][T10117] EXT4-fs (loop2): pa ffff888106adf4d0: logic 16, phys. 129, len 24 [ 114.233956][T10117] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 114.315844][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.027570][ T3407] kernel read not supported for file /vga_arbiter (pid: 3407 comm: kworker/1:4) [ 115.142447][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 115.142463][ T29] audit: type=1326 audit(1753362931.497:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.5.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40abace9a9 code=0x7ffc0000 [ 115.176213][ T29] audit: type=1326 audit(1753362931.497:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.5.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40abacd310 code=0x7ffc0000 [ 115.199816][ T29] audit: type=1400 audit(1753362931.497:3482): avc: denied { read } for pid=10186 comm="syz.5.2718" name="usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 115.223296][ T29] audit: type=1400 audit(1753362931.497:3483): avc: denied { open } for pid=10186 comm="syz.5.2718" path="/dev/usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 115.247258][ T29] audit: type=1326 audit(1753362931.497:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.5.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40abace9a9 code=0x7ffc0000 [ 115.270793][ T29] audit: type=1326 audit(1753362931.497:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.5.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f40abace9a9 code=0x7ffc0000 [ 115.294226][ T29] audit: type=1326 audit(1753362931.497:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.5.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40abace9a9 code=0x7ffc0000 [ 115.317791][ T29] audit: type=1326 audit(1753362931.497:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.5.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f40abace9a9 code=0x7ffc0000 [ 115.341274][ T29] audit: type=1326 audit(1753362931.497:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.5.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40abace9a9 code=0x7ffc0000 [ 115.364774][ T29] audit: type=1326 audit(1753362931.497:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.5.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40abace9a9 code=0x7ffc0000 [ 115.520363][T10211] netlink: 'syz.7.2728': attribute type 10 has an invalid length. [ 115.531801][ T3391] kernel read not supported for file /vga_arbiter (pid: 3391 comm: kworker/1:3) [ 115.541408][T10211] batman_adv: batadv0: Adding interface: macsec0 [ 115.547912][T10211] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.573317][T10211] batman_adv: batadv0: Not using interface macsec0 (retrying later): interface not active [ 116.077177][T10259] loop2: detected capacity change from 0 to 512 [ 116.089644][T10259] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.096284][T10259] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.128386][T10259] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 116.148888][T10259] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002] [ 116.165812][T10259] System zones: 1-12 [ 116.176032][T10259] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.2750: corrupted in-inode xattr: e_value size too large [ 116.200049][T10259] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.2750: couldn't read orphan inode 15 (err -117) [ 116.229689][T10259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.382552][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.637737][T10282] netlink: 'syz.7.2761': attribute type 5 has an invalid length. [ 116.645625][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2761'. [ 116.693129][T10288] netlink: 'syz.5.2764': attribute type 10 has an invalid length. [ 116.701085][T10288] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2764'. [ 116.727370][T10288] dummy0: entered promiscuous mode [ 116.789753][T10288] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 116.852509][T10297] loop2: detected capacity change from 0 to 512 [ 116.878698][T10297] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 116.909102][T10297] System zones: 0-2, 18-18, 34-34 [ 116.914412][T10297] EXT4-fs (loop2): orphan cleanup on readonly fs [ 116.965189][T10297] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.2768: bad orphan inode 13 [ 116.989256][T10297] ext4_test_bit(bit=12, block=18) = 1 [ 116.994743][T10297] is_bad_inode(inode)=0 [ 116.998962][T10297] NEXT_ORPHAN(inode)=2130706432 [ 117.003808][T10297] max_ino=32 [ 117.007079][T10297] i_nlink=1 [ 117.012454][T10297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.038383][T10297] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 117.062234][T10297] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 117.091569][T10297] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 117.124814][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.147969][T10314] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2775'. [ 117.160451][T10314] netlink: 'syz.7.2775': attribute type 13 has an invalid length. [ 117.168295][T10314] netlink: 'syz.7.2775': attribute type 17 has an invalid length. [ 117.191965][T10314] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 117.213062][T10330] netlink: 'syz.2.2781': attribute type 1 has an invalid length. [ 117.228548][T10332] netlink: 1092 bytes leftover after parsing attributes in process `syz.6.2785'. [ 117.243627][T10334] Cannot find del_set index 4 as target [ 117.309829][T10337] vhci_hcd: invalid port number 11 [ 117.315020][T10337] vhci_hcd: default hub control req: 6031 v0000 i000b l2 [ 117.520085][T10379] x_tables: duplicate underflow at hook 3 [ 117.596653][T10392] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10392 comm=syz.7.2811 [ 117.609328][T10392] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10392 comm=syz.7.2811 [ 117.641967][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2814'. [ 117.707438][T10413] loop7: detected capacity change from 0 to 128 [ 117.714115][T10413] EXT4-fs: Ignoring removed nobh option [ 117.721160][T10413] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.733546][T10413] ext4 filesystem being mounted at /246/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.767141][T10420] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.775410][T10420] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.783610][T10420] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.791799][T10420] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.800172][T10420] geneve3: entered promiscuous mode [ 117.800920][ T7244] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.888327][T10434] netlink: 'syz.5.2829': attribute type 4 has an invalid length. [ 117.914269][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2831'. [ 117.923295][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2831'. [ 118.009608][ C1] sd 0:0:1:0: [sda] tag#3602 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 118.020044][ C1] sd 0:0:1:0: [sda] tag#3602 CDB: Read(6) 08 00 00 00 00 00 [ 118.205133][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.213095][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.220944][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.228724][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.236624][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.244453][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.252285][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.260215][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.268032][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.275876][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.283676][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.291620][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.299390][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.307301][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.315057][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.322866][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.330639][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.338442][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.346242][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.353989][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.361810][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.369637][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.377570][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.385415][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.393293][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.401065][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.405161][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2857'. [ 118.409130][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.425820][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.433713][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.441529][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.449306][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.457056][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.464942][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.472730][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.480591][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.488436][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.496170][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.503904][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.511729][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.519540][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.527267][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.535013][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.542768][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 118.553430][ T3391] hid-generic 0000:007F:FFFFFFFE.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 118.555869][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.570954][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.579595][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.587016][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.594451][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.601955][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.609447][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.616907][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.624373][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.627503][T10502] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2860'. [ 118.631784][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.648112][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.655583][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.675923][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.683529][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.690966][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.698372][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.705787][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.713206][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.720795][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.728265][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.735688][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.743179][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.750631][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.758031][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.765472][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.772921][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.780406][ T3398] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.799409][ T3398] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 118.929248][T10539] serio: Serial port ttyS3 [ 118.965236][T10545] rdma_op ffff888102311980 conn xmit_rdma 0000000000000000 [ 119.176931][T10592] loop2: detected capacity change from 0 to 512 [ 119.190363][T10592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.204802][T10592] ext4 filesystem being mounted at /546/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.217946][T10592] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.2899: corrupted inode contents [ 119.239595][T10592] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.2899: mark_inode_dirty error [ 119.259982][T10592] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.2899: corrupted inode contents [ 119.288114][T10592] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.2899: mark_inode_dirty error [ 119.364259][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.439224][T10618] 9pnet: Could not find request transport: r [ 119.481523][T10625] ref_ctr_offset mismatch. inode: 0x627 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 119.706542][T10651] loop7: detected capacity change from 0 to 1024 [ 119.719168][T10651] EXT4-fs: Ignoring removed i_version option [ 119.735781][T10651] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 119.760105][T10651] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2924: Invalid block bitmap block 0 in block_group 0 [ 119.784687][T10651] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2924: Failed to acquire dquot type 0 [ 119.831206][T10651] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.2924: Freeing blocks not in datazone - block = 0, count = 4096 [ 119.859353][T10651] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.2924: Invalid inode bitmap blk 0 in block_group 0 [ 119.872998][T10651] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 119.883053][T10651] EXT4-fs (loop7): 1 orphan inode deleted [ 119.885376][ T4137] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:48: Failed to release dquot type 0 [ 119.889254][T10651] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.937263][T10651] syz.7.2924 (10651) used greatest stack depth: 9512 bytes left [ 119.949406][ T7244] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.965842][ T4128] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:41: Failed to release dquot type 0 [ 120.066431][T10678] pim6reg: entered allmulticast mode [ 120.082951][T10678] pim6reg: left allmulticast mode [ 120.096274][T10687] __nla_validate_parse: 3 callbacks suppressed [ 120.096289][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2938'. [ 120.112181][T10689] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2940'. [ 120.144123][T10693] bridge0: entered promiscuous mode [ 120.159417][T10693] bridge0: port 3(macsec1) entered blocking state [ 120.165898][T10693] bridge0: port 3(macsec1) entered disabled state [ 120.172610][T10693] macsec1: entered allmulticast mode [ 120.177926][T10693] bridge0: entered allmulticast mode [ 120.190621][T10693] macsec1: left allmulticast mode [ 120.195837][T10693] bridge0: left allmulticast mode [ 120.202709][T10693] bridge0: left promiscuous mode [ 120.208357][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 120.208381][ T29] audit: type=1400 audit(1753362936.557:3643): avc: denied { cpu } for pid=10697 comm="syz.6.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 120.241036][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2945'. [ 120.282791][ T29] audit: type=1400 audit(1753362936.637:3644): avc: denied { create } for pid=10703 comm="syz.2.2948" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 120.303720][ T29] audit: type=1400 audit(1753362936.637:3645): avc: denied { write } for pid=10703 comm="syz.2.2948" name="file0" dev="tmpfs" ino=2904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 120.333224][T10710] netlink: 'syz.0.2949': attribute type 1 has an invalid length. [ 120.366678][ T29] audit: type=1400 audit(1753362936.657:3646): avc: denied { unlink } for pid=3310 comm="syz-executor" name="file0" dev="tmpfs" ino=2904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 120.474305][ T29] audit: type=1400 audit(1753362936.817:3647): avc: denied { write } for pid=10723 comm="syz.5.2955" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 120.515119][T10727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.524932][T10727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.554940][T10729] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2958'. [ 120.581984][T10729] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.590296][T10729] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.598535][T10729] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.606925][T10729] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.637327][T10729] geneve2: entered promiscuous mode [ 120.662086][ T29] audit: type=1400 audit(1753362937.017:3648): avc: denied { setattr } for pid=10739 comm="syz.2.2963" name="RAWv6" dev="sockfs" ino=30336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.787750][ T29] audit: type=1400 audit(1753362937.137:3649): avc: denied { write } for pid=10752 comm="syz.2.2969" path="socket:[30369]" dev="sockfs" ino=30369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.843106][T10758] ref_ctr_offset mismatch. inode: 0xb86 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 120.849850][ T29] audit: type=1326 audit(1753362937.177:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.7.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6edfe9a9 code=0x7ffc0000 [ 120.877681][ T29] audit: type=1326 audit(1753362937.177:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.7.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6edfe9a9 code=0x7ffc0000 [ 120.901163][ T29] audit: type=1326 audit(1753362937.177:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.7.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f6a6edfe9a9 code=0x7ffc0000 [ 120.979467][T10759] syzkaller1: entered promiscuous mode [ 120.985106][T10759] syzkaller1: entered allmulticast mode [ 120.991193][T10765] netlink: 'syz.2.2973': attribute type 1 has an invalid length. [ 121.207753][T10795] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 121.234359][T10795] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 121.589380][T10865] Cannot find del_set index 0 as target [ 121.674861][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3018'. [ 121.685015][T10872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.714031][T10877] ref_ctr increment failed for inode: 0xbc3 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881044e2c00 [ 121.725402][T10876] uprobe: syz.5.3020:10876 failed to unregister, leaking uprobe [ 121.867588][T10889] ref_ctr_offset mismatch. inode: 0xbca offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 122.113890][T10915] capability: warning: `syz.6.3036' uses deprecated v2 capabilities in a way that may be insecure [ 122.560040][T10956] pimreg: entered allmulticast mode [ 122.567034][T10956] pimreg: left allmulticast mode [ 122.871937][T10980] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3076'. [ 122.896166][T10980] IPVS: Error joining to the multicast group [ 122.953847][T10988] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3070'. [ 122.970318][T10990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.978846][T10990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.068102][T10994] xt_TPROXY: Can be used only with -p tcp or -p udp [ 123.198061][T11002] : renamed from bond0 (while UP) [ 123.380314][T11019] netlink: 'syz.7.3085': attribute type 10 has an invalid length. [ 123.388223][T11019] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3085'. [ 123.397443][T11019] dummy0: entered promiscuous mode [ 123.403038][T11019] bridge0: port 3(dummy0) entered blocking state [ 123.409420][T11019] bridge0: port 3(dummy0) entered disabled state [ 123.415988][T11019] dummy0: entered allmulticast mode [ 123.423049][T11019] bridge0: port 3(dummy0) entered blocking state [ 123.429456][T11019] bridge0: port 3(dummy0) entered forwarding state [ 123.866677][T10983] syz.6.3068 (10983) used greatest stack depth: 7160 bytes left [ 124.503471][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3110'. [ 124.512538][T11090] netlink: 'syz.5.3110': attribute type 15 has an invalid length. [ 124.520394][T11090] netlink: 'syz.5.3110': attribute type 18 has an invalid length. [ 124.619735][T11097] loop7: detected capacity change from 0 to 1024 [ 124.632090][T11097] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.677799][ T7244] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.787143][T11107] loop7: detected capacity change from 0 to 512 [ 124.803710][T11107] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.823989][T11107] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.854270][T11107] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3120: corrupted inode contents [ 124.878768][T11107] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.3120: mark_inode_dirty error [ 124.891541][T11107] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3120: corrupted inode contents [ 124.922830][T11107] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.3120: mark_inode_dirty error [ 124.975984][ T7244] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.009751][ C1] sd 0:0:1:0: [sda] tag#3608 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 125.020143][ C1] sd 0:0:1:0: [sda] tag#3608 CDB: Read(6) 08 00 00 00 00 00 [ 125.291610][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 125.291624][ T29] audit: type=1326 audit(1753362955.648:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.6.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad779e9a9 code=0x7fc00000 [ 125.339524][ T29] audit: type=1400 audit(1753362955.698:3744): avc: denied { unmount } for pid=7244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 125.363438][T11153] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3136'. [ 125.408177][ T29] audit: type=1400 audit(1753362955.758:3745): avc: denied { module_load } for pid=11160 comm="syz.5.3140" path="/sys/power/wakeup_count" dev="sysfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 125.433548][T11164] netlink: 'syz.7.3143': attribute type 4 has an invalid length. [ 125.441639][ C1] sd 0:0:1:0: [sda] tag#3609 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 125.452022][ C1] sd 0:0:1:0: [sda] tag#3609 CDB: Read(6) 08 00 00 00 00 00 [ 125.478778][T11168] loop7: detected capacity change from 0 to 1024 [ 125.486153][T11168] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 125.497299][T11168] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 125.509993][T11168] JBD2: no valid journal superblock found [ 125.515759][T11168] EXT4-fs (loop7): Could not load journal inode [ 125.528896][T11168] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11168 comm=syz.7.3147 [ 125.541566][T11168] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11168 comm=syz.7.3147 [ 125.848321][T11192] loop7: detected capacity change from 0 to 2048 [ 125.876369][T11192] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.900015][T11192] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.3158: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 125.944891][T11192] EXT4-fs (loop7): Remounting filesystem read-only [ 125.982548][ T7244] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.079047][T11218] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3168'. [ 126.115099][ T29] audit: type=1326 audit(1753362956.468:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11222 comm="syz.0.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1a8ce9a9 code=0x7ffc0000 [ 126.138693][ T29] audit: type=1326 audit(1753362956.468:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11222 comm="syz.0.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1a8ce9a9 code=0x7ffc0000 [ 126.192619][ T29] audit: type=1326 audit(1753362956.518:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11222 comm="syz.0.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f6b1a8ce9a9 code=0x7ffc0000 [ 126.216276][ T29] audit: type=1326 audit(1753362956.518:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11222 comm="syz.0.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1a8ce9a9 code=0x7ffc0000 [ 126.239853][ T29] audit: type=1326 audit(1753362956.518:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11222 comm="syz.0.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1a8ce9a9 code=0x7ffc0000 [ 126.263552][ T29] audit: type=1326 audit(1753362956.538:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11230 comm="syz.2.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a132e9a9 code=0x7ffc0000 [ 126.287095][ T29] audit: type=1326 audit(1753362956.538:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11230 comm="syz.2.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a132e9a9 code=0x7ffc0000 [ 126.881236][T11304] pimreg: entered allmulticast mode [ 126.888257][T11304] pimreg: left allmulticast mode [ 126.976165][T11311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3208'. [ 127.050760][T11319] netlink: 'syz.2.3213': attribute type 4 has an invalid length. [ 127.328452][T11355] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11355 comm=syz.6.3228 [ 127.341159][T11355] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11355 comm=syz.6.3228 [ 127.586839][T11384] netlink: 'syz.7.3241': attribute type 1 has an invalid length. [ 127.936687][T11409] syz_tun: entered allmulticast mode [ 127.942703][T11409] syz_tun: left allmulticast mode [ 127.987820][T11415] netlink: 14528 bytes leftover after parsing attributes in process `syz.5.3256'. [ 128.058809][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3258'. [ 128.695723][T11467] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3274'. [ 129.328453][T11469] serio: Serial port ptm1 [ 129.405602][T11483] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11483 comm=syz.6.3282 [ 129.418264][T11483] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11483 comm=syz.6.3282 [ 129.466858][T11491] xt_TPROXY: Can be used only with -p tcp or -p udp [ 129.522340][T11502] netlink: 300 bytes leftover after parsing attributes in process `syz.6.3290'. [ 130.464460][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 130.464475][ T29] audit: type=1326 audit(1753362960.818:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11561 comm="syz.0.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1a8ce9a9 code=0x7ffc0000 [ 130.530525][ T29] audit: type=1326 audit(1753362960.848:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11561 comm="syz.0.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f6b1a8ce9a9 code=0x7ffc0000 [ 130.554200][ T29] audit: type=1326 audit(1753362960.848:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11561 comm="syz.0.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1a8ce9a9 code=0x7ffc0000 [ 130.577715][ T29] audit: type=1326 audit(1753362960.848:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11561 comm="syz.0.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f6b1a8ce9a9 code=0x7ffc0000 [ 130.583463][T11572] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3318'. [ 130.601251][ T29] audit: type=1326 audit(1753362960.848:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11561 comm="syz.0.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1a8ce9a9 code=0x7ffc0000 [ 130.601278][ T29] audit: type=1326 audit(1753362960.848:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11561 comm="syz.0.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f6b1a8ce9a9 code=0x7ffc0000 [ 130.601297][ T29] audit: type=1326 audit(1753362960.848:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11561 comm="syz.0.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1a8ce9a9 code=0x7ffc0000 [ 130.601316][ T29] audit: type=1326 audit(1753362960.848:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11561 comm="syz.0.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1a8ce9a9 code=0x7ffc0000 [ 130.849944][ T29] audit: type=1400 audit(1753362960.968:3821): avc: denied { listen } for pid=11571 comm="syz.0.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 130.869974][ T29] audit: type=1400 audit(1753362960.978:3822): avc: denied { accept } for pid=11571 comm="syz.0.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 130.871523][T11598] serio: Serial port ptm0 [ 130.959139][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3331'. [ 131.826801][T11713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11713 comm=syz.7.3349 [ 131.839533][T11713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11713 comm=syz.7.3349 [ 132.034209][T11739] loop7: detected capacity change from 0 to 1024 [ 132.057024][T11739] EXT4-fs: Ignoring removed bh option [ 132.071514][T11739] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.096952][T11739] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 132.164736][ T7244] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.354575][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3379'. [ 132.367979][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3379'. [ 132.386170][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3379'. [ 132.396809][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3379'. [ 132.410491][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3383'. [ 132.423940][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3379'. [ 132.428870][T11789] IPVS: Error joining to the multicast group [ 132.439215][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3379'. [ 132.451609][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3384'. [ 132.483887][T11801] loop7: detected capacity change from 0 to 1024 [ 132.493084][T11801] EXT4-fs: Ignoring removed oldalloc option [ 132.499235][T11801] EXT4-fs: Ignoring removed bh option [ 132.541708][T11801] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.877916][T11823] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.3386: Allocating blocks 1-17 which overlap fs metadata [ 132.899859][T11801] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.3386: Allocating blocks 1-17 which overlap fs metadata [ 132.966759][T11857] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 133.066045][T11865] 9pnet: p9_errstr2errno: server reported unknown error [ 133.074377][ T7244] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.122865][T11874] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11874 comm=syz.6.3412 [ 133.135457][T11874] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11874 comm=syz.6.3412 [ 133.971204][T11934] pimreg: entered allmulticast mode [ 133.986413][T11934] pimreg: left allmulticast mode [ 134.054760][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.070554][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.083196][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.096707][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.105691][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.114363][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.122497][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.130982][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.139002][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.155177][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.166161][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.173955][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.183248][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.190903][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.201428][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.209026][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.245638][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.259933][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.277054][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.288017][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.296469][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.305038][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.313120][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.326907][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.334608][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.350168][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.357892][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.366658][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.374365][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.382379][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.390185][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.397749][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.405389][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.413146][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.421299][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.444069][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.452921][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.460661][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.468341][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.477295][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.485073][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.492975][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.500586][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.528141][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.545566][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.554440][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.563018][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.571146][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.572856][T11981] bridge0: port 3(batadv1) entered blocking state [ 134.578997][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.586223][T11981] bridge0: port 3(batadv1) entered disabled state [ 134.593820][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.619295][T11981] batadv1: entered allmulticast mode [ 134.654381][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.654416][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.663109][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.670813][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.671423][T11981] batadv1: entered promiscuous mode [ 134.678405][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.692147][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.720302][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.728211][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.736513][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.746866][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.760715][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.773685][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.783518][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.796340][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.805180][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.817209][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.825817][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.835696][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.845122][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.863422][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 134.878802][T11944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 135.085951][ T4149] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 135.102775][ T4149] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 135.318240][T12019] pim6reg: entered allmulticast mode [ 135.326731][T12019] pim6reg: left allmulticast mode [ 135.398607][T12024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.419407][T12024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.510422][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 135.510437][ T29] audit: type=1107 audit(1753362965.868:3954): pid=12035 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 135.605815][ T29] audit: type=1326 audit(1753362965.948:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.5.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40abace9a9 code=0x7ffc0000 [ 135.629382][ T29] audit: type=1326 audit(1753362965.948:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.5.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f40abace9a9 code=0x7ffc0000 [ 135.652690][ T29] audit: type=1326 audit(1753362965.948:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.5.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40abace9a9 code=0x7ffc0000 [ 135.676516][ T29] audit: type=1326 audit(1753362965.948:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.5.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f40abace9a9 code=0x7ffc0000 [ 135.699906][ T29] audit: type=1326 audit(1753362965.948:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.5.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40abace9a9 code=0x7ffc0000 [ 135.723482][ T29] audit: type=1326 audit(1753362965.958:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.6.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad779e9a9 code=0x7ffc0000 [ 135.747033][ T29] audit: type=1326 audit(1753362965.958:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.6.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ad779e9a9 code=0x7ffc0000 [ 135.770656][ T29] audit: type=1326 audit(1753362965.958:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.6.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad779e9a9 code=0x7ffc0000 [ 135.794148][ T29] audit: type=1326 audit(1753362965.958:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.6.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad779e9a9 code=0x7ffc0000 [ 135.865815][T12064] netlink: 'syz.6.3501': attribute type 21 has an invalid length. [ 135.875440][T12064] netlink: 'syz.6.3501': attribute type 1 has an invalid length. [ 135.883402][T12064] __nla_validate_parse: 16 callbacks suppressed [ 135.883416][T12064] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3501'. [ 135.987064][T12067] macsec0: entered promiscuous mode [ 135.988734][T12068] loop7: detected capacity change from 0 to 1024 [ 135.999032][T12068] EXT4-fs: Ignoring removed orlov option [ 136.008744][T12068] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.085956][T12086] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12086 comm=syz.5.3500 [ 136.266673][T12111] netlink: 404 bytes leftover after parsing attributes in process `syz.2.3515'. [ 136.350927][T12120] vlan2: entered allmulticast mode [ 136.356155][T12120] dummy0: entered allmulticast mode [ 136.402695][ T7244] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.426347][T12129] 9pnet: p9_errstr2errno: server reported unknown error [ 136.647719][T12164] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3540'. [ 136.829697][T12181] vhci_hcd: default hub control req: 030e v0006 i0000 l0 [ 136.986551][T12224] only policy match revision 0 supported [ 136.986565][T12224] unable to load match [ 137.063372][T12243] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3575'. [ 137.250262][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.257790][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.265670][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.273106][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.280671][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.288291][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.295729][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.303261][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.310723][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.318119][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.325696][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.333294][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.350957][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.358420][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.366014][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.373566][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.381171][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.388623][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.396004][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.403461][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.410841][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.418217][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.425622][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.433015][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.440494][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.447900][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.455284][ T3407] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 137.463217][ T3407] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 137.586494][T12294] loop7: detected capacity change from 0 to 512 [ 137.600883][T12294] EXT4-fs (loop7): too many log groups per flexible block group [ 137.608622][T12294] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 137.617001][T12294] EXT4-fs (loop7): mount failed [ 137.726087][T12322] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3606'. [ 137.793000][T12332] loop7: detected capacity change from 0 to 512 [ 137.831076][T12332] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.844414][T12332] ext4 filesystem being mounted at /407/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.858032][T12332] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3612: corrupted inode contents [ 137.876325][T12332] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.3612: mark_inode_dirty error [ 137.901772][T12332] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3612: corrupted inode contents [ 137.931867][ T7244] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.105762][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3627'. [ 138.117546][T12374] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 138.403475][T12379] netlink: 'syz.0.3629': attribute type 13 has an invalid length. [ 138.426777][T12379] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.435238][T12379] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.443639][T12379] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.452109][T12379] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.687457][T12399] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3639'. [ 138.804245][T12419] SELinux: ebitmap: truncated map [ 138.814610][T12419] SELinux: failed to load policy [ 138.921128][T12438] netlink: 'syz.5.3656': attribute type 6 has an invalid length. [ 139.062414][T12448] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3661'. [ 139.207227][T12456] netlink: 'syz.2.3664': attribute type 83 has an invalid length. [ 139.362370][T12463] batadv_slave_1: entered promiscuous mode [ 139.385007][T12463] batadv_slave_1: left promiscuous mode [ 139.535634][T12473] netlink: 14528 bytes leftover after parsing attributes in process `syz.2.3672'. [ 139.881237][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3687'. [ 140.010135][T12515] netlink: 'syz.0.3692': attribute type 10 has an invalid length. [ 140.041195][T12515] team0: Port device dummy0 added [ 140.066300][T12523] netlink: 'syz.0.3692': attribute type 10 has an invalid length. [ 140.111914][T12523] team0: Port device dummy0 removed [ 140.141935][T12523] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 140.294422][T12544] netlink: 'syz.0.3702': attribute type 3 has an invalid length. [ 140.386498][T12561] macvtap0: entered promiscuous mode [ 140.393195][T12561] macvtap0: left promiscuous mode [ 140.591146][T12591] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12591 comm=syz.7.3726 [ 140.603787][T12591] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12591 comm=syz.7.3726 [ 140.627379][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 140.627393][ T29] audit: type=1400 audit(1753362970.978:4242): avc: denied { remount } for pid=12592 comm="syz.5.3727" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 140.671356][ T29] audit: type=1326 audit(1753362971.028:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.6.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad779e9a9 code=0x7ffc0000 [ 140.694998][ T29] audit: type=1326 audit(1753362971.028:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.6.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad779e9a9 code=0x7ffc0000 [ 140.718574][ T29] audit: type=1326 audit(1753362971.028:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.6.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f3ad779e9a9 code=0x7ffc0000 [ 140.741977][ T29] audit: type=1326 audit(1753362971.028:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.6.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad779e9a9 code=0x7ffc0000 [ 140.765477][ T29] audit: type=1326 audit(1753362971.028:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.6.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad779e9a9 code=0x7ffc0000 [ 140.794189][ T29] audit: type=1326 audit(1753362971.148:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.6.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3ad779e9a9 code=0x7ffc0000 [ 140.817842][ T29] audit: type=1326 audit(1753362971.148:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.6.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad779e9a9 code=0x7ffc0000 [ 140.841521][ T29] audit: type=1326 audit(1753362971.148:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.6.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3ad779e9a9 code=0x7ffc0000 [ 140.865098][ T29] audit: type=1326 audit(1753362971.148:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12594 comm="syz.6.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad779e9a9 code=0x7ffc0000 [ 140.915233][T12605] loop7: detected capacity change from 0 to 512 [ 140.928100][T12605] EXT4-fs: Ignoring removed oldalloc option [ 140.955102][T12605] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.979000][T12605] ext4 filesystem being mounted at /441/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.016758][ T7244] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.665969][T12659] __nla_validate_parse: 6 callbacks suppressed [ 141.665983][T12659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3757'. [ 141.946120][T12697] netem: incorrect gi model size [ 141.951178][T12697] netem: change failed [ 142.042873][T12719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3786'. [ 142.057808][T12721] ÿÿÿÿÿÿ: renamed from vlan1 [ 142.169231][T12730] Falling back ldisc for ttyS3. [ 142.376833][T12785] loop7: detected capacity change from 0 to 512 [ 142.397438][T12785] EXT4-fs (loop7): 1 orphan inode deleted [ 142.406282][T12785] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.409039][ T4114] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:28: Failed to release dquot type 1 [ 142.420453][T12785] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.479124][T12777] Falling back ldisc for ttyS3. [ 142.511201][ T7244] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.280364][T12875] loop7: detected capacity change from 0 to 8192 [ 143.292094][T12875] syz.7.3853: attempt to access beyond end of device [ 143.292094][T12875] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 143.306337][T12875] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 143.314212][T12875] FAT-fs (loop7): Filesystem has been set read-only [ 143.321369][T12875] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 143.330955][T12875] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 143.380690][T12879] netlink: 'syz.0.3857': attribute type 10 has an invalid length. [ 143.389084][T12879] macsec0: left promiscuous mode [ 143.601732][T12920] loop7: detected capacity change from 0 to 1024 [ 143.604356][T12916] tipc: Enabled bearer , priority 0 [ 143.608612][T12920] EXT4-fs: Ignoring removed orlov option [ 143.627238][T12920] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.641766][T12916] tipc: Disabling bearer [ 143.715194][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.724128][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.732010][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.741027][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.748576][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.756233][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.763759][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.771404][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.778961][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.786550][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.794165][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.801782][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.809383][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.816990][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.824536][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.832440][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.840041][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.848122][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.855720][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.873624][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.883182][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.894505][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.902525][ T7244] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.919174][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.919204][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.926774][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.934987][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.942627][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.964832][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.973187][T12941] macsec0: entered promiscuous mode [ 143.987949][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.987990][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.997307][T12943] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12943 comm=syz.0.3891 [ 144.015200][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.017367][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.025698][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.045090][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.075436][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.098304][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.126500][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.161100][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.180116][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.189154][T12966] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3894'. [ 144.238011][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.238101][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.255493][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.264101][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.277260][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.285468][T12966] hsr_slave_0 (unregistering): left promiscuous mode [ 144.327807][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.327885][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.343897][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.359523][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.374975][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.395141][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.410587][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.426043][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.442381][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.457781][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.468033][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.476251][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.484225][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.491945][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.499752][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.507501][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.515069][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.522783][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.530907][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.538847][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.557818][T12931] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 144.728084][T12997] openvswitch: netlink: Message has 6 unknown bytes. [ 145.109216][T13052] tipc: Started in network mode [ 145.114156][T13052] tipc: Node identity 5afa135fadcf, cluster identity 4711 [ 145.121427][T13052] tipc: Enabled bearer , priority 0 [ 145.150215][T13052] tipc: Disabling bearer [ 145.760684][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 145.760698][ T29] audit: type=1326 audit(1753362976.118:4584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13085 comm="syz.7.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6edfe9a9 code=0x7ffc0000 [ 145.790853][ T29] audit: type=1326 audit(1753362976.118:4585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13085 comm="syz.7.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6edfe9a9 code=0x7ffc0000 [ 145.842420][T13084] bridge0: port 1(batadv1) entered blocking state [ 145.849024][T13084] bridge0: port 1(batadv1) entered disabled state [ 145.866971][ T29] audit: type=1326 audit(1753362976.168:4586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13085 comm="syz.7.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a6edfe9a9 code=0x7ffc0000 [ 145.884132][T13084] batadv1: entered allmulticast mode [ 145.890647][ T29] audit: type=1326 audit(1753362976.168:4587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13085 comm="syz.7.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6edfe9a9 code=0x7ffc0000 [ 145.919439][ T29] audit: type=1326 audit(1753362976.168:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13085 comm="syz.7.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6edfe9a9 code=0x7ffc0000 [ 145.943077][ T29] audit: type=1326 audit(1753362976.178:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13085 comm="syz.7.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a6edfe9a9 code=0x7ffc0000 [ 145.966761][ T29] audit: type=1326 audit(1753362976.178:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13085 comm="syz.7.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6edfe9a9 code=0x7ffc0000 [ 145.979070][T13084] batadv1: entered promiscuous mode [ 145.990416][ T29] audit: type=1326 audit(1753362976.178:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13085 comm="syz.7.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6edfe9a9 code=0x7ffc0000 [ 146.019187][ T29] audit: type=1326 audit(1753362976.188:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13085 comm="syz.7.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a6edfe9a9 code=0x7ffc0000 [ 146.042673][ T29] audit: type=1326 audit(1753362976.188:4593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13085 comm="syz.7.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6edfe9a9 code=0x7ffc0000 [ 146.176826][T13107] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3958'. [ 146.246278][T13114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3961'. [ 146.274619][T13114] hsr_slave_0 (unregistering): left promiscuous mode [ 146.283648][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.287324][T13118] netlink: 228 bytes leftover after parsing attributes in process `syz.7.3963'. [ 146.291151][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.309707][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.317130][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.324794][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.332203][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.339625][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.347003][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.354506][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.361996][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.369419][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.371084][ T4153] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 146.376788][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.385988][ T4153] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 146.434884][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.442337][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.449778][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.457192][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.464621][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.472103][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.479586][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.486957][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.494348][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.501727][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.509124][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.516576][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.523983][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.531411][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.538843][ T3407] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.546681][ T3407] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 146.615200][T13137] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3975'. [ 147.105644][T13145] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 147.152542][T13155] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3977'. [ 147.163693][T13155] hsr_slave_0 (unregistering): left promiscuous mode [ 147.359665][T13179] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3984'. [ 147.475124][T13198] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3992'. [ 147.681527][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4003'. [ 148.137066][T13248] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4014'. [ 148.621383][T13284] netlink: 'syz.2.4034': attribute type 3 has an invalid length. [ 148.679515][T13299] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4040'. [ 148.802728][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4051'. [ 148.811695][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4051'. [ 148.938834][T13348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4064'. [ 148.973400][T13356] macvtap0: entered promiscuous mode [ 148.980412][T13356] macvtap0: left promiscuous mode [ 149.116592][T13385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4080'. [ 149.307890][T13401] netlink: 'syz.2.4089': attribute type 4 has an invalid length. [ 149.319105][T13401] : renamed from bond0 (while UP) [ 149.791900][T13442] netlink: 'syz.6.4106': attribute type 10 has an invalid length. [ 149.804671][ T3407] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 149.817788][ T3407] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 149.820604][T13442] team0: Port device dummy0 added [ 149.849072][T13447] netlink: 'syz.6.4106': attribute type 10 has an invalid length. [ 149.868873][T13447] team0: Port device dummy0 removed [ 149.876515][T13447] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 150.736837][T13500] IPVS: Error connecting to the multicast addr [ 150.945080][T13511] loop7: detected capacity change from 0 to 4096 [ 150.960376][T13511] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.003430][T13511] SELinux: ebitmap: truncated map [ 151.015892][T13511] SELinux: failed to load policy [ 151.109847][ T7244] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.119614][T13526] macvtap1: entered promiscuous mode [ 151.124993][T13526] erspan0: entered promiscuous mode [ 151.130322][T13526] macvtap1: entered allmulticast mode [ 151.135772][T13526] erspan0: entered allmulticast mode [ 151.160190][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 151.160204][ T29] audit: type=1326 audit(1753362981.518:4799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1a8ce9a9 code=0x7ffc0000 [ 151.190037][ T29] audit: type=1326 audit(1753362981.518:4800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1a8ce9a9 code=0x7ffc0000 [ 151.215566][ T29] audit: type=1326 audit(1753362981.548:4801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6b1a8ce9a9 code=0x7ffc0000 [ 151.239268][ T29] audit: type=1326 audit(1753362981.548:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6b1a8ce9e3 code=0x7ffc0000 [ 151.262618][ T29] audit: type=1326 audit(1753362981.548:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6b1a8cd45f code=0x7ffc0000 [ 151.285978][ T29] audit: type=1326 audit(1753362981.548:4804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6b1a8cea37 code=0x7ffc0000 [ 151.309487][ T29] audit: type=1326 audit(1753362981.568:4805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b1a8cd310 code=0x7ffc0000 [ 151.332998][ T29] audit: type=1326 audit(1753362981.568:4806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6b1a8cd60a code=0x7ffc0000 [ 151.356447][ T29] audit: type=1326 audit(1753362981.568:4807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1a8ce9a9 code=0x7ffc0000 [ 151.380133][ T29] audit: type=1326 audit(1753362981.568:4808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13528 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1a8ce9a9 code=0x7ffc0000 [ 151.564900][T13557] netlink: 'syz.6.4156': attribute type 1 has an invalid length. [ 151.730722][T13583] bridge0: port 3(dummy0) entered disabled state [ 151.737323][T13583] bridge0: entered promiscuous mode [ 151.742624][T13583] bridge0: entered allmulticast mode [ 151.753935][T13583] bridge0: port 3(dummy0) entered blocking state [ 151.760415][T13583] bridge0: port 3(dummy0) entered forwarding state [ 151.770409][T13587] netlink: 'syz.6.4170': attribute type 3 has an invalid length. [ 152.137334][T13637] loop7: detected capacity change from 0 to 512 [ 152.151537][T13637] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.164350][T13637] ext4 filesystem being mounted at /547/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.261105][ T7244] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.380003][T13657] __nla_validate_parse: 9 callbacks suppressed [ 152.380018][T13657] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4202'. [ 152.470160][T13662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4203'. [ 152.512867][T13662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4203'. [ 152.654616][T13675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4208'. [ 152.691175][T13680] syzkaller1: entered promiscuous mode [ 152.696700][T13680] syzkaller1: entered allmulticast mode [ 152.783943][T13695] netlink: 'syz.7.4218': attribute type 3 has an invalid length. [ 152.854842][T13710] sd 0:0:1:0: device reset [ 152.872216][T13714] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4227'. [ 153.010783][T13726] netlink: 'syz.0.4231': attribute type 3 has an invalid length. [ 153.115919][T13748] af_packet: tpacket_rcv: packet too big, clamped from 65253 to 4294967272. macoff=96 [ 153.173358][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4247'. [ 153.335088][T13774] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 153.507730][T13788] pim6reg1: entered promiscuous mode [ 153.513204][T13788] pim6reg1: entered allmulticast mode [ 153.588461][T13800] netlink: 'syz.5.4268': attribute type 21 has an invalid length. [ 153.596545][T13800] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4268'. [ 153.605683][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4268'. [ 153.643738][T13806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4271'. [ 153.666055][T13806] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4271'. [ 153.941352][T13837] random: crng reseeded on system resumption [ 153.955886][T13837] Restarting kernel threads ... [ 153.965908][T13837] Done restarting kernel threads. [ 153.971384][T13841] loop7: detected capacity change from 0 to 164 [ 153.978560][T13841] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 154.172070][T13861] netlink: 'syz.6.4297': attribute type 3 has an invalid length. [ 154.283949][T13868] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 154.858050][T13950] serio: Serial port ptm0 [ 156.203753][T14063] loop7: detected capacity change from 0 to 1024 [ 156.212021][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 156.212082][ T29] audit: type=1326 audit(1753362986.568:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14066 comm="syz.2.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a132e9a9 code=0x7ffc0000 [ 156.249727][T14063] ext3: Bad value for 'errors' [ 156.257375][ T29] audit: type=1326 audit(1753362986.568:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14066 comm="syz.2.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15a132e9a9 code=0x7ffc0000 [ 156.281663][ T29] audit: type=1326 audit(1753362986.568:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14066 comm="syz.2.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a132e9a9 code=0x7ffc0000 [ 156.305438][ T29] audit: type=1326 audit(1753362986.568:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14066 comm="syz.2.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a132e9a9 code=0x7ffc0000 [ 156.329773][ T29] audit: type=1326 audit(1753362986.568:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14066 comm="syz.2.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15a132e9a9 code=0x7ffc0000 [ 156.353287][ T29] audit: type=1326 audit(1753362986.568:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14066 comm="syz.2.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a132e9a9 code=0x7ffc0000 [ 156.377696][ T29] audit: type=1326 audit(1753362986.568:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14066 comm="syz.2.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15a132e9a9 code=0x7ffc0000 [ 156.401798][ T29] audit: type=1326 audit(1753362986.598:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14066 comm="syz.2.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a132e9a9 code=0x7ffc0000 [ 156.425357][ T29] audit: type=1326 audit(1753362986.598:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14066 comm="syz.2.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a132e9a9 code=0x7ffc0000 [ 156.483713][ T29] audit: type=1326 audit(1753362986.618:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14066 comm="syz.2.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f15a132e9a9 code=0x7ffc0000 [ 156.813819][T14127] macvtap0: entered promiscuous mode [ 156.820948][T14127] macvtap0: left promiscuous mode [ 156.883879][T14138] loop7: detected capacity change from 0 to 512 [ 156.915089][T14138] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 156.938782][T14138] EXT4-fs (loop7): mount failed [ 156.987579][T14107] chnl_net:caif_netlink_parms(): no params data found [ 157.090743][T14107] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.097898][T14107] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.128000][T14107] bridge_slave_0: entered allmulticast mode [ 157.134493][T14107] bridge_slave_0: entered promiscuous mode [ 157.145247][T14107] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.152392][T14107] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.161915][T14107] bridge_slave_1: entered allmulticast mode [ 157.185400][T14107] bridge_slave_1: entered promiscuous mode [ 157.213463][T14107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.244950][T14107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.260523][T14177] loop7: detected capacity change from 0 to 1024 [ 157.287878][T14107] team0: Port device team_slave_0 added [ 157.300757][T14177] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.323406][T14107] team0: Port device team_slave_1 added [ 157.363161][T14177] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.4433: Allocating blocks 385-513 which overlap fs metadata [ 157.397829][T14107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.404912][T14107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.430898][T14107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.463373][T14177] EXT4-fs (loop7): pa ffff888106adf5b0: logic 16, phys. 129, len 24 [ 157.471433][T14177] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 157.482677][T14186] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 157.516256][ T7244] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.517431][T14107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.532353][T14107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.558343][T14107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.617870][T14107] hsr_slave_0: entered promiscuous mode [ 157.624868][T14107] hsr_slave_1: entered promiscuous mode [ 157.631083][T14107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.638739][T14107] Cannot create hsr debugfs directory [ 157.808474][T14107] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 157.834106][T14107] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 157.871434][T14214] syz.5.4449: attempt to access beyond end of device [ 157.871434][T14214] loop11: rw=0, sector=0, nr_sectors = 1 limit=0 [ 157.891787][T14107] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 157.892132][T14214] FAT-fs (loop11): unable to read boot sector [ 157.910834][T14107] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 157.966228][T14107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.995541][T14107] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.026599][ T4091] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.033756][ T4091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.053427][ T4091] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.060567][ T4091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.182828][T14107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.205385][T14260] __nla_validate_parse: 17 callbacks suppressed [ 158.205399][T14260] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4466'. [ 158.227245][T14260] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4466'. [ 158.375326][T14107] veth0_vlan: entered promiscuous mode [ 158.383603][T14107] veth1_vlan: entered promiscuous mode [ 158.414506][T14107] veth0_macvtap: entered promiscuous mode [ 158.426409][T14107] veth1_macvtap: entered promiscuous mode [ 158.456060][T14107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.472639][T14107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.484334][T14107] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.493175][T14107] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.501932][T14107] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.510714][T14107] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.551293][T14294] IPVS: Error connecting to the multicast addr [ 158.740395][T14333] netlink: 'syz.5.4492': attribute type 10 has an invalid length. [ 158.758125][T14333] dummy0: left promiscuous mode [ 158.766469][T14333] dummy0: entered promiscuous mode [ 158.795043][T14333] team0: Port device dummy0 added [ 158.800162][T14343] netlink: 'syz.5.4492': attribute type 10 has an invalid length. [ 158.812080][T14345] netlink: 'syz.7.4497': attribute type 1 has an invalid length. [ 158.833755][T14343] team0: Port device dummy0 removed [ 158.849978][T14343] dummy0: left promiscuous mode [ 158.861801][T14343] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 158.924613][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4504'. [ 159.084686][T14379] netem: change failed [ 159.105709][T14384] netlink: 'syz.7.4516': attribute type 10 has an invalid length. [ 159.115676][T14384] bridge0: port 3(dummy0) entered disabled state [ 159.122877][T14384] dummy0: left allmulticast mode [ 159.127978][T14384] dummy0: left promiscuous mode [ 159.133240][T14384] bridge0: port 3(dummy0) entered disabled state [ 159.144206][T14384] team0: Port device dummy0 added [ 159.156704][T14384] netlink: 'syz.7.4516': attribute type 10 has an invalid length. [ 159.166718][T14384] team0: Port device dummy0 removed [ 159.174335][T14384] : (slave dummy0): Enslaving as an active interface with an up link [ 159.220580][T14392] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 159.232251][T14392] batman_adv: batadv0: Adding interface: ip6gretap1 [ 159.238892][T14392] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.264989][T14392] batman_adv: batadv0: Interface activated: ip6gretap1 [ 159.313172][T14394] loop7: detected capacity change from 0 to 256 [ 159.324859][T14394] FAT-fs (loop7): Directory bread(block 64) failed [ 159.334909][T14394] FAT-fs (loop7): Directory bread(block 65) failed [ 159.341663][T14394] FAT-fs (loop7): Directory bread(block 66) failed [ 159.348423][T14394] FAT-fs (loop7): Directory bread(block 67) failed [ 159.355097][T14394] FAT-fs (loop7): Directory bread(block 68) failed [ 159.362548][T14394] FAT-fs (loop7): Directory bread(block 69) failed [ 159.369611][T14394] FAT-fs (loop7): Directory bread(block 70) failed [ 159.377092][T14394] FAT-fs (loop7): Directory bread(block 71) failed [ 159.383855][T14394] FAT-fs (loop7): Directory bread(block 72) failed [ 159.390604][T14394] FAT-fs (loop7): Directory bread(block 73) failed [ 159.412721][T14394] syz.7.4521: attempt to access beyond end of device [ 159.412721][T14394] loop7: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 159.766018][T14438] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4542'. [ 160.102865][T14457] loop7: detected capacity change from 0 to 8192 [ 160.892458][T14497] SELinux: policydb version 1675088414 does not match my version range 15-34 [ 160.913489][T14497] SELinux: failed to load policy [ 160.984248][T14508] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4583'. [ 161.224478][T14540] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4589'. [ 161.255991][T14544] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4591'. [ 161.695390][T14572] sd 0:0:1:0: device reset [ 161.735914][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 161.735930][ T29] audit: type=1326 audit(1753362992.088:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14577 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613681e9a9 code=0x7ffc0000 [ 161.777490][ T29] audit: type=1326 audit(1753362992.118:5268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14577 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f613681e9a9 code=0x7ffc0000 [ 161.801747][ T29] audit: type=1326 audit(1753362992.118:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14577 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613681e9a9 code=0x7ffc0000 [ 161.825425][ T29] audit: type=1326 audit(1753362992.118:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14577 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f613681e9a9 code=0x7ffc0000 [ 161.849770][ T29] audit: type=1326 audit(1753362992.118:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14577 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613681e9a9 code=0x7ffc0000 [ 161.873352][ T29] audit: type=1326 audit(1753362992.118:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14577 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613681e9a9 code=0x7ffc0000 [ 161.897673][ T29] audit: type=1326 audit(1753362992.118:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14577 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f613681e9a9 code=0x7ffc0000 [ 161.921719][ T29] audit: type=1326 audit(1753362992.118:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14577 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613681e9a9 code=0x7ffc0000 [ 161.945198][ T29] audit: type=1326 audit(1753362992.118:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14577 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613681e9a9 code=0x7ffc0000 [ 161.969309][ T29] audit: type=1326 audit(1753362992.118:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14577 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f613681e9a9 code=0x7ffc0000 [ 162.026213][T14584] loop8: detected capacity change from 0 to 1024 [ 162.095358][T14590] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 162.330490][T14584] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.347934][T14584] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.4609: Allocating blocks 385-513 which overlap fs metadata [ 162.366802][T14584] EXT4-fs (loop8): pa ffff888106adf620: logic 16, phys. 129, len 24 [ 162.375005][T14584] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 162.437617][T14615] ip6gre1: entered promiscuous mode [ 162.442882][T14615] ip6gre1: entered allmulticast mode [ 162.460843][T14107] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.534648][T14622] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4626'. [ 162.592868][T14624] loop8: detected capacity change from 0 to 8192 [ 162.671279][T14636] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 162.685360][T14638] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.4630'. [ 162.702304][T14640] netlink: 'syz.8.4635': attribute type 10 has an invalid length. [ 162.707120][T14630] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.4630'. [ 162.737715][T14640] team0: Port device dummy0 added [ 162.746898][T14640] netlink: 'syz.8.4635': attribute type 10 has an invalid length. [ 162.757989][T14640] team0: Port device dummy0 removed [ 162.769236][T14643] hub 2-0:1.0: USB hub found [ 162.773971][T14643] hub 2-0:1.0: 8 ports detected [ 162.779559][T14640] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 162.871699][T14651] loop8: detected capacity change from 0 to 1024 [ 162.893677][T14651] EXT4-fs: Ignoring removed nobh option [ 162.899342][T14651] EXT4-fs: Ignoring removed bh option [ 162.924223][T14651] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.019118][T14107] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.904497][T14730] netlink: 'syz.2.4671': attribute type 1 has an invalid length. [ 163.912418][T14730] netlink: 'syz.2.4671': attribute type 4 has an invalid length. [ 163.920411][T14730] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4671'. [ 164.107973][T14751] netlink: 'syz.2.4680': attribute type 10 has an invalid length. [ 164.123260][T14751] team0: Port device dummy0 added [ 164.131577][T14751] netlink: 'syz.2.4680': attribute type 10 has an invalid length. [ 164.142243][T14751] team0: Port device dummy0 removed [ 164.152217][T14751] : (slave dummy0): Enslaving as an active interface with an up link [ 164.288087][ T3384] IPVS: starting estimator thread 0... [ 164.327054][T14782] netlink: 'syz.5.4695': attribute type 10 has an invalid length. [ 164.338686][T14782] bond0: (slave dummy0): Releasing backup interface [ 164.347964][T14784] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4696'. [ 164.360919][T14782] dummy0: entered promiscuous mode [ 164.375407][T14782] team0: Port device dummy0 added [ 164.385839][T14789] netlink: 'syz.5.4695': attribute type 10 has an invalid length. [ 164.389212][T14774] IPVS: using max 2928 ests per chain, 146400 per kthread [ 164.420886][T14789] team0: Port device dummy0 removed [ 164.428107][T14789] dummy0: left promiscuous mode [ 164.435262][ T3384] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 164.443020][ T3384] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 164.450457][T14789] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 164.465876][ T3384] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 164.473738][ T3384] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 164.481444][ T3384] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 164.489143][ T3384] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 164.496821][ T3384] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 164.504564][ T3384] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 164.512261][ T3384] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 164.520034][ T3384] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 164.527701][ T3384] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 164.535531][ T3384] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 164.543226][ T3384] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 164.550896][ T3384] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 164.558618][ T3384] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 164.566420][ T3384] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 164.577302][ T3384] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 164.588736][T14804] tipc: Started in network mode [ 164.593686][T14804] tipc: Node identity ac14140f, cluster identity 4711 [ 164.609130][T14804] tipc: New replicast peer: 255.255.255.255 [ 164.615368][T14804] tipc: Enabled bearer , priority 10 [ 164.697780][T14815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4709'. [ 164.870666][T14842] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4721'. [ 165.149682][T14874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4735'. [ 165.175344][T14874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4735'. [ 165.195642][T14880] netlink: 'syz.7.4747': attribute type 10 has an invalid length. [ 165.212780][T14880] : (slave dummy0): Releasing backup interface [ 165.230609][T14880] team0: Port device dummy0 added [ 165.242814][T14880] netlink: 'syz.7.4747': attribute type 10 has an invalid length. [ 165.253222][T14880] team0: Port device dummy0 removed [ 165.261769][T14880] : (slave dummy0): Enslaving as an active interface with an up link [ 165.728975][ T3384] tipc: Node number set to 2886997007 [ 166.074615][T14921] bond0: (slave dummy0): Releasing backup interface [ 166.085665][T14921] team0: Port device dummy0 added [ 166.102800][T14921] team0: Port device dummy0 removed [ 166.117276][T14921] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 166.458474][T14978] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4782'. [ 166.467736][T14975] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4781'. [ 166.494062][T14978]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.509792][T14978]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.525408][T14986] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4786'. [ 166.536252][T14978]  (unregistering): (slave dummy0): Releasing backup interface [ 166.556312][T14978]  (unregistering): Released all slaves [ 166.615901][T15002] netlink: 4436 bytes leftover after parsing attributes in process `syz.8.4792'. [ 166.625258][T15002] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 166.843855][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 166.843871][ T29] audit: type=1400 audit(166.823:5354): avc: denied { relabelto } for pid=15040 comm="syz.6.4811" name="642" dev="tmpfs" ino=3328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 166.895192][ T29] audit: type=1400 audit(166.823:5355): avc: denied { associate } for pid=15040 comm="syz.6.4811" name="642" dev="tmpfs" ino=3328 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 166.922048][ T29] audit: type=1400 audit(166.873:5356): avc: denied { remove_name } for pid=6953 comm="syz-executor" name="binderfs" dev="tmpfs" ino=3332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 166.948508][ T29] audit: type=1400 audit(166.873:5357): avc: denied { rmdir } for pid=6953 comm="syz-executor" name="642" dev="tmpfs" ino=3328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 167.105100][ T29] audit: type=1326 audit(167.073:5358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15060 comm="syz.2.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a132e9a9 code=0x7ffc0000 [ 167.128061][ T29] audit: type=1326 audit(167.073:5359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15060 comm="syz.2.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15a132e9a9 code=0x7ffc0000 [ 167.150965][ T29] audit: type=1326 audit(167.073:5360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15060 comm="syz.2.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a132e9a9 code=0x7ffc0000 [ 167.173870][ T29] audit: type=1326 audit(167.073:5361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15060 comm="syz.2.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a132e9a9 code=0x7ffc0000 [ 167.196740][ T29] audit: type=1326 audit(167.073:5362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15060 comm="syz.2.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15a132e9a9 code=0x7ffc0000 [ 167.219810][ T29] audit: type=1326 audit(167.073:5363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15060 comm="syz.2.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a132e9a9 code=0x7ffc0000 [ 167.263335][T15071] IPVS: Error connecting to the multicast addr [ 167.318965][T15075] support for cryptoloop has been removed. Use dm-crypt instead. [ 167.421586][T15095] dummy0: entered promiscuous mode [ 167.427587][T15095] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 167.436156][T15095] dummy0: left promiscuous mode [ 167.748727][T15141] ip6tnl2: entered promiscuous mode [ 167.911809][T15164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.923723][T15164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.934370][T15164] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 167.944844][T15164] bond0 (unregistering): Released all slaves [ 168.110010][T15199] serio: Serial port ptm0 [ 168.271747][T15221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.286398][T15221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.333771][T15229] pimreg: entered allmulticast mode [ 168.340980][T15229] pimreg: left allmulticast mode [ 168.442230][T15244] validate_nla: 3 callbacks suppressed [ 168.442247][T15244] netlink: 'syz.6.4903': attribute type 10 has an invalid length. [ 168.465205][T15244] bond0: (slave dummy0): Releasing backup interface [ 168.475524][T15244] team0: Port device dummy0 added [ 168.483391][T15246] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 168.490426][T15244] netlink: 'syz.6.4903': attribute type 10 has an invalid length. [ 168.491998][T15246] 0ªî{X¹¦: entered allmulticast mode [ 168.504354][T15246] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 168.527806][T15244] team0: Port device dummy0 removed [ 168.540736][T15244] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 168.554205][T15248] loop8: detected capacity change from 0 to 512 [ 168.580895][T15248] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.598264][T15248] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.4905: corrupted inode contents [ 168.612371][T15248] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #2: comm syz.8.4905: mark_inode_dirty error [ 168.624342][T15248] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.4905: corrupted inode contents [ 168.651326][T14107] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.719352][T15259] support for cryptoloop has been removed. Use dm-crypt instead. [ 168.727605][T15269] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 168.968963][T15296] support for cryptoloop has been removed. Use dm-crypt instead. [ 169.028006][T15312] netem: change failed [ 169.241311][T15339] __nla_validate_parse: 5 callbacks suppressed [ 169.241327][T15339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4946'. [ 169.282200][T15345] pimreg: entered allmulticast mode [ 169.289305][T15345] pimreg: left allmulticast mode [ 169.292364][T15346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4946'. [ 169.463502][T15362] loop8: detected capacity change from 0 to 512 [ 169.480290][T15362] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 169.525240][T15362] EXT4-fs (loop8): 1 truncate cleaned up [ 169.539360][T15362] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.557461][T15373] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4961'. [ 169.605076][T14107] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.777337][T15399] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4972'. [ 169.786365][T15399] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 169.793984][T15399] 0ªî{X¹¦: entered allmulticast mode [ 169.800332][T15399] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 169.950074][T15414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4979'. [ 170.192783][T15430] netlink: 'syz.7.4983': attribute type 1 has an invalid length. [ 170.204837][T15430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.217483][T15430] bond0 (unregistering): Released all slaves [ 170.278161][T15440] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4987'. [ 170.288085][T15440] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 170.294905][T15440] 0ªî{X¹¦: entered allmulticast mode [ 170.300969][T15440] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 170.446256][T15454] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15454 comm=syz.7.4992 [ 170.472073][T15456] serio: Serial port ptm0 [ 170.615209][T15485] netlink: 'syz.6.5008': attribute type 10 has an invalid length. [ 170.623167][T15485] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5008'. [ 170.634389][T15485] dummy0: entered promiscuous mode [ 170.641697][T15485] bond0: (slave dummy0): Releasing backup interface [ 170.649707][T15485] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 170.724141][T15491] serio: Serial port ptm0 [ 170.730874][T15493] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5012'. [ 170.807348][T15507] syzkaller1: entered promiscuous mode [ 170.813669][T15507] syzkaller1: entered allmulticast mode [ 170.840384][T15508] netlink: 'syz.6.5019': attribute type 13 has an invalid length. [ 170.980733][T15535] serio: Serial port ptm0 [ 170.990835][T15537] batadv_slave_0: entered promiscuous mode [ 170.997521][T15537] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5032'. [ 171.020166][T15537] batadv_slave_0 (unregistering): left promiscuous mode [ 171.031605][T15537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.274545][T15556] netlink: 'syz.2.5040': attribute type 10 has an invalid length. [ 171.286576][T15556] team0: Port device dummy0 added [ 171.321222][T15556] netlink: 'syz.2.5040': attribute type 10 has an invalid length. [ 171.353739][T15556] team0: Port device dummy0 removed [ 171.396248][T15560] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 171.936970][T15591] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 172.282420][T15610] netlink: 'syz.7.5063': attribute type 10 has an invalid length. [ 172.301722][T15610] : (slave dummy0): Releasing backup interface [ 172.333706][T15610] team0: Port device dummy0 added [ 172.341243][T15613] netlink: 'syz.7.5063': attribute type 10 has an invalid length. [ 172.357411][T15613] team0: Port device dummy0 removed [ 172.364629][T15613] : (slave dummy0): Enslaving as an active interface with an up link [ 172.557603][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5071'. [ 172.567413][T15628] netlink: 'syz.6.5071': attribute type 18 has an invalid length. [ 172.625769][T15628] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.634623][T15628] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.642919][T15628] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.651315][T15628] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.786582][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 172.786597][ T29] audit: type=1326 audit(172.763:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15647 comm="syz.6.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad779e9a9 code=0x7ffc0000 [ 172.816094][ T29] audit: type=1326 audit(172.763:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15647 comm="syz.6.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad779e9a9 code=0x7ffc0000 [ 172.939002][T15652] loop8: detected capacity change from 0 to 8192 [ 172.966834][ T29] audit: type=1326 audit(172.823:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15647 comm="syz.6.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ad779e9a9 code=0x7ffc0000 [ 172.990392][ T29] audit: type=1326 audit(172.823:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15647 comm="syz.6.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad779e9a9 code=0x7ffc0000 [ 173.013542][ T29] audit: type=1326 audit(172.823:5509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15647 comm="syz.6.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad779e9a9 code=0x7ffc0000 [ 173.111559][ T29] audit: type=1400 audit(173.023:5510): avc: denied { mounton } for pid=15651 comm="syz.8.5081" path="/111/file0/file0" dev="loop8" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 173.213970][T15674] tipc: Started in network mode [ 173.219034][T15674] tipc: Node identity ac141413, cluster identity 4711 [ 173.239557][T15674] tipc: New replicast peer: 10.1.1.2 [ 173.244923][T15674] tipc: Enabled bearer , priority 10 [ 173.272393][T15676] dummy0: entered promiscuous mode [ 173.278827][T15676] : (slave dummy0): Releasing backup interface [ 173.290550][T15676] bridge0: port 3(dummy0) entered blocking state [ 173.297018][T15676] bridge0: port 3(dummy0) entered disabled state [ 173.326778][T15676] dummy0: entered allmulticast mode [ 173.520313][T15692] validate_nla: 2 callbacks suppressed [ 173.520328][T15692] netlink: 'syz.8.5099': attribute type 1 has an invalid length. [ 173.540118][ T29] audit: type=1326 audit(173.523:5511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15696 comm="syz.5.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40abace9a9 code=0x7ffc0000 [ 173.568132][T15692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.586989][ T29] audit: type=1326 audit(173.523:5512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15696 comm="syz.5.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40abace9a9 code=0x7ffc0000 [ 173.610536][ T29] audit: type=1326 audit(173.523:5513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15696 comm="syz.5.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40abace9a9 code=0x7ffc0000 [ 173.633540][ T29] audit: type=1326 audit(173.523:5514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15696 comm="syz.5.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40abace9a9 code=0x7ffc0000 [ 173.666557][T15692] bond0 (unregistering): Released all slaves [ 173.921998][T15737] loop8: detected capacity change from 0 to 1024 [ 173.941548][T15737] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.956822][T15742] netlink: 'syz.5.5118': attribute type 1 has an invalid length. [ 173.971974][T15742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.980278][T14107] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.991329][T15742] bond2 (unregistering): Released all slaves [ 174.215271][T15770] netlink: 'syz.8.5130': attribute type 10 has an invalid length. [ 174.223542][T15770] dummy0: entered promiscuous mode [ 174.229984][T15770] bridge0: port 3(dummy0) entered blocking state [ 174.236338][T15770] bridge0: port 3(dummy0) entered disabled state [ 174.243307][T15770] dummy0: entered allmulticast mode [ 174.249203][T15770] bridge0: port 3(dummy0) entered blocking state [ 174.255562][T15770] bridge0: port 3(dummy0) entered forwarding state [ 174.358955][ T3398] tipc: Node number set to 2886997011 [ 174.487176][T15793] openvswitch: netlink: Message has 6 unknown bytes. [ 174.626521][T15807] wireguard0: entered promiscuous mode [ 174.632102][T15807] wireguard0: entered allmulticast mode [ 174.981187][T15847] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 175.296318][T15886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.305614][T15886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.451707][T15894] loop8: detected capacity change from 0 to 128 [ 175.470211][T15894] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.519014][T15894] loop8: detected capacity change from 128 to 64 [ 175.526671][T15894] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Out of memory [ 175.535910][T15894] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Out of memory [ 175.546187][T15894] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #13: comm syz.8.5196: mark_inode_dirty error [ 175.560050][T15894] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -12) [ 175.630231][T15912] netlink: 'syz.5.5195': attribute type 17 has an invalid length. [ 175.638157][T15912] __nla_validate_parse: 6 callbacks suppressed [ 175.638188][T15912] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5195'. [ 175.655142][T15912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.770340][T14107] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.031455][T15925] chnl_net:caif_netlink_parms(): no params data found [ 176.088152][T15925] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.095395][T15925] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.104152][T15925] bridge_slave_0: entered allmulticast mode [ 176.110681][T15925] bridge_slave_0: entered promiscuous mode [ 176.118119][T15925] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.125317][T15925] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.132747][T15925] bridge_slave_1: entered allmulticast mode [ 176.140303][T15925] bridge_slave_1: entered promiscuous mode [ 176.166089][T15925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.176717][T15925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.200484][T15959] Falling back ldisc for ttyS3. [ 176.207612][T15925] team0: Port device team_slave_0 added [ 176.221707][T15925] team0: Port device team_slave_1 added [ 176.265601][T15925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.272791][T15925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.298775][T15925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.313265][T15925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.320370][T15925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.346391][T15925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.381788][T15925] hsr_slave_0: entered promiscuous mode [ 176.387967][T15925] hsr_slave_1: entered promiscuous mode [ 176.409259][T15925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.416850][T15925] Cannot create hsr debugfs directory [ 176.627579][T15925] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 176.641873][T15925] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 176.654832][T15925] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 176.666425][T15925] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 176.724107][T15925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.738995][T15925] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.748818][ T4150] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.755945][ T4150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.767152][ T4153] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.774301][ T4153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.834401][T15925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.922911][T15925] veth0_vlan: entered promiscuous mode [ 176.931260][T15925] veth1_vlan: entered promiscuous mode [ 176.946628][T15925] veth0_macvtap: entered promiscuous mode [ 176.954247][T15925] veth1_macvtap: entered promiscuous mode [ 176.966002][T15925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.977392][T15925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.985764][T15925] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.994509][T15925] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.003280][T15925] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.012144][T15925] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.058695][T16030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5245'. [ 177.068905][T16037] SELinux: Context system_u:object is not valid (left unmapped). [ 177.076989][T16035] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5202'. [ 177.434521][T16087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5260'. [ 177.646099][T16108] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 177.798542][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 177.798555][ T29] audit: type=1400 audit(177.773:5633): avc: denied { read write } for pid=16121 comm="syz.7.5275" name="cgroup.procs" dev="cgroup" ino=592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 177.830095][ T29] audit: type=1400 audit(177.773:5634): avc: denied { open } for pid=16121 comm="syz.7.5275" path="/syzcgroup/cpu/syz7/cgroup.procs" dev="cgroup" ino=592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 177.929481][T16127] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5277'. [ 178.069812][ T29] audit: type=1326 audit(178.053:5635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16129 comm="syz.7.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6edfe9a9 code=0x7ffc0000 [ 178.092842][ T29] audit: type=1326 audit(178.053:5636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16129 comm="syz.7.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6edfe9a9 code=0x7ffc0000 [ 178.153018][ T29] audit: type=1326 audit(178.103:5637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16129 comm="syz.7.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6a6edfe9a9 code=0x7ffc0000 [ 178.175979][ T29] audit: type=1326 audit(178.103:5638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16129 comm="syz.7.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6edfe9a9 code=0x7ffc0000 [ 178.176001][ T29] audit: type=1326 audit(178.103:5639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16129 comm="syz.7.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6edfe9a9 code=0x7ffc0000 [ 178.176075][ T29] audit: type=1326 audit(178.103:5640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16129 comm="syz.7.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6a6edfe9a9 code=0x7ffc0000 [ 178.176097][ T29] audit: type=1326 audit(178.103:5641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16129 comm="syz.7.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6edfe9a9 code=0x7ffc0000 [ 178.176119][ T29] audit: type=1326 audit(178.103:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16129 comm="syz.7.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6edfe9a9 code=0x7ffc0000 [ 178.307717][T16144] netlink: 'syz.6.5284': attribute type 29 has an invalid length. [ 178.308074][T16144] netlink: 'syz.6.5284': attribute type 29 has an invalid length. [ 178.308355][T16144] netlink: 500 bytes leftover after parsing attributes in process `syz.6.5284'. [ 178.608333][T16161] ================================================================== [ 178.608358][T16161] BUG: KCSAN: data-race in do_select / pollwake [ 178.608386][T16161] [ 178.608390][T16161] write to 0xffffc900020d39e0 of 4 bytes by interrupt on cpu 0: [ 178.608406][T16161] pollwake+0xb6/0x100 [ 178.608423][T16161] __wake_up+0x66/0xb0 [ 178.608452][T16161] bpf_ringbuf_notify+0x22/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 178.608476][T16161] irq_work_run+0xe2/0x2d0 [ 178.608496][T16161] __sysvec_irq_work+0x22/0x170 [ 178.608509][T16161] sysvec_irq_work+0x66/0x80 [ 178.608530][T16161] asm_sysvec_irq_work+0x1a/0x20 [ 178.608550][T16161] native_apic_msr_write+0x3d/0x60 [ 178.608577][T16161] x2apic_send_IPI_self+0x10/0x20 [ 178.608598][T16161] arch_irq_work_raise+0x46/0x50 [ 178.608622][T16161] __irq_work_queue_local+0x10f/0x2c0 [ 178.608644][T16161] irq_work_queue+0x70/0x100 [ 178.608669][T16161] bpf_ringbuf_submit+0xce/0xf0 [ 178.608697][T16161] bpf_prog_a526332ed0a73e3c+0x4b/0x4f [ 178.608726][T16161] bpf_trace_run2+0x107/0x1c0 [ 178.608744][T16161] __bpf_trace_sys_enter+0x10/0x30 [ 178.608761][T16161] trace_sys_enter+0x86/0x110 [ 178.608777][T16161] syscall_trace_enter+0x13e/0x1e0 [ 178.608796][T16161] do_syscall_64+0xac/0x200 [ 178.608814][T16161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.608834][T16161] [ 178.608840][T16161] read to 0xffffc900020d39e0 of 4 bytes by task 16161 on cpu 1: [ 178.608855][T16161] do_select+0xe48/0xf50 [ 178.608880][T16161] core_sys_select+0x3d7/0x6e0 [ 178.608907][T16161] __se_sys_pselect6+0x216/0x280 [ 178.608930][T16161] __x64_sys_pselect6+0x78/0x90 [ 178.608953][T16161] x64_sys_call+0x1caa/0x2fb0 [ 178.608970][T16161] do_syscall_64+0xd2/0x200 [ 178.608985][T16161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.609003][T16161] [ 178.609006][T16161] value changed: 0x00000000 -> 0x00000001 [ 178.609015][T16161] [ 178.609019][T16161] Reported by Kernel Concurrency Sanitizer on: [ 178.609032][T16161] CPU: 1 UID: 0 PID: 16161 Comm: syz.7.5291 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) [ 178.609061][T16161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.609071][T16161] ================================================================== [ 179.092169][ T1388] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.210170][ T1388] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.310093][ T1388] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.370044][ T1388] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.441002][ T1388] batadv1: left allmulticast mode [ 179.446068][ T1388] batadv1: left promiscuous mode [ 179.451204][ T1388] bridge0: port 1(batadv1) entered disabled state [ 179.472141][ T1388] bond1 (unregistering): (slave bridge0): Releasing active interface [ 179.550584][ T1388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.560060][ T1388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.568979][ T1388] bond0 (unregistering): Released all slaves [ 179.576763][ T1388] bond1 (unregistering): Released all slaves [ 179.630526][ T1388] tipc: Left network mode [ 179.636949][ T1388] hsr_slave_0: left promiscuous mode [ 179.642597][ T1388] hsr_slave_1: left promiscuous mode [ 179.648258][ T1388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.655822][ T1388] batman_adv: batadv0: Removing interface: macsec0 [ 179.680872][ T1388] team0 (unregistering): Port device team_slave_1 removed [ 179.690733][ T1388] team0 (unregistering): Port device team_slave_0 removed [ 180.653560][ T31] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.701864][ T31] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.761412][ T31] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.820982][ T31] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.880317][ T31] bridge_slave_1: left allmulticast mode [ 180.885971][ T31] bridge_slave_1: left promiscuous mode [ 180.891717][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.899477][ T31] bridge_slave_0: left allmulticast mode [ 180.905122][ T31] bridge_slave_0: left promiscuous mode [ 180.910871][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.991200][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.001050][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.010550][ T31] bond0 (unregistering): Released all slaves [ 181.052238][ T31] hsr_slave_0: left promiscuous mode [ 181.057977][ T31] hsr_slave_1: left promiscuous mode [ 181.063584][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.071141][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.078874][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.086282][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.096447][ T31] veth1_macvtap: left promiscuous mode [ 181.102016][ T31] veth0_macvtap: left promiscuous mode [ 181.107512][ T31] veth1_vlan: left promiscuous mode [ 181.112838][ T31] veth0_vlan: left promiscuous mode [ 181.167834][ T31] team0 (unregistering): Port device team_slave_1 removed [ 181.177670][ T31] team0 (unregistering): Port device team_slave_0 removed