last executing test programs: 2m16.178104837s ago: executing program 32 (id=11622): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 1m28.487027017s ago: executing program 33 (id=13120): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x31b52000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20001000) 1m27.085886402s ago: executing program 34 (id=13140): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 1m9.873806191s ago: executing program 35 (id=13776): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x7e05, 0x10100, 0x0, 0x33d}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x56e, 0x432c, 0x0, 0x0, 0x0) 1m8.529008887s ago: executing program 7 (id=13800): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xe8e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) timer_gettime(0x0, 0x0) 1m8.482545717s ago: executing program 7 (id=13801): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @remote}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 1m8.455454867s ago: executing program 7 (id=13802): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 1m8.378169576s ago: executing program 7 (id=13805): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x25b, &(0x7f0000000840)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8001, 0x0, 0x0, 0x1f, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) 1m8.199083186s ago: executing program 7 (id=13807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_int(r0, &(0x7f0000000300)=0x4000000000000003, 0x12) 1m6.511467012s ago: executing program 7 (id=13851): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) getgroups(0x0, 0x0) 1m6.511349492s ago: executing program 36 (id=13851): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) getgroups(0x0, 0x0) 1m2.640516421s ago: executing program 4 (id=13936): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x5}, 0x18) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) 1m2.579018291s ago: executing program 4 (id=13938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x68, r2, 0x1, 0x0, 0x8000000, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x1c, 0x8, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r2, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) 1m2.553377521s ago: executing program 4 (id=13939): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1m2.31886085s ago: executing program 4 (id=13946): syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) mount$bind(&(0x7f0000000a80)='.\x00', &(0x7f0000000b00)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000b80)='./file0/file0/file0\x00', 0x1) 1m2.23569301s ago: executing program 4 (id=13949): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) unshare(0x62040200) 1m1.629933149s ago: executing program 4 (id=13963): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp']) 1m1.629561099s ago: executing program 37 (id=13963): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp']) 1m1.448309118s ago: executing program 9 (id=13968): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1m1.313950067s ago: executing program 9 (id=13969): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x80000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {0x10000000}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1m1.078136257s ago: executing program 9 (id=13972): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xb92, 0x10000, 0x331, 0xfffffff2, 0x40, "8dac7a42682285793c03dc23040c6f41bbf7a9", 0x6, 0x7}) 1m0.977167726s ago: executing program 9 (id=13973): syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) mount$bind(&(0x7f0000000a80)='.\x00', &(0x7f0000000b00)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000b80)='./file0/file0/file0\x00', 0x1) 1m0.946141907s ago: executing program 9 (id=13974): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 59.813922793s ago: executing program 9 (id=13995): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 59.796951523s ago: executing program 38 (id=13995): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 39.524719668s ago: executing program 5 (id=14794): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="000202"], 0x18) 39.441950968s ago: executing program 5 (id=14795): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000040002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x2) 39.441679858s ago: executing program 5 (id=14796): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000340)="05000806", 0x4, 0x20000084, &(0x7f0000000080)={0x11, 0x8100, r2, 0x306}, 0x14) 39.375986117s ago: executing program 5 (id=14798): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000340)={0x80041, 0x120, 0x8}, 0x18) 39.337395827s ago: executing program 5 (id=14800): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 38.884308646s ago: executing program 5 (id=14808): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000640)=r2, 0x4) 38.814571496s ago: executing program 39 (id=14808): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000640)=r2, 0x4) 37.946006164s ago: executing program 0 (id=14834): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}}, {{@in=@rand_addr=0xf7ffffff, 0x0, 0x6c}, 0x2, @in6=@dev, 0x0, 0x4}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 37.913375673s ago: executing program 0 (id=14835): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) 37.868210263s ago: executing program 0 (id=14836): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) rseq(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 37.824566423s ago: executing program 0 (id=14837): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYRESHEX, @ANYRES16], 0x1, 0x128d, &(0x7f0000002300)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x4000001c, 0x4, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea000000000000b600", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b986000000fffffffff206000000000000020000000000000000000000001f00"}) 37.621330813s ago: executing program 0 (id=14842): r0 = socket(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x178, 0x394, 0x0, 0x178, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "fc6b061134c5d5c8465af5f5caa5bd6c0dde77ff83daa984c0d76167e0608dcaa2caff7bd9c5923cccd5b483df8124249f91b8c3c2cea9bed64dc935a975401a68e34a04c1f15e50050729ba985e8c1576994e350d93a782668d4d51a1bc76bba1fde09794922ae65a804c56f092e430ebb8fa892d671c8c8035cae06810f8c6", 0x20}}, @common=@unspec=@addrtype1={{0x28}, {0xa}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "08db"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 36.973903101s ago: executing program 0 (id=14860): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 36.960099751s ago: executing program 40 (id=14860): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 1.116498373s ago: executing program 2 (id=16225): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x3d, 0x568, &(0x7f0000001cc0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 1.104858113s ago: executing program 2 (id=16229): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xcd, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9634, 0x81, 0x5, 0x9f}, {0x6, 0x24, 0x1a, 0x3ff, 0xaf1201024f0c6ab9}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xcb, 0x5, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0x8c, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x93, 0x2, 0x47}}}}}}}]}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 499.918821ms ago: executing program 6 (id=16262): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e42a9f4e00ab6de6b45"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 474.924941ms ago: executing program 6 (id=16263): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x3c}}, 0x0) 453.002951ms ago: executing program 1 (id=16264): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)='%pI4 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) symlink(0x0, 0x0) 437.791821ms ago: executing program 6 (id=16265): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000307000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x6, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 396.655621ms ago: executing program 1 (id=16266): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r1, &(0x7f0000000000), 0x100000008) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x80004507, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x40, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'pim6reg0\x00'}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x40}}, 0x0) 396.190781ms ago: executing program 2 (id=16267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5000000000000000000000000000048"], 0xb1) 388.485741ms ago: executing program 6 (id=16268): r0 = timerfd_create(0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000800000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) 384.472001ms ago: executing program 1 (id=16269): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x11}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 345.136891ms ago: executing program 6 (id=16271): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x8, 0x7000000, 0x5, 0x0, {0xf, 0x0, 0x96, 0x0, 0x4}, {0x81, 0x1, 0x9, 0x7, 0x1, 0x6}, 0x6, 0x7fffffff, 0x6}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000090}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@deltaction={0x1c0, 0x31, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1c}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb39}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4b4}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa4}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x84}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xafd2}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x458}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x46085}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 342.745451ms ago: executing program 1 (id=16272): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0213400002"], 0x10}}, 0x0) 316.127081ms ago: executing program 1 (id=16274): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) 308.50322ms ago: executing program 8 (id=16275): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 287.784731ms ago: executing program 3 (id=16276): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x85, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) finit_module(r0, 0x0, 0x3) 284.810141ms ago: executing program 6 (id=16277): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) open(0x0, 0x2a4c0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r1, 0x5608, 0x0) 264.844311ms ago: executing program 8 (id=16278): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) 248.59576ms ago: executing program 2 (id=16279): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) 247.84791ms ago: executing program 1 (id=16289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 217.08314ms ago: executing program 3 (id=16280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000340), 0x1ff, 0xa401) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x101, 0x80, &(0x7f0000000240)={0xa1, 0x5, 0x0, 0x202}, 0x8, 0x9, 0x4, 0x0, 0x0, 0xffff, 0x0}) 216.5561ms ago: executing program 2 (id=16281): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) 193.219541ms ago: executing program 8 (id=16282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 179.41528ms ago: executing program 2 (id=16283): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100040e, &(0x7f00000000c0)={[{@norecovery}, {@mblk_io_submit}, {@lazytime}, {}, {@block_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x3ed}}]}, 0x3, 0x449, &(0x7f0000000740)="$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") r0 = creat(&(0x7f0000000080)='./bus\x00', 0x10) ftruncate(r0, 0x12081ff) r1 = open(&(0x7f0000000200)='./bus\x00', 0x16507e, 0x0) sendfile(r1, r1, 0x0, 0x100000000) 178.33348ms ago: executing program 3 (id=16294): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x18) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) 123.09593ms ago: executing program 8 (id=16284): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r1, r1, 0x21) 122.34389ms ago: executing program 3 (id=16285): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r1, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000e47000/0x2000)=nil) 77.91296ms ago: executing program 8 (id=16286): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001c00000014000180080003000100000008000100", @ANYRES64=r1], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) 71.85903ms ago: executing program 3 (id=16287): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)={0x38, r1, 0x607, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x38}}, 0x0) 3.17639ms ago: executing program 3 (id=16288): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x2) 0s ago: executing program 8 (id=16290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5000000000000000000000000000048"], 0xb1) kernel console output (not intermixed with test programs): 0000 r/w without journal. Quota mode: writeback. [ 385.007831][ T4783] ext4 filesystem being mounted at /637/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 385.049405][ T4794] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 385.070527][T30296] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.152386][ T4809] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14631'. [ 385.216109][ T4815] 9pnet: Could not find request transport: f [ 385.266647][ T4824] netlink: 'syz.1.14638': attribute type 21 has an invalid length. [ 385.275134][ T4824] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14638'. [ 385.404733][ T4843] IPv6: NLM_F_CREATE should be specified when creating new route [ 385.444147][ T4851] netlink: 'syz.8.14660': attribute type 21 has an invalid length. [ 385.453480][ T4851] netlink: 132 bytes leftover after parsing attributes in process `syz.8.14660'. [ 385.460943][ T4854] 9pnet: Could not find request transport: f [ 385.501416][ T4864] loop8: detected capacity change from 0 to 256 [ 385.509375][ T4861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.517624][ T4864] FAT-fs (loop8): IO charset maccyrillic not found [ 385.520258][ T4861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.064066][ T4888] IPv6: NLM_F_CREATE should be specified when creating new route [ 386.084327][ T4890] netlink: 'syz.5.14664': attribute type 21 has an invalid length. [ 386.092881][ T4890] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14664'. [ 386.108238][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 386.108256][ T29] audit: type=1326 audit(1735500024.114:10361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.0.14667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f156a935d29 code=0x7ffc0000 [ 386.175062][ T29] audit: type=1326 audit(1735500024.114:10362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.0.14667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156a935d29 code=0x7ffc0000 [ 386.199441][ T29] audit: type=1326 audit(1735500024.114:10363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.0.14667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156a935d29 code=0x7ffc0000 [ 386.223297][ T29] audit: type=1326 audit(1735500024.114:10364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.0.14667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f156a935d29 code=0x7ffc0000 [ 386.247694][ T29] audit: type=1326 audit(1735500024.144:10365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.0.14667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156a935d29 code=0x7ffc0000 [ 386.271523][ T29] audit: type=1326 audit(1735500024.154:10366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.0.14667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156a935d29 code=0x7ffc0000 [ 386.296351][ T29] audit: type=1326 audit(1735500024.164:10367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.0.14667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f156a935d29 code=0x7ffc0000 [ 386.320741][ T29] audit: type=1326 audit(1735500024.164:10368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.0.14667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156a935d29 code=0x7ffc0000 [ 386.344468][ T29] audit: type=1326 audit(1735500024.164:10369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.0.14667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156a935d29 code=0x7ffc0000 [ 386.428483][ T4906] netlink: 'syz.1.14672': attribute type 6 has an invalid length. [ 386.447005][ T29] audit: type=1400 audit(1735500024.444:10370): avc: denied { read } for pid=4911 comm="syz.0.14676" name="ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ldconfig_cache_t:s0" [ 387.209411][ T5034] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14733'. [ 387.268196][ T5044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14737'. [ 387.370872][ T5061] loop0: detected capacity change from 0 to 512 [ 387.378261][ T5061] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 387.399037][ T5061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.414123][ T5061] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.435907][ T5061] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 387.454971][ T5072] loop1: detected capacity change from 0 to 164 [ 387.490895][ T3281] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.695854][ T5099] netlink: 68 bytes leftover after parsing attributes in process `syz.1.14762'. [ 387.819997][ T5112] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5112 comm=syz.2.14769 [ 387.890704][ T5123] loop5: detected capacity change from 0 to 256 [ 388.036152][ T5138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14782'. [ 388.960484][ T5196] netlink: 28 bytes leftover after parsing attributes in process `syz.8.14806'. [ 388.973895][ T5196] netlink: 28 bytes leftover after parsing attributes in process `syz.8.14806'. [ 388.983006][ T5196] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14806'. [ 389.015089][ T4329] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.080682][ T5202] loop8: detected capacity change from 0 to 2048 [ 389.095682][ T4329] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.115274][ T5204] vlan2: entered promiscuous mode [ 389.123219][ T5202] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.139286][ T5204] $Hÿ: (slave vlan2): Opening slave failed [ 389.152039][ T5202] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 389.173931][ T4329] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.223072][ T2687] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.248023][ T4329] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.291558][ T5226] SELinux: +}k (5226) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 389.362664][ T5205] lo speed is unknown, defaulting to 1000 [ 389.471975][ T4329] bridge_slave_1: left allmulticast mode [ 389.477830][ T4329] bridge_slave_1: left promiscuous mode [ 389.483590][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.491527][ T4329] bridge_slave_0: left allmulticast mode [ 389.497266][ T4329] bridge_slave_0: left promiscuous mode [ 389.502976][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.591554][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.601614][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.612880][ T4329] bond0 (unregistering): (slave team0): Releasing backup interface [ 389.622521][ T4329] bond0 (unregistering): Released all slaves [ 389.631092][ T4329] bond1 (unregistering): Released all slaves [ 389.641485][ T5245] vlan2: entered promiscuous mode [ 389.646959][ T5245] bond0: entered promiscuous mode [ 389.652080][ T5245] bond_slave_0: entered promiscuous mode [ 389.657881][ T5245] bond_slave_1: entered promiscuous mode [ 389.664338][ T5245] bond0: left promiscuous mode [ 389.669164][ T5245] bond_slave_0: left promiscuous mode [ 389.674628][ T5245] bond_slave_1: left promiscuous mode [ 389.688045][ T5205] chnl_net:caif_netlink_parms(): no params data found [ 389.707151][ T4329] tipc: Left network mode [ 389.798751][ T5205] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.805921][ T5205] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.813891][ T5205] bridge_slave_0: entered allmulticast mode [ 389.821995][ T5205] bridge_slave_0: entered promiscuous mode [ 389.838558][ T4329] hsr_slave_0: left promiscuous mode [ 389.844540][ T4329] hsr_slave_1: left promiscuous mode [ 389.854350][ T4329] veth1_macvtap: left promiscuous mode [ 389.859999][ T4329] veth0_macvtap: left promiscuous mode [ 389.865545][ T4329] veth1_vlan: left promiscuous mode [ 389.870856][ T4329] veth0_vlan: left promiscuous mode [ 389.978883][ T4329] team0 (unregistering): Port device team_slave_1 removed [ 389.990625][ T4329] team0 (unregistering): Port device team_slave_0 removed [ 390.042207][ T5205] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.049381][ T5205] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.056755][ T5205] bridge_slave_1: entered allmulticast mode [ 390.064115][ T5205] bridge_slave_1: entered promiscuous mode [ 390.090062][ T5205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.102016][ T5205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.125047][ T5274] loop0: detected capacity change from 0 to 8192 [ 390.153387][ T5205] team0: Port device team_slave_0 added [ 390.164917][ T5205] team0: Port device team_slave_1 added [ 390.219882][ T3281] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 390.228535][ T3281] FAT-fs (loop0): Filesystem has been set read-only [ 390.237333][ T3281] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 390.249193][ T5205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.256254][ T5205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.282370][ T5205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.300800][ T5205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.307826][ T5205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.333876][ T5205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.420256][ T5205] hsr_slave_0: entered promiscuous mode [ 390.430964][ T5205] hsr_slave_1: entered promiscuous mode [ 390.483267][ T4329] IPVS: stop unused estimator thread 0... [ 390.495850][ T5303] SELinux: +}k (5303) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 390.601239][ T4329] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.679744][ T4329] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.744582][ T4329] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.832497][ T4329] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.885738][ T5205] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 390.911372][ T5205] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 390.921406][ T5205] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 390.945841][ T4329] bridge_slave_1: left allmulticast mode [ 390.951732][ T4329] bridge_slave_1: left promiscuous mode [ 390.957469][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.968527][ T4329] bridge_slave_0: left allmulticast mode [ 390.974209][ T4329] bridge_slave_0: left promiscuous mode [ 390.980008][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.110221][ T4329] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.121599][ T4329] bond_slave_0: left promiscuous mode [ 391.130017][ T4329] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.148608][ T4329] bond_slave_1: left promiscuous mode [ 391.155499][ T4329] $Hÿ (unregistering): (slave team0): Releasing backup interface [ 391.164003][ T4329] team0: left promiscuous mode [ 391.168867][ T4329] team_slave_0: left promiscuous mode [ 391.174355][ T4329] team_slave_1: left promiscuous mode [ 391.181363][ T4329] $Hÿ (unregistering): Released all slaves [ 391.189425][ T5205] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 391.288328][ T5205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.303799][ T5205] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.324807][ T4329] hsr_slave_0: left promiscuous mode [ 391.331889][ T4329] hsr_slave_1: left promiscuous mode [ 391.337630][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.345268][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.354992][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.362451][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.372994][ T4329] veth1_macvtap: left promiscuous mode [ 391.378831][ T4329] veth0_macvtap: left promiscuous mode [ 391.384544][ T4329] veth1_vlan: left promiscuous mode [ 391.389888][ T4329] veth0_vlan: left promiscuous mode [ 391.484557][ T4329] team0 (unregistering): Port device team_slave_1 removed [ 391.494474][ T4329] team0 (unregistering): Port device team_slave_0 removed [ 391.549027][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 391.549043][ T29] audit: type=1326 audit(1735500029.554:10577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5349 comm="syz.2.14871" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb2c375d29 code=0x0 [ 391.609591][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.616728][ T4301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.626488][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.633602][ T4301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.644960][ T5356] loop8: detected capacity change from 0 to 512 [ 391.659681][ T5356] EXT4-fs: Ignoring removed oldalloc option [ 391.663455][ T5205] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 391.677260][ T5356] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.14873: Parent and EA inode have the same ino 15 [ 391.696334][ T5326] lo speed is unknown, defaulting to 1000 [ 391.704956][ T5356] EXT4-fs (loop8): Remounting filesystem read-only [ 391.711591][ T5356] EXT4-fs warning (device loop8): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 391.721759][ T5356] EXT4-fs (loop8): 1 orphan inode deleted [ 391.728046][ T5356] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.740533][ T5356] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 391.747652][ T5356] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.768120][ T5205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.788303][ T29] audit: type=1400 audit(1735500029.794:10578): avc: denied { mount } for pid=5355 comm="syz.8.14873" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 391.850397][ T29] audit: type=1400 audit(1735500029.834:10579): avc: denied { unmount } for pid=2687 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 391.880863][ T29] audit: type=1400 audit(1735500029.884:10580): avc: denied { write } for pid=5364 comm="syz.8.14874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 391.964646][ T5205] veth0_vlan: entered promiscuous mode [ 391.976642][ T5205] veth1_vlan: entered promiscuous mode [ 391.993245][ T5326] chnl_net:caif_netlink_parms(): no params data found [ 392.011205][ T5205] veth0_macvtap: entered promiscuous mode [ 392.019055][ T5205] veth1_macvtap: entered promiscuous mode [ 392.029316][ T5205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.039871][ T5205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.049771][ T5205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.060331][ T5205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.070209][ T5205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.080741][ T5205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.087279][ T29] audit: type=1326 audit(1735500030.084:10581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5379 comm="syz.1.14879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4d875d29 code=0x7ffc0000 [ 392.090598][ T5205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.090619][ T5205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.091442][ T5205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.157800][ T29] audit: type=1326 audit(1735500030.154:10582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5379 comm="syz.1.14879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4d875d29 code=0x7ffc0000 [ 392.181567][ T29] audit: type=1326 audit(1735500030.154:10583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5379 comm="syz.1.14879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e4d875d29 code=0x7ffc0000 [ 392.205515][ T29] audit: type=1326 audit(1735500030.154:10584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5379 comm="syz.1.14879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4d875d29 code=0x7ffc0000 [ 392.229515][ T29] audit: type=1326 audit(1735500030.154:10585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5379 comm="syz.1.14879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4d875d29 code=0x7ffc0000 [ 392.239752][ T5205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.253420][ T29] audit: type=1326 audit(1735500030.154:10586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5379 comm="syz.1.14879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e4d875d29 code=0x7ffc0000 [ 392.264401][ T5205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.298130][ T5205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.308707][ T5205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.318569][ T5205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.329729][ T5205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.339655][ T5205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.350112][ T5205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.363078][ T5205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.414760][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14882'. [ 392.424883][ T5385] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14882'. [ 392.462208][ T5205] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.471093][ T5205] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.479887][ T5205] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.488761][ T5205] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.528973][ T5326] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.536231][ T5326] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.544646][ T5326] bridge_slave_0: entered allmulticast mode [ 392.553076][ T5326] bridge_slave_0: entered promiscuous mode [ 392.579391][ T5326] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.586485][ T5326] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.594373][ T5326] bridge_slave_1: entered allmulticast mode [ 392.600993][ T5326] bridge_slave_1: entered promiscuous mode [ 392.622043][ T5326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.657177][ T5326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.702173][ T5326] team0: Port device team_slave_0 added [ 392.709822][ T5326] team0: Port device team_slave_1 added [ 392.751881][ T5326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.758886][ T5326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.785678][ T5326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.799057][ T5326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.806146][ T5326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.833609][ T5326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.864359][ T5420] loop8: detected capacity change from 0 to 128 [ 392.896495][ T5420] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 392.909665][ T5420] ext4 filesystem being mounted at /253/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 392.945765][ T5326] hsr_slave_0: entered promiscuous mode [ 392.952519][ T5326] hsr_slave_1: entered promiscuous mode [ 392.991329][ T5326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.001751][ T2687] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 393.011156][ T5326] Cannot create hsr debugfs directory [ 393.074426][ T5435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14901'. [ 393.083778][ T5435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14901'. [ 393.142570][ T5326] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.183948][ T5449] loop1: detected capacity change from 0 to 512 [ 393.184606][ T5326] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.222728][ T5449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.241395][ T5449] ext4 filesystem being mounted at /919/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.253674][ T5326] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.256507][ T5449] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 12: comm syz.1.14906: path /919/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 393.287932][ T5459] netem: change failed [ 393.305191][ T5449] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 13: comm syz.1.14906: path /919/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 393.327052][ T5449] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 14: comm syz.1.14906: path /919/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 393.350320][ T5449] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 15: comm syz.1.14906: path /919/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 393.371154][ T5449] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 16: comm syz.1.14906: path /919/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 393.398228][ T5326] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.410578][ T5449] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 17: comm syz.1.14906: path /919/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 393.432428][ T5449] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 18: comm syz.1.14906: lblock 23 mapped to illegal pblock 18 (length 1) [ 393.461819][ T5449] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 19: comm syz.1.14906: path /919/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 393.485469][ T5449] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 20: comm syz.1.14906: path /919/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 393.515003][ T5449] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 21: comm syz.1.14906: path /919/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 393.566555][ T5326] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 393.577159][ T5473] netlink: 'syz.2.14919': attribute type 1 has an invalid length. [ 393.590171][ T5326] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 393.599759][ T5326] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 393.618514][ T5326] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 393.665344][ T5326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.674805][ T5480] loop3: detected capacity change from 0 to 128 [ 393.677898][ T5481] syz.8.14923[5481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.681205][ T5481] syz.8.14923[5481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.684687][ T5480] FAT-fs (loop3): Directory bread(block 162) failed [ 393.699021][ T5326] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.721069][ T5480] FAT-fs (loop3): Directory bread(block 163) failed [ 393.722459][ T5481] syz.8.14923[5481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.732371][ T5480] FAT-fs (loop3): Directory bread(block 164) failed [ 393.755220][ T5480] FAT-fs (loop3): Directory bread(block 165) failed [ 393.763709][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.770846][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.779670][ T5481] rdma_op ffff888136170180 conn xmit_rdma 0000000000000000 [ 393.789446][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.796619][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.806515][ T5480] FAT-fs (loop3): Directory bread(block 166) failed [ 393.813330][ T5480] FAT-fs (loop3): Directory bread(block 167) failed [ 393.823564][ T5480] FAT-fs (loop3): Directory bread(block 168) failed [ 393.830490][ T5480] FAT-fs (loop3): Directory bread(block 169) failed [ 393.881335][ T5480] FAT-fs (loop3): Directory bread(block 162) failed [ 393.888658][ T5480] FAT-fs (loop3): Directory bread(block 163) failed [ 393.895644][ T5480] syz.3.14921: attempt to access beyond end of device [ 393.895644][ T5480] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 393.916428][ T5480] syz.3.14921: attempt to access beyond end of device [ 393.916428][ T5480] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 393.965716][ T5326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.012322][ T5505] loop3: detected capacity change from 0 to 164 [ 394.038641][ T5505] ISOFS: unable to read i-node block [ 394.044085][ T5505] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 394.084145][ T5502] loop8: detected capacity change from 0 to 8192 [ 394.203197][ T5524] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.250593][ T5326] veth0_vlan: entered promiscuous mode [ 394.260361][ T5326] veth1_vlan: entered promiscuous mode [ 394.274453][ T5326] veth0_macvtap: entered promiscuous mode [ 394.292986][ T5538] loop8: detected capacity change from 0 to 128 [ 394.300216][ T5326] veth1_macvtap: entered promiscuous mode [ 394.302567][ T5538] FAT-fs (loop8): Directory bread(block 162) failed [ 394.312399][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.323664][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.333703][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.333714][ T5538] FAT-fs (loop8): Directory bread(block 163) failed [ 394.344184][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.344206][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.371879][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.377812][ T5538] FAT-fs (loop8): Directory bread(block 164) failed [ 394.382416][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.398743][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.402102][ T5538] FAT-fs (loop8): Directory bread(block 165) failed [ 394.408580][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.408600][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.425395][ T5538] FAT-fs (loop8): Directory bread(block 166) failed [ 394.445888][ T5326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.460010][ T5538] FAT-fs (loop8): Directory bread(block 167) failed [ 394.466278][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.468421][ T5538] FAT-fs (loop8): Directory bread(block 168) failed [ 394.477242][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.486374][ T5538] FAT-fs (loop8): Directory bread(block 169) failed [ 394.494327][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.512168][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.522078][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.532595][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.543095][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.553654][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.563510][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.574648][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.585926][ T5326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.587923][ T5538] FAT-fs (loop8): Directory bread(block 162) failed [ 394.594803][ T5326] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.609473][ T5326] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.618247][ T5326] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.622179][ T5538] FAT-fs (loop8): Directory bread(block 163) failed [ 394.626984][ T5326] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.643500][ T5538] syz.8.14942: attempt to access beyond end of device [ 394.643500][ T5538] loop8: rw=3, sector=226, nr_sectors = 6 limit=128 [ 394.653703][T24384] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.657527][ T5538] syz.8.14942: attempt to access beyond end of device [ 394.657527][ T5538] loop8: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 394.794928][ T5557] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 394.804176][ T5557] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 394.813303][ T5557] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 394.822405][ T5557] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 394.831515][ T5557] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 394.840677][ T5557] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 394.849818][ T5557] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 394.858936][ T5557] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 394.868061][ T5557] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 394.877123][ T5557] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 394.953055][ T5565] loop6: detected capacity change from 0 to 512 [ 394.964276][ T5565] EXT4-fs: Ignoring removed nobh option [ 394.970017][ T5565] EXT4-fs: Ignoring removed mblk_io_submit option [ 394.984489][ T5565] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.039251][ T5565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.050736][ T5565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.063614][ T5569] loop1: detected capacity change from 0 to 128 [ 395.074254][ T5569] FAT-fs (loop1): Directory bread(block 162) failed [ 395.081203][ T5569] FAT-fs (loop1): Directory bread(block 163) failed [ 395.090272][ T5569] FAT-fs (loop1): Directory bread(block 164) failed [ 395.097068][ T5569] FAT-fs (loop1): Directory bread(block 165) failed [ 395.104374][ T5569] FAT-fs (loop1): Directory bread(block 166) failed [ 395.113131][ T5569] FAT-fs (loop1): Directory bread(block 167) failed [ 395.119960][ T5569] FAT-fs (loop1): Directory bread(block 168) failed [ 395.126661][ T5569] FAT-fs (loop1): Directory bread(block 169) failed [ 395.142798][ T5569] FAT-fs (loop1): Directory bread(block 162) failed [ 395.151667][ T5569] FAT-fs (loop1): Directory bread(block 163) failed [ 395.159429][ T5569] syz.1.14956: attempt to access beyond end of device [ 395.159429][ T5569] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 395.174883][ T5569] syz.1.14956: attempt to access beyond end of device [ 395.174883][ T5569] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 395.215523][ T5577] geneve0: entered allmulticast mode [ 395.344133][ T5591] vlan2: entered promiscuous mode [ 395.444517][ T5608] loop1: detected capacity change from 0 to 164 [ 395.454035][ T5608] ISOFS: unable to read i-node block [ 395.459476][ T5608] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 395.550642][ T5620] netlink: 332 bytes leftover after parsing attributes in process `syz.8.14979'. [ 395.596150][ T5326] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.650202][ T5633] loop8: detected capacity change from 0 to 512 [ 395.659308][ T5633] EXT4-fs: Ignoring removed nobh option [ 395.665006][ T5633] EXT4-fs: Ignoring removed mblk_io_submit option [ 395.673800][ T5625] vlan2: entered promiscuous mode [ 395.681601][ T5633] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.733538][ T5524] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.760375][ T5633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.770991][ T5633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.793533][ T5524] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.820693][ T5649] netlink: 304 bytes leftover after parsing attributes in process `syz.1.14991'. [ 395.873029][ T5524] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.962974][ T5670] vlan2: entered promiscuous mode [ 396.297578][ T2687] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.397525][ T5705] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 396.594016][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 396.594034][ T29] audit: type=1326 audit(1735500034.594:10773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.2.15036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2c375d29 code=0x7ffc0000 [ 396.616502][ T5732] loop3: detected capacity change from 0 to 512 [ 396.631438][ T29] audit: type=1326 audit(1735500034.624:10774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.2.15036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb2c375d29 code=0x7ffc0000 [ 396.655128][ T29] audit: type=1326 audit(1735500034.634:10775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.2.15036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2c375d29 code=0x7ffc0000 [ 396.678893][ T29] audit: type=1326 audit(1735500034.634:10776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.2.15036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2c375d29 code=0x7ffc0000 [ 396.726588][ T29] audit: type=1400 audit(1735500034.654:10777): avc: denied { mounton } for pid=5731 comm="syz.3.15027" path="/11/file0" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 396.750032][ T29] audit: type=1326 audit(1735500034.684:10778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.2.15036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7ffb2c375d29 code=0x7ffc0000 [ 396.773723][ T29] audit: type=1326 audit(1735500034.684:10779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.2.15036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2c375d29 code=0x7ffc0000 [ 396.798090][ T29] audit: type=1326 audit(1735500034.684:10780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.2.15036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2c375d29 code=0x7ffc0000 [ 396.821798][ T29] audit: type=1400 audit(1735500034.724:10781): avc: denied { create } for pid=5733 comm="syz.6.15028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 396.844269][ T29] audit: type=1400 audit(1735500034.824:10782): avc: denied { write } for pid=5733 comm="syz.6.15028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 396.856042][ T5732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.880675][ T5732] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.935812][ T5732] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 12: comm syz.3.15027: path /11/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 396.967843][ T5732] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 13: comm syz.3.15027: path /11/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 397.002057][ T5732] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 14: comm syz.3.15027: path /11/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 397.026765][ T5732] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 15: comm syz.3.15027: path /11/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 397.030288][ T5748] loop6: detected capacity change from 0 to 512 [ 397.070432][ T5732] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 16: comm syz.3.15027: path /11/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 397.080469][ T5748] EXT4-fs: Ignoring removed oldalloc option [ 397.119551][ T5748] EXT4-fs error (device loop6): ext4_xattr_inode_iget:436: comm syz.6.15033: Parent and EA inode have the same ino 15 [ 397.134764][ T5748] EXT4-fs (loop6): Remounting filesystem read-only [ 397.141696][ T5748] EXT4-fs warning (device loop6): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 397.152142][ T5748] EXT4-fs (loop6): 1 orphan inode deleted [ 397.155654][ T5732] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 17: comm syz.3.15027: path /11/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 397.158516][ T5748] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.191242][ T5748] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 397.198440][ T5748] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.215867][ T5732] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 18: comm syz.3.15027: lblock 23 mapped to illegal pblock 18 (length 1) [ 397.257171][ T5732] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 19: comm syz.3.15027: path /11/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 397.298203][ T5732] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 20: comm syz.3.15027: path /11/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 397.322266][ T5732] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 21: comm syz.3.15027: path /11/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 397.502636][ T5776] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 397.569590][ T5205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.735568][ T5802] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.309373][ T5816] loop8: detected capacity change from 0 to 512 [ 398.342934][ T5816] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.360318][ T5816] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.364157][ T5825] vxlan0: entered promiscuous mode [ 398.376655][ T5825] vxlan0: entered allmulticast mode [ 398.378174][ T5816] EXT4-fs error (device loop8): ext4_readdir:261: inode #2: block 12: comm syz.8.15063: path /303/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 398.407121][ T5816] EXT4-fs error (device loop8): ext4_readdir:261: inode #2: block 13: comm syz.8.15063: path /303/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 398.447932][ T5816] EXT4-fs error (device loop8): ext4_readdir:261: inode #2: block 14: comm syz.8.15063: path /303/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 398.471064][ T5816] EXT4-fs error (device loop8): ext4_readdir:261: inode #2: block 15: comm syz.8.15063: path /303/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 398.494499][ T5816] EXT4-fs error (device loop8): ext4_readdir:261: inode #2: block 16: comm syz.8.15063: path /303/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 398.515648][ T5832] loop1: detected capacity change from 0 to 256 [ 398.525830][ T5833] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.15072'. [ 398.535620][ T5816] EXT4-fs error (device loop8): ext4_readdir:261: inode #2: block 17: comm syz.8.15063: path /303/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 398.566603][ T5816] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #2: block 18: comm syz.8.15063: lblock 23 mapped to illegal pblock 18 (length 1) [ 398.589297][ T5816] EXT4-fs error (device loop8): ext4_readdir:261: inode #2: block 19: comm syz.8.15063: path /303/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 398.610315][ T5816] EXT4-fs error (device loop8): ext4_readdir:261: inode #2: block 20: comm syz.8.15063: path /303/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 398.642820][ T5816] EXT4-fs error (device loop8): ext4_readdir:261: inode #2: block 21: comm syz.8.15063: path /303/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 398.862219][ T5863] 9pnet_fd: Insufficient options for proto=fd [ 398.971045][ T5873] loop3: detected capacity change from 0 to 512 [ 398.995684][ T5873] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 399.011576][ T5873] EXT4-fs (loop3): mount failed [ 399.023857][ T5802] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.082821][ T5802] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.151853][ T5802] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.212333][ T2687] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.217795][ T5802] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.234620][ T5802] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.245980][ T5892] netlink: 16215 bytes leftover after parsing attributes in process `syz.8.15100'. [ 399.254055][ T5802] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.278960][ T5802] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.289038][ T5896] netlink: 'syz.3.15101': attribute type 1 has an invalid length. [ 399.489147][ T5923] 9pnet_fd: p9_fd_create_tcp (5923): problem connecting socket to 127.0.0.1 [ 399.596875][ T5927] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.665946][ T5927] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.680709][ T5948] syz.3.15127[5948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.680775][ T5948] syz.3.15127[5948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.694824][ T5948] syz.3.15127[5948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.738966][ T5954] netlink: 64859 bytes leftover after parsing attributes in process `syz.6.15131'. [ 399.783971][ T5956] loop8: detected capacity change from 0 to 512 [ 399.799236][ T5927] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.815863][ T5956] EXT4-fs warning (device loop8): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 399.832874][ T5956] EXT4-fs (loop8): mount failed [ 399.880353][ T5927] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.924616][ T5975] syz.6.15140[5975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.924720][ T5975] syz.6.15140[5975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.943507][ T5975] syz.6.15140[5975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.979495][ T5977] syz.3.15151[5977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.992424][ T5977] syz.3.15151[5977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.004077][ T5977] syz.3.15151[5977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.021585][ T5927] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.045881][ T5927] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.058848][ T5927] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.071804][ T5927] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.313248][ T6020] syz.2.15162[6020] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.314527][ T6016] macvtap0: entered promiscuous mode [ 400.337108][ T6016] macvtap0: left promiscuous mode [ 400.360862][ T6022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.417695][ T6031] netlink: 'syz.1.15166': attribute type 1 has an invalid length. [ 400.462382][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15169'. [ 400.473895][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15169'. [ 400.500674][ T6022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.525422][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15169'. [ 400.536946][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15169'. [ 400.552549][ T6022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.582993][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15169'. [ 400.594390][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15169'. [ 400.641583][ T6022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.767291][ T6022] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.791356][ T6022] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.811312][ T6022] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.832232][ T6022] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.838550][ T6067] loop6: detected capacity change from 0 to 512 [ 400.850659][ T6067] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 400.922314][ T6067] EXT4-fs error (device loop6): __ext4_iget:4984: inode #15: block 1803188595: comm syz.6.15183: invalid block [ 401.003590][ T6067] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.15183: couldn't read orphan inode 15 (err -117) [ 401.019636][ T6067] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.043890][ T6067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.182569][ T6094] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.190857][ T6094] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.199163][ T6094] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.207454][ T6094] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.217599][ T6094] vxlan0: entered promiscuous mode [ 401.222817][ T6094] vxlan0: entered allmulticast mode [ 401.235493][ T6094] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.243975][ T6094] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.252451][ T6094] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.261485][ T6094] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.302772][ T6097] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.316601][ T6103] macvtap0: entered promiscuous mode [ 401.323039][ T6103] macvtap0: left promiscuous mode [ 401.403491][ T6097] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.416621][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15203'. [ 401.481988][ T6097] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.580205][ T6138] macvtap0: entered promiscuous mode [ 401.587287][ T6138] macvtap0: left promiscuous mode [ 401.611405][ T6097] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.675398][ T6097] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.687472][ T6097] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.702513][ T6097] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.725308][ T6097] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.775300][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 401.775341][ T29] audit: type=1400 audit(1735500039.774:10990): avc: denied { write } for pid=6158 comm="syz.6.15224" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 401.807829][ T6159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.816253][ T6159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.829358][ T29] audit: type=1400 audit(1735500039.804:10991): avc: denied { ioctl } for pid=6158 comm="syz.6.15224" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 401.856623][ T29] audit: type=1326 audit(1735500039.834:10992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6160 comm="syz.2.15225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2c375d29 code=0x7ffc0000 [ 401.880383][ T29] audit: type=1326 audit(1735500039.834:10993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6160 comm="syz.2.15225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2c375d29 code=0x7ffc0000 [ 401.904101][ T29] audit: type=1326 audit(1735500039.834:10994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6160 comm="syz.2.15225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7ffb2c375d29 code=0x7ffc0000 [ 401.927894][ T29] audit: type=1326 audit(1735500039.834:10995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6160 comm="syz.2.15225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2c375d29 code=0x7ffc0000 [ 401.951596][ T29] audit: type=1326 audit(1735500039.834:10996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6160 comm="syz.2.15225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2c375d29 code=0x7ffc0000 [ 401.999286][ T6169] loop1: detected capacity change from 0 to 512 [ 402.011290][ T29] audit: type=1400 audit(1735500040.014:10997): avc: denied { mounton } for pid=6168 comm="syz.1.15223" path="/978/bus" dev="devtmpfs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 402.035593][ T6169] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 402.089460][ T6169] EXT4-fs error (device loop1): __ext4_iget:4984: inode #15: block 1803188595: comm syz.1.15223: invalid block [ 402.109971][ T6169] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.15223: couldn't read orphan inode 15 (err -117) [ 402.132289][ T6169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.161005][ T6169] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.194567][ T6180] macvtap0: entered promiscuous mode [ 402.200740][ T6180] macvtap0: left promiscuous mode [ 402.201705][ T6182] netlink: 'syz.1.15235': attribute type 1 has an invalid length. [ 402.221016][ T6178] vlan2: entered promiscuous mode [ 402.226096][ T6178] team0: entered promiscuous mode [ 402.231214][ T6178] team_slave_0: entered promiscuous mode [ 402.236935][ T6178] team_slave_1: entered promiscuous mode [ 402.240394][ T6184] loop1: detected capacity change from 0 to 1024 [ 402.246761][ T6178] team0: Device vlan2 is already an upper device of the team interface [ 402.250302][ T6184] EXT4-fs: Ignoring removed nomblk_io_submit option [ 402.265075][ T6184] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 402.265364][ T6178] team0: left promiscuous mode [ 402.279458][ T6178] team_slave_0: left promiscuous mode [ 402.281060][ T6184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.285049][ T6178] team_slave_1: left promiscuous mode [ 402.318244][ T29] audit: type=1400 audit(1735500040.324:10998): avc: denied { setattr } for pid=6183 comm="syz.1.15236" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 402.343303][ T6184] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2793: inode #2: comm syz.1.15236: corrupted in-inode xattr: bad e_name length [ 402.343872][ T29] audit: type=1400 audit(1735500040.344:10999): avc: denied { relabelfrom } for pid=6186 comm="syz.8.15237" name="UDPv6" dev="sockfs" ino=118998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 402.358611][ T6187] SELinux: Context system_u:object_r:event_device_t:s0 is not valid (left unmapped). [ 402.394066][ T6188] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #2: comm syz.1.15236: corrupted in-inode xattr: bad e_name length [ 402.434496][T24384] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.508944][ T6200] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.562044][ T6200] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.659636][ T6200] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.721831][ T6200] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.765959][ T6242] mmap: syz.8.15260 (6242): VmData 167489536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 402.843408][ T6251] netlink: 'syz.2.15265': attribute type 1 has an invalid length. [ 402.913976][ T6262] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6262 comm=syz.6.15272 [ 402.926613][ T6262] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6262 comm=syz.6.15272 [ 402.932775][ T6254] loop3: detected capacity change from 0 to 8192 [ 403.038935][ T6275] vlan2: entered promiscuous mode [ 403.044304][ T6275] team0: entered promiscuous mode [ 403.049651][ T6275] team_slave_0: entered promiscuous mode [ 403.055403][ T6275] team_slave_1: entered promiscuous mode [ 403.085798][ T6277] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 403.087787][ T6275] team0: Device vlan2 is already an upper device of the team interface [ 403.103123][ T6275] team0: left promiscuous mode [ 403.108025][ T6275] team_slave_0: left promiscuous mode [ 403.113515][ T6275] team_slave_1: left promiscuous mode [ 403.231447][ T6285] netlink: 'syz.8.15282': attribute type 1 has an invalid length. [ 403.288472][ T6289] bond1: entered promiscuous mode [ 403.293646][ T6289] bond1: entered allmulticast mode [ 403.299123][ T6289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.388994][ T6289] bond1 (unregistering): Released all slaves [ 403.902207][ T6347] loop6: detected capacity change from 0 to 2048 [ 404.414189][ T6200] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.425661][ T6200] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.437112][ T6200] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.448171][ T6200] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.541945][ T6376] netlink: 'syz.6.15324': attribute type 3 has an invalid length. [ 404.550594][ T6376] __nla_validate_parse: 15 callbacks suppressed [ 404.550623][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15324'. [ 404.568902][ T6372] macvtap0: entered promiscuous mode [ 404.576646][ T6372] macvtap0: left promiscuous mode [ 404.727407][ T6396] loop3: detected capacity change from 0 to 2048 [ 404.741743][ T6400] loop1: detected capacity change from 0 to 1024 [ 404.761611][ T6396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.767456][ T6404] loop6: detected capacity change from 0 to 2048 [ 404.780659][ T6400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.795595][ T6396] EXT4-fs error (device loop3): ext4_find_extent:938: inode #2: comm syz.3.15334: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 404.812572][ T6396] EXT4-fs (loop3): Remounting filesystem read-only [ 404.820906][ T6404] loop6: p1 < > p4 [ 404.827965][ T6404] loop6: p4 size 8388608 extends beyond EOD, truncated [ 404.841879][ T5205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.845660][ T6400] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.1.15336: corrupted in-inode xattr: bad magic number in in-inode xattr [ 404.917426][T24384] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.096575][ T6443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.105822][ T6443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.206524][ T6458] bpf_get_probe_write_proto: 14 callbacks suppressed [ 405.206543][ T6458] syz.1.15360[6458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 405.215942][ T6458] syz.1.15360[6458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 405.227664][ T6458] syz.1.15360[6458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 405.271129][ T6464] vlan2: entered promiscuous mode [ 405.287669][ T6464] team0: entered promiscuous mode [ 405.292810][ T6464] team_slave_0: entered promiscuous mode [ 405.298655][ T6464] team_slave_1: entered promiscuous mode [ 405.305989][ T6464] team0: Device vlan2 is already an upper device of the team interface [ 405.315768][ T6464] team0: left promiscuous mode [ 405.320663][ T6464] team_slave_0: left promiscuous mode [ 405.326281][ T6464] team_slave_1: left promiscuous mode [ 405.331972][ T6466] loop3: detected capacity change from 0 to 512 [ 405.341109][ T6466] EXT4-fs: Ignoring removed mblk_io_submit option [ 405.347628][ T6466] EXT4-fs: Ignoring removed orlov option [ 405.359456][ T6466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.372789][ T6466] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 405.407872][ T5205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.526311][ T6480] syz.8.15372[6480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 405.526482][ T6480] syz.8.15372[6480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 405.541866][ T6480] syz.8.15372[6480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 405.630367][ T6492] pimreg: entered allmulticast mode [ 405.703385][ T6492] pimreg: left allmulticast mode [ 406.182168][ T6557] xt_hashlimit: size too large, truncated to 1048576 [ 406.189020][ T6557] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 406.210485][ T6559] loop3: detected capacity change from 0 to 2048 [ 406.248433][ T6559] loop3: p1 < > p4 [ 406.252884][ T6559] loop3: p4 size 8388608 extends beyond EOD, truncated [ 406.343748][ T6563] lo speed is unknown, defaulting to 1000 [ 406.591251][ T6595] loop8: detected capacity change from 0 to 2048 [ 406.650057][ T6595] loop8: p1 < > p4 [ 406.654583][ T6595] loop8: p4 size 8388608 extends beyond EOD, truncated [ 406.819534][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 406.819553][ T29] audit: type=1326 audit(1735500044.823:11150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz.6.15442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60c9d5d29 code=0x7ffc0000 [ 406.853732][ T29] audit: type=1326 audit(1735500044.823:11151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz.6.15442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60c9d5d29 code=0x7ffc0000 [ 406.877441][ T29] audit: type=1326 audit(1735500044.853:11152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz.6.15442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fc60c9d5d29 code=0x7ffc0000 [ 406.901187][ T29] audit: type=1326 audit(1735500044.853:11153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz.6.15442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60c9d5d29 code=0x7ffc0000 [ 406.924877][ T29] audit: type=1326 audit(1735500044.853:11154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz.6.15442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60c9d5d29 code=0x7ffc0000 [ 406.949071][ T29] audit: type=1326 audit(1735500044.883:11155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.1.15443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4d875d29 code=0x7ffc0000 [ 406.972810][ T29] audit: type=1326 audit(1735500044.883:11156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.1.15443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4d875d29 code=0x7ffc0000 [ 406.975390][ T6635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.996474][ T29] audit: type=1326 audit(1735500044.883:11157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.1.15443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f9e4d875d29 code=0x7ffc0000 [ 406.996525][ T29] audit: type=1326 audit(1735500044.883:11158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.1.15443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4d875d29 code=0x7ffc0000 [ 406.996559][ T29] audit: type=1326 audit(1735500044.883:11159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.1.15443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4d875d29 code=0x7ffc0000 [ 407.078433][ T6635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.094460][ T6636] pimreg: entered allmulticast mode [ 407.104749][ T6636] pimreg: left allmulticast mode [ 407.201112][ T6645] netlink: 64 bytes leftover after parsing attributes in process `syz.6.15449'. [ 407.280858][ T6651] xt_hashlimit: size too large, truncated to 1048576 [ 407.287613][ T6651] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 407.503011][ T6683] loop6: detected capacity change from 0 to 164 [ 407.514799][ T6683] loop6: detected capacity change from 0 to 512 [ 407.521595][ T6683] journal_path: Lookup failure for './bus' [ 407.527669][ T6683] EXT4-fs: error: could not find journal device path [ 407.536073][ T6685] Cannot find set identified by id 632 to match [ 407.759989][ T6716] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15484'. [ 407.835644][ T6715] loop1: detected capacity change from 0 to 164 [ 407.859868][ T6715] loop1: detected capacity change from 0 to 512 [ 407.894172][ T6715] journal_path: Lookup failure for './bus' [ 407.900125][ T6715] EXT4-fs: error: could not find journal device path [ 407.950135][ T6743] SELinux: failed to load policy [ 408.014286][ T6752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.024965][ T6752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.075643][ T6757] netlink: 20 bytes leftover after parsing attributes in process `syz.8.15501'. [ 408.359561][ T6768] lo speed is unknown, defaulting to 1000 [ 408.633904][ T6786] loop8: detected capacity change from 0 to 128 [ 408.641330][ T6786] EXT4-fs: Ignoring removed nobh option [ 408.650321][ T6788] loop1: detected capacity change from 0 to 128 [ 408.660540][ T6786] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 408.673096][ T6786] ext4 filesystem being mounted at /378/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 408.702077][ T2687] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 408.724134][ T6794] 9pnet_fd: Insufficient options for proto=fd [ 408.734201][ T6796] netlink: 244 bytes leftover after parsing attributes in process `syz.1.15517'. [ 408.796894][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15522'. [ 408.933017][ T6826] loop8: detected capacity change from 0 to 1024 [ 408.939893][ T6826] EXT4-fs: inline encryption not supported [ 408.946728][ T6826] EXT4-fs: inline encryption not supported [ 408.956927][ T6828] syzkaller1: entered promiscuous mode [ 408.962520][ T6828] syzkaller1: entered allmulticast mode [ 408.976314][ T6826] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.997271][ T6826] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.8.15534: corrupted in-inode xattr: bad magic number in in-inode xattr [ 409.041084][ T6839] netlink: 'syz.1.15533': attribute type 6 has an invalid length. [ 409.066446][ T6832] lo speed is unknown, defaulting to 1000 [ 409.107457][ T6847] loop6: detected capacity change from 0 to 512 [ 409.110418][ T2687] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.160311][ T6847] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.173439][ T6847] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.216209][ T6847] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 409.251437][ T6847] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 409.278302][ T5326] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.403556][ T6880] netlink: 3 bytes leftover after parsing attributes in process `syz.8.15556'. [ 409.416056][ T6880] 0ªX¹¦À: renamed from caif0 [ 409.433767][ T6880] 0ªX¹¦À: entered allmulticast mode [ 409.439106][ T6880] net_ratelimit: 6648 callbacks suppressed [ 409.439123][ T6880] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 409.737178][ T6921] binfmt_misc: register: failed to install interpreter file ./file2 [ 410.475460][ T7006] hub 9-0:1.0: USB hub found [ 410.480353][ T7006] hub 9-0:1.0: 8 ports detected [ 410.648500][ T7029] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7029 comm=syz.1.15624 [ 411.159102][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15635'. [ 411.685207][ T7086] loop1: detected capacity change from 0 to 512 [ 411.705098][ T7086] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.15647: corrupted in-inode xattr: invalid ea_ino [ 411.724973][ T7046] syz.3.15632 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 411.739283][ T7046] CPU: 0 UID: 0 PID: 7046 Comm: syz.3.15632 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 411.750097][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 411.760180][ T7046] Call Trace: [ 411.763511][ T7046] [ 411.766539][ T7046] dump_stack_lvl+0xf2/0x150 [ 411.771310][ T7046] dump_stack+0x15/0x1a [ 411.775551][ T7046] dump_header+0x83/0x2d0 [ 411.779954][ T7046] oom_kill_process+0x341/0x4c0 [ 411.784894][ T7046] out_of_memory+0x9af/0xbe0 [ 411.789585][ T7046] ? css_next_descendant_pre+0x11c/0x140 [ 411.795339][ T7046] mem_cgroup_out_of_memory+0x13e/0x190 [ 411.800912][ T7046] try_charge_memcg+0x508/0x7f0 [ 411.805784][ T7046] obj_cgroup_charge_pages+0xbd/0x1a0 [ 411.811220][ T7046] __memcg_kmem_charge_page+0x9d/0x170 [ 411.816692][ T7046] __alloc_pages_noprof+0x1bc/0x340 [ 411.822013][ T7046] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 411.827487][ T7046] alloc_pages_noprof+0xe1/0x100 [ 411.832520][ T7046] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 411.838399][ T7046] __kvmalloc_node_noprof+0x121/0x170 [ 411.843791][ T7046] ? ip_set_alloc+0x1f/0x30 [ 411.848418][ T7046] ip_set_alloc+0x1f/0x30 [ 411.852823][ T7046] hash_netiface_create+0x273/0x730 [ 411.858049][ T7046] ? __nla_parse+0x40/0x60 [ 411.862535][ T7046] ? __pfx_hash_netiface_create+0x10/0x10 [ 411.868372][ T7046] ip_set_create+0x359/0x8a0 [ 411.872985][ T7046] ? memchr+0x1/0x50 [ 411.876946][ T7046] ? __nla_parse+0x40/0x60 [ 411.881382][ T7046] nfnetlink_rcv_msg+0x4a9/0x570 [ 411.886369][ T7046] netlink_rcv_skb+0x12c/0x230 [ 411.891189][ T7046] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 411.896737][ T7046] nfnetlink_rcv+0x16c/0x15d0 [ 411.901431][ T7046] ? kmem_cache_free+0xdc/0x2d0 [ 411.906298][ T7046] ? nlmon_xmit+0x51/0x60 [ 411.910655][ T7046] ? __kfree_skb+0x102/0x150 [ 411.915260][ T7046] ? consume_skb+0x49/0x160 [ 411.919795][ T7046] ? nlmon_xmit+0x51/0x60 [ 411.924199][ T7046] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 411.929559][ T7046] ? __dev_queue_xmit+0xb6e/0x2090 [ 411.934758][ T7046] ? ref_tracker_free+0x3a5/0x410 [ 411.939795][ T7046] ? __dev_queue_xmit+0x186/0x2090 [ 411.944947][ T7046] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 411.950440][ T7046] netlink_unicast+0x599/0x670 [ 411.955221][ T7046] netlink_sendmsg+0x5cc/0x6e0 [ 411.960034][ T7046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.965377][ T7046] __sock_sendmsg+0x140/0x180 [ 411.970204][ T7046] ____sys_sendmsg+0x312/0x410 [ 411.974982][ T7046] __sys_sendmsg+0x19d/0x230 [ 411.979679][ T7046] __x64_sys_sendmsg+0x46/0x50 [ 411.984465][ T7046] x64_sys_call+0x2734/0x2dc0 [ 411.989156][ T7046] do_syscall_64+0xc9/0x1c0 [ 411.993716][ T7046] ? clear_bhb_loop+0x55/0xb0 [ 411.998403][ T7046] ? clear_bhb_loop+0x55/0xb0 [ 412.003143][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.009069][ T7046] RIP: 0033:0x7f7ff9b25d29 [ 412.013542][ T7046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.033276][ T7046] RSP: 002b:00007f7ff8197038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.041709][ T7046] RAX: ffffffffffffffda RBX: 00007f7ff9d15fa0 RCX: 00007f7ff9b25d29 [ 412.049703][ T7046] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 412.057761][ T7046] RBP: 00007f7ff9ba1b08 R08: 0000000000000000 R09: 0000000000000000 [ 412.065832][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.073879][ T7046] R13: 0000000000000000 R14: 00007f7ff9d15fa0 R15: 00007ffd2e2dfdb8 [ 412.081874][ T7046] [ 412.085874][ T7046] memory: usage 307200kB, limit 307200kB, failcnt 1888 [ 412.093280][ T7046] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 412.101232][ T7046] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 412.108597][ T7046] Memory cgroup stats for /syz3: [ 412.108677][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 412.108691][ T29] audit: type=1400 audit(1735500562.870:11358): avc: denied { egress } for pid=7089 comm="syz.2.15649" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 412.145070][ T29] audit: type=1400 audit(1735500562.870:11359): avc: denied { sendto } for pid=7089 comm="syz.2.15649" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 412.172918][ T7046] cache 0 [ 412.176616][ T7046] rss 0 [ 412.179420][ T7046] shmem 0 [ 412.182391][ T7046] mapped_file 0 [ 412.185973][ T7046] dirty 0 [ 412.188981][ T7046] writeback 0 [ 412.192369][ T7046] workingset_refault_anon 357 [ 412.197094][ T7046] workingset_refault_file 3196 [ 412.201895][ T7046] swap 204800 [ 412.205881][ T7046] swapcached 12288 [ 412.209642][ T7046] pgpgin 435438 [ 412.213104][ T7046] pgpgout 435433 [ 412.216723][ T7046] pgfault 495393 [ 412.220425][ T7046] pgmajfault 189 [ 412.224342][ T7046] inactive_anon 0 [ 412.228071][ T7046] active_anon 8192 [ 412.231203][ T7086] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.15647: couldn't read orphan inode 15 (err -117) [ 412.231812][ T7046] inactive_file 0 [ 412.231824][ T7046] active_file 8192 [ 412.252083][ T7046] unevictable 0 [ 412.255576][ T7046] hierarchical_memory_limit 314572800 [ 412.260981][ T7046] hierarchical_memsw_limit 9223372036854771712 [ 412.267317][ T7046] total_cache 0 [ 412.270789][ T7046] total_rss 0 [ 412.274071][ T7046] total_shmem 0 [ 412.278288][ T7046] total_mapped_file 0 [ 412.282291][ T7046] total_dirty 0 [ 412.285796][ T7046] total_writeback 0 [ 412.289645][ T7046] total_workingset_refault_anon 357 [ 412.294898][ T7046] total_workingset_refault_file 3196 [ 412.300221][ T7046] total_swap 204800 [ 412.304107][ T7046] total_swapcached 12288 [ 412.307987][ T29] audit: type=1400 audit(1735500563.266:11360): avc: denied { read } for pid=7095 comm="syz.6.15651" dev="nsfs" ino=4026532390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 412.309306][ T7046] total_pgpgin 435438 [ 412.329739][ T29] audit: type=1400 audit(1735500563.266:11361): avc: denied { open } for pid=7095 comm="syz.6.15651" path="net:[4026532390]" dev="nsfs" ino=4026532390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 412.329816][ T29] audit: type=1400 audit(1735500563.266:11362): avc: denied { create } for pid=7097 comm="syz.8.15652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 412.329844][ T29] audit: type=1400 audit(1735500563.266:11363): avc: denied { write } for pid=7097 comm="syz.8.15652" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 412.333836][ T7046] total_pgpgout 435433 [ 412.333845][ T7046] total_pgfault 495393 [ 412.379123][ T7086] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.398424][ T7046] total_pgmajfault 189 [ 412.405097][ T29] audit: type=1400 audit(1735500563.376:11364): avc: denied { mount } for pid=7085 comm="syz.1.15647" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 412.407301][ T7046] total_inactive_anon 0 [ 412.440472][ T29] audit: type=1400 audit(1735500563.415:11365): avc: denied { setattr } for pid=7085 comm="syz.1.15647" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 412.445168][ T7046] total_active_anon 8192 [ 412.476688][ T7046] total_inactive_file 0 [ 412.480886][ T7046] total_active_file 8192 [ 412.485171][ T7046] total_unevictable 0 [ 412.489272][ T7046] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.15632,pid=7045,uid=0 [ 412.504884][ T7046] Memory cgroup out of memory: Killed process 7045 (syz.3.15632) total-vm:93648kB, anon-rss:788kB, file-rss:22212kB, shmem-rss:128kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 412.583841][ T29] audit: type=1400 audit(1735500563.554:11366): avc: denied { listen } for pid=7105 comm="syz.6.15656" lport=51908 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 412.659682][ T29] audit: type=1400 audit(1735500563.584:11367): avc: denied { accept } for pid=7105 comm="syz.6.15656" lport=51908 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 412.733310][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15660'. [ 412.787419][T24384] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 412.805375][ T7118] pimreg: entered allmulticast mode [ 412.814744][ T7118] pimreg: left allmulticast mode [ 412.879263][ T7124] loop1: detected capacity change from 0 to 512 [ 412.919922][ T7124] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.15662: invalid indirect mapped block 256 (level 2) [ 412.946192][ T7124] EXT4-fs (loop1): 2 truncates cleaned up [ 412.952567][ T7124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.969383][ T7135] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15669'. [ 412.978568][ T7135] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15669'. [ 413.033657][T24384] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.059588][ T7147] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7147 comm=syz.3.15676 [ 413.090491][ T7150] bridge0: port 3(dummy0) entered blocking state [ 413.097096][ T7150] bridge0: port 3(dummy0) entered disabled state [ 413.109407][ T7150] dummy0: entered allmulticast mode [ 413.116401][ T7150] dummy0: entered promiscuous mode [ 413.122176][ T7150] bridge0: port 3(dummy0) entered blocking state [ 413.128583][ T7150] bridge0: port 3(dummy0) entered forwarding state [ 413.372647][ T7182] netlink: 24 bytes leftover after parsing attributes in process `syz.8.15693'. [ 413.550017][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15703'. [ 413.607793][ T7215] program syz.6.15705 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.206326][ T7268] x_tables: duplicate underflow at hook 2 [ 414.217227][ T7271] usb usb1: usbfs: process 7271 (syz.2.15733) did not claim interface 0 before use [ 414.314462][ T7288] netlink: 133492 bytes leftover after parsing attributes in process `syz.1.15736'. [ 414.418801][ T7302] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 414.418801][ T7302] program syz.6.15749 not setting count and/or reply_len properly [ 414.519918][ T7318] loop8: detected capacity change from 0 to 4096 [ 414.560140][ T7327] loop3: detected capacity change from 0 to 512 [ 414.578031][ T7318] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.590756][ T7327] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 414.599951][ T7327] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 414.649054][ T7327] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 414.665367][ T2687] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.674696][ T7327] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 414.686717][ T7327] System zones: 0-2, 18-18, 34-34 [ 414.703303][ T7327] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 414.745178][ T7327] EXT4-fs (loop3): 1 truncate cleaned up [ 414.747915][ T7334] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 414.751407][ T7327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.779964][ T7334] SELinux: failed to load policy [ 414.791392][ T7341] xt_nat: multiple ranges no longer supported [ 414.835549][ T5205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.251625][ T7409] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 415.251625][ T7409] program syz.3.15795 not setting count and/or reply_len properly [ 415.321970][ T7414] loop3: detected capacity change from 0 to 4096 [ 415.347015][ T7414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.378307][ T5205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.427734][ T7432] netlink: 'syz.3.15807': attribute type 8 has an invalid length. [ 415.440601][ T7428] lo speed is unknown, defaulting to 1000 [ 415.558160][ T7428] netlink: 'syz.2.15806': attribute type 4 has an invalid length. [ 415.566093][ T7428] netlink: 17 bytes leftover after parsing attributes in process `syz.2.15806'. [ 415.690753][ T7443] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 415.690753][ T7443] program syz.2.15812 not setting count and/or reply_len properly [ 415.952666][ T7482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7482 comm=syz.2.15830 [ 415.959171][ T7484] syz.8.15831[7484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.965354][ T7484] syz.8.15831[7484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.979254][ T7484] syz.8.15831[7484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.097692][ T7484] lo speed is unknown, defaulting to 1000 [ 416.133302][ T7499] vlan2: entered promiscuous mode [ 416.141381][ T7499] $Hÿ: (slave vlan2): Opening slave failed [ 416.309562][ T7517] batadv_slave_1: entered promiscuous mode [ 416.316286][ T7516] batadv_slave_1: left promiscuous mode [ 416.415969][ T7527] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15849'. [ 416.479133][ T7539] loop3: detected capacity change from 0 to 128 [ 416.538207][ T7539] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 416.551632][ T7539] ext4 filesystem being mounted at /189/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 416.605331][ T7549] netlink: 'syz.8.15859': attribute type 21 has an invalid length. [ 416.613438][ T7549] netlink: 156 bytes leftover after parsing attributes in process `syz.8.15859'. [ 416.677833][ T5205] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 416.721439][ T7566] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15866'. [ 416.748182][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15868'. [ 416.799165][ T7576] loop6: detected capacity change from 0 to 128 [ 416.808921][ T7579] netlink: 180 bytes leftover after parsing attributes in process `syz.2.15874'. [ 416.820123][ T7576] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 416.834622][ T7576] ext4 filesystem being mounted at /216/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 416.868949][ T7579] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15874'. [ 416.886260][ T7580] netlink: 64 bytes leftover after parsing attributes in process `syz.3.15876'. [ 416.984016][ T5326] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 417.003216][ T7597] loop8: detected capacity change from 0 to 164 [ 417.022199][ T7597] Unable to read rock-ridge attributes [ 417.029177][ T7597] Unable to read rock-ridge attributes [ 417.086415][ T7603] 9pnet: Could not find request transport: t [ 417.170601][ T7625] loop8: detected capacity change from 0 to 1024 [ 417.177744][ T7625] EXT4-fs: Ignoring removed nomblk_io_submit option [ 417.197004][ T7629] loop3: detected capacity change from 0 to 512 [ 417.204503][ T7629] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 417.213696][ T7629] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 417.225149][ T7629] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 417.283185][ T7629] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 417.299642][ T7629] System zones: 0-2, 18-18, 34-34 [ 417.313499][ T7625] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.342383][ T7629] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 417.365351][ T7629] EXT4-fs (loop3): 1 truncate cleaned up [ 417.371828][ T7629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.394068][ T7625] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 417.418302][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 417.418320][ T29] audit: type=1400 audit(1735500824.351:11741): avc: denied { read write } for pid=7628 comm="syz.3.15897" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 417.447926][ T29] audit: type=1400 audit(1735500824.351:11742): avc: denied { open } for pid=7628 comm="syz.3.15897" path="/197/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 417.495874][ T2687] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.529637][ T5205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.594523][ T29] audit: type=1400 audit(1735500824.531:11743): avc: denied { create } for pid=7645 comm="syz.6.15904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 417.628813][ T29] audit: type=1400 audit(1735500824.551:11744): avc: denied { getopt } for pid=7645 comm="syz.6.15904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 417.663635][ T7647] netlink: 24 bytes leftover after parsing attributes in process `syz.8.15901'. [ 417.756412][ T7649] lo speed is unknown, defaulting to 1000 [ 417.820962][ T7653] netlink: 'syz.8.15906': attribute type 4 has an invalid length. [ 417.828946][ T7653] netlink: 17 bytes leftover after parsing attributes in process `syz.8.15906'. [ 418.031216][ T7655] bridge0: entered promiscuous mode [ 418.039237][ T7655] macvlan0: entered promiscuous mode [ 418.047869][ T7655] bridge0: port 3(macvlan0) entered blocking state [ 418.054547][ T7655] bridge0: port 3(macvlan0) entered disabled state [ 418.064764][ T7655] macvlan0: entered allmulticast mode [ 418.070223][ T7655] bridge0: entered allmulticast mode [ 418.078357][ T7655] macvlan0: left allmulticast mode [ 418.083610][ T7655] bridge0: left allmulticast mode [ 418.093313][ T7655] bridge0: left promiscuous mode [ 418.180266][ T7664] netlink: 'syz.1.15907': attribute type 4 has an invalid length. [ 418.219296][ T29] audit: type=1400 audit(1735500825.151:11745): avc: denied { mac_admin } for pid=7667 comm="syz.6.15913" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 418.231639][ T7668] loop6: detected capacity change from 0 to 512 [ 418.260083][ T7668] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 418.261618][ T29] audit: type=1400 audit(1735500825.191:11746): avc: denied { create } for pid=7667 comm="syz.6.15913" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 418.268634][ T29] audit: type=1400 audit(1735500825.191:11747): avc: denied { associate } for pid=7667 comm="syz.6.15913" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 418.361069][ T29] audit: type=1400 audit(1735500825.191:11748): avc: denied { mounton } for pid=7667 comm="syz.6.15913" path="/225/file0" dev="tmpfs" ino=1169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 418.454368][ T29] audit: type=1400 audit(1735500825.391:11749): avc: denied { ioctl } for pid=7676 comm="syz.2.15918" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 418.616050][ T7668] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.634279][ T7668] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.669314][ T7686] loop3: detected capacity change from 0 to 1024 [ 418.683502][ T7686] EXT4-fs: Ignoring removed nomblk_io_submit option [ 418.690409][ T29] audit: type=1400 audit(1735500825.601:11750): avc: denied { create } for pid=7667 comm="syz.6.15913" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 418.695605][ T7668] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.15913: bg 0: block 255: padding at end of block bitmap is not set [ 418.698711][ T7688] vlan2: entered promiscuous mode [ 418.790696][ T7668] EXT4-fs (loop6): Remounting filesystem read-only [ 418.803554][ T7688] bond0: entered promiscuous mode [ 418.807722][ T7668] EXT4-fs warning (device loop6): ext4_xattr_inode_lookup_create:1605: inode #19: comm syz.6.15913: cleanup dec ref error -117 [ 418.815041][ T7688] bond_slave_0: entered promiscuous mode [ 418.838305][ T7688] bond_slave_1: entered promiscuous mode [ 418.846358][ T7688] bond0: left promiscuous mode [ 418.847018][ T5326] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.851141][ T7688] bond_slave_0: left promiscuous mode [ 418.851245][ T7688] bond_slave_1: left promiscuous mode [ 418.861901][ T7686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.890310][ T7686] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 418.927039][ T5205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.032938][ T7705] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15929'. [ 419.088700][ T7711] loop6: detected capacity change from 0 to 512 [ 419.124391][ T7711] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.137099][ T7711] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.315355][ T5326] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.751720][ T7753] loop8: detected capacity change from 0 to 512 [ 419.794336][ T7750] 0ªX¹¦À: renamed from caif0 [ 419.808852][ T7750] 0ªX¹¦À: entered allmulticast mode [ 419.814291][ T7750] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 419.882723][ T7759] syz.2.15953[7759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.882867][ T7759] syz.2.15953[7759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.896780][ T7759] syz.2.15953[7759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.004133][ T7753] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.15950: bg 0: block 248: padding at end of block bitmap is not set [ 420.077258][ T7753] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.15950: Failed to acquire dquot type 1 [ 420.112107][ T5205] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 420.123213][ T5205] CPU: 0 UID: 0 PID: 5205 Comm: syz-executor Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 420.134139][ T5205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 420.134338][ T7753] EXT4-fs (loop8): 1 truncate cleaned up [ 420.144218][ T5205] Call Trace: [ 420.144230][ T5205] [ 420.144240][ T5205] dump_stack_lvl+0xf2/0x150 [ 420.160793][ T5205] dump_stack+0x15/0x1a [ 420.165065][ T5205] dump_header+0x83/0x2d0 [ 420.167915][ T7753] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.169483][ T5205] oom_kill_process+0x341/0x4c0 [ 420.184772][ T7753] ext4 filesystem being mounted at /465/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 420.186798][ T5205] out_of_memory+0x9af/0xbe0 [ 420.201664][ T5205] ? css_next_descendant_pre+0x11c/0x140 [ 420.207404][ T5205] mem_cgroup_out_of_memory+0x13e/0x190 [ 420.213043][ T5205] try_charge_memcg+0x508/0x7f0 [ 420.217970][ T5205] charge_memcg+0x50/0xc0 [ 420.222379][ T5205] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 420.228385][ T5205] __read_swap_cache_async+0x236/0x480 [ 420.233957][ T5205] swap_cluster_readahead+0x279/0x3f0 [ 420.239417][ T5205] swapin_readahead+0xe4/0x6f0 [ 420.244252][ T5205] ? swap_cache_get_folio+0x77/0x210 [ 420.249580][ T5205] do_swap_page+0x31b/0x2550 [ 420.254287][ T5205] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 420.259791][ T5205] ? __rcu_read_lock+0x36/0x50 [ 420.264676][ T5205] ? __pfx_default_wake_function+0x10/0x10 [ 420.270534][ T5205] handle_mm_fault+0x8e4/0x2ac0 [ 420.275484][ T5205] exc_page_fault+0x3b9/0x650 [ 420.280301][ T5205] asm_exc_page_fault+0x26/0x30 [ 420.285249][ T5205] RIP: 0033:0x7f7ff9b585a5 [ 420.289691][ T5205] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 3f 19 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 420.309335][ T5205] RSP: 002b:00007ffd2e2e0108 EFLAGS: 00010246 [ 420.315538][ T5205] RAX: 0000000000000000 RBX: 00000000000001b9 RCX: 00007f7ff9b585a3 [ 420.323627][ T5205] RDX: 00007ffd2e2e0120 RSI: 0000000000000000 RDI: 0000000000000000 [ 420.331666][ T5205] RBP: 00007ffd2e2e017c R08: 000000000128c54f R09: 7fffffffffffffff [ 420.339755][ T5205] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 420.347807][ T5205] R13: 0000000000066751 R14: 00007ffd2e2e01d0 R15: 0000000000000bb8 [ 420.355831][ T5205] [ 420.360676][ T5205] memory: usage 307200kB, limit 307200kB, failcnt 3438 [ 420.368092][ T5205] memory+swap: usage 307468kB, limit 9007199254740988kB, failcnt 0 [ 420.376069][ T5205] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 420.384081][ T5205] Memory cgroup stats for /syz3: [ 420.384785][ T5205] cache 0 [ 420.392787][ T5205] rss 0 [ 420.395643][ T5205] shmem 0 [ 420.398601][ T5205] mapped_file 0 [ 420.402072][ T5205] dirty 0 [ 420.405130][ T5205] writeback 0 [ 420.408417][ T5205] workingset_refault_anon 408 [ 420.413182][ T5205] workingset_refault_file 3196 [ 420.417974][ T5205] swap 274432 [ 420.421338][ T5205] swapcached 24576 [ 420.425177][ T5205] pgpgin 442323 [ 420.428652][ T5205] pgpgout 442315 [ 420.432234][ T5205] pgfault 507470 [ 420.435879][ T5205] pgmajfault 218 [ 420.439438][ T5205] inactive_anon 0 [ 420.443108][ T5205] active_anon 24576 [ 420.446926][ T5205] inactive_file 0 [ 420.450573][ T5205] active_file 8192 [ 420.454402][ T5205] unevictable 0 [ 420.457864][ T5205] hierarchical_memory_limit 314572800 [ 420.463321][ T5205] hierarchical_memsw_limit 9223372036854771712 [ 420.469485][ T5205] total_cache 0 [ 420.472991][ T5205] total_rss 0 [ 420.476290][ T5205] total_shmem 0 [ 420.479750][ T5205] total_mapped_file 0 [ 420.483783][ T5205] total_dirty 0 [ 420.487339][ T5205] total_writeback 0 [ 420.491300][ T5205] total_workingset_refault_anon 408 [ 420.496694][ T5205] total_workingset_refault_file 3196 [ 420.501996][ T5205] total_swap 274432 [ 420.505898][ T5205] total_swapcached 24576 [ 420.510156][ T5205] total_pgpgin 442323 [ 420.514167][ T5205] total_pgpgout 442315 [ 420.518255][ T5205] total_pgfault 507470 [ 420.522324][ T5205] total_pgmajfault 218 [ 420.526432][ T5205] total_inactive_anon 0 [ 420.530659][ T5205] total_active_anon 24576 [ 420.535020][ T5205] total_inactive_file 0 [ 420.539242][ T5205] total_active_file 8192 [ 420.543605][ T5205] total_unevictable 0 [ 420.547612][ T5205] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.15941,pid=7730,uid=0 [ 420.562335][ T5205] Memory cgroup out of memory: Killed process 7730 (syz.3.15941) total-vm:95696kB, anon-rss:788kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 420.585542][ T2687] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.692322][ T7794] syz.8.15965[7794] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.692390][ T7794] syz.8.15965[7794] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.706124][ T7794] syz.8.15965[7794] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.841954][ T7807] loop1: detected capacity change from 0 to 1024 [ 420.863167][ T7807] EXT4-fs: Ignoring removed nomblk_io_submit option [ 420.875631][ T7807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.892265][ T7807] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 420.900642][ T7811] loop8: detected capacity change from 0 to 512 [ 420.921139][T24384] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.941652][ T7811] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.968952][ T7811] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.980136][ T7821] syz.3.15980[7821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.980263][ T7821] syz.3.15980[7821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.992717][ T7821] syz.3.15980[7821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.064208][ T7824] loop3: detected capacity change from 0 to 512 [ 421.093499][ T7824] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 421.112383][ T7824] EXT4-fs (loop3): 1 truncate cleaned up [ 421.118627][ T7824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.134148][ T2687] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.174741][ T5205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.247759][ T7843] loop3: detected capacity change from 0 to 512 [ 421.307438][ T7843] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.15990: bg 0: block 248: padding at end of block bitmap is not set [ 421.332940][ T7852] loop8: detected capacity change from 0 to 164 [ 421.351367][ T7843] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.15990: Failed to acquire dquot type 1 [ 421.394062][ T7858] syz.2.15996[7858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.394158][ T7858] syz.2.15996[7858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.404794][ T7843] EXT4-fs (loop3): 1 truncate cleaned up [ 421.413198][ T7858] syz.2.15996[7858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.439704][ T7843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.477606][ T7843] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 421.521304][ T5205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.632696][ T7876] lo speed is unknown, defaulting to 1000 [ 421.883662][ T7876] netlink: 'syz.3.16002': attribute type 4 has an invalid length. [ 421.891573][ T7876] __nla_validate_parse: 4 callbacks suppressed [ 421.891670][ T7876] netlink: 17 bytes leftover after parsing attributes in process `syz.3.16002'. [ 422.088011][ T7897] sctp: [Deprecated]: syz.3.16023 (pid 7897) Use of int in maxseg socket option. [ 422.088011][ T7897] Use struct sctp_assoc_value instead [ 422.116442][ T7898] loop6: detected capacity change from 0 to 512 [ 422.179929][ T7898] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.16013: bg 0: block 248: padding at end of block bitmap is not set [ 422.207202][ T7905] loop3: detected capacity change from 0 to 512 [ 422.227764][ T7905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 422.248550][ T7898] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.16013: Failed to acquire dquot type 1 [ 422.265874][ T7909] SELinux: Context · is not valid (left unmapped). [ 422.273091][ T7905] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 422.293773][ T7898] EXT4-fs (loop6): 1 truncate cleaned up [ 422.314019][ T7898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.362475][ T7898] ext4 filesystem being mounted at /251/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 422.377769][ T5205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.419165][ T7916] batadv_slave_1: entered promiscuous mode [ 422.435158][ T7916] batadv_slave_1: left promiscuous mode [ 422.441824][ T5326] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.476401][ T7920] syz.6.16022[7920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.476519][ T7920] syz.6.16022[7920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.517777][ T7920] syz.6.16022[7920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.530410][ T7925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.576935][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 422.576950][ T29] audit: type=1400 audit(1735500828.479:11835): avc: denied { connect } for pid=7927 comm="syz.8.16026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 422.583857][ T7925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.680761][ T7933] batadv_slave_1: entered promiscuous mode [ 422.683671][ T7935] syz.8.16029[7935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.699828][ T7932] batadv_slave_1: left promiscuous mode [ 422.793895][ T29] audit: type=1326 audit(1735500828.679:11836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7939 comm="syz.3.16032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff9b25d29 code=0x7ffc0000 [ 422.815903][ T7937] lo speed is unknown, defaulting to 1000 [ 422.817885][ T29] audit: type=1326 audit(1735500828.679:11837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7939 comm="syz.3.16032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f7ff9b25d29 code=0x7ffc0000 [ 422.846903][ T29] audit: type=1326 audit(1735500828.679:11838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7939 comm="syz.3.16032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff9b25d29 code=0x7ffc0000 [ 422.973088][ T8] IPVS: starting estimator thread 0... [ 423.044191][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 423.074056][ T7952] IPVS: using max 2400 ests per chain, 120000 per kthread [ 423.127599][ T7964] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 423.256747][ T7980] netlink: 'syz.8.16050': attribute type 4 has an invalid length. [ 423.298953][ T7982] loop8: detected capacity change from 0 to 512 [ 423.307655][ T7982] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 423.344359][ T7982] EXT4-fs (loop8): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 423.344867][ T7985] netlink: 'syz.2.16052': attribute type 1 has an invalid length. [ 423.418163][ T7990] loop3: detected capacity change from 0 to 1024 [ 423.445318][ T3375] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 423.452727][ T2687] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.478321][ T7990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.511290][ T29] audit: type=1400 audit(1735500829.408:11839): avc: denied { write } for pid=7989 comm="syz.3.16054" path="/233/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 423.541246][ T7990] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 423.590514][ T7990] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 16 with error 28 [ 423.602938][ T7990] EXT4-fs (loop3): This should not happen!! Data will be lost [ 423.602938][ T7990] [ 423.612678][ T7990] EXT4-fs (loop3): Total free blocks count 0 [ 423.618832][ T7990] EXT4-fs (loop3): Free/Dirty block details [ 423.624792][ T7990] EXT4-fs (loop3): free_blocks=68451041280 [ 423.630679][ T7990] EXT4-fs (loop3): dirty_blocks=64 [ 423.635896][ T7990] EXT4-fs (loop3): Block reservation details [ 423.641913][ T7990] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 423.651599][ T7990] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28 [ 423.651649][ T29] audit: type=1326 audit(1735500829.558:11840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8005 comm="syz.2.16061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2c375d29 code=0x7ffc0000 [ 423.688205][ T29] audit: type=1326 audit(1735500829.558:11841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8005 comm="syz.2.16061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2c375d29 code=0x7ffc0000 [ 423.757498][ T29] audit: type=1326 audit(1735500829.568:11842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8005 comm="syz.2.16061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb2c375d29 code=0x7ffc0000 [ 423.781952][ T29] audit: type=1326 audit(1735500829.568:11843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8005 comm="syz.2.16061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2c375d29 code=0x7ffc0000 [ 423.805642][ T29] audit: type=1326 audit(1735500829.568:11844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8005 comm="syz.2.16061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb2c375d29 code=0x7ffc0000 [ 423.847074][ T8023] SELinux: syz.6.16069 (8023) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 423.923535][ T3375] kernel write not supported for file /497/attr/fscreate (pid: 3375 comm: kworker/1:3) [ 423.960719][ T8033] netlink: 168 bytes leftover after parsing attributes in process `syz.2.16074'. [ 424.004136][ T8040] loop8: detected capacity change from 0 to 1024 [ 424.079372][ T8040] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.093275][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 424.102810][ T8040] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 424.107483][ T8052] loop3: detected capacity change from 0 to 164 [ 424.158779][ T8040] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 16 with error 28 [ 424.171324][ T8040] EXT4-fs (loop8): This should not happen!! Data will be lost [ 424.171324][ T8040] [ 424.181208][ T8040] EXT4-fs (loop8): Total free blocks count 0 [ 424.187319][ T8040] EXT4-fs (loop8): Free/Dirty block details [ 424.193311][ T8040] EXT4-fs (loop8): free_blocks=68451041280 [ 424.199298][ T8040] EXT4-fs (loop8): dirty_blocks=64 [ 424.204424][ T8040] EXT4-fs (loop8): Block reservation details [ 424.210464][ T8040] EXT4-fs (loop8): i_reserved_data_blocks=4 [ 424.293995][ T8040] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28 [ 424.351608][T20048] kernel write not supported for file /1032/attr/fscreate (pid: 20048 comm: kworker/1:12) [ 424.361655][ T8041] lo speed is unknown, defaulting to 1000 [ 424.428159][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16089'. [ 424.789580][ T8108] SELinux: syz.1.16106 (8108) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 425.137577][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 425.229367][ T8160] loop1: detected capacity change from 0 to 8192 [ 425.239089][ T8160] syz.1.16132: attempt to access beyond end of device [ 425.239089][ T8160] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 425.257402][ T8160] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 425.266212][ T8160] FAT-fs (loop1): Filesystem has been set read-only [ 425.288536][ T8160] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 425.297040][ T8160] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 425.321579][ T8170] sg_write: data in/out 14238/14 bytes for SCSI command 0x0-- guessing data in; [ 425.321579][ T8170] program syz.6.16138 not setting count and/or reply_len properly [ 425.631303][ T8210] loop3: detected capacity change from 0 to 512 [ 425.631565][ T8209] loop8: detected capacity change from 0 to 512 [ 425.638459][ T8210] EXT4-fs: Ignoring removed mblk_io_submit option [ 425.651467][ T8210] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 425.678761][ T8210] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.16155: corrupted in-inode xattr: e_value out of bounds [ 425.693934][ T8214] netlink: 133492 bytes leftover after parsing attributes in process `syz.6.16158'. [ 425.695425][ T8210] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.16155: couldn't read orphan inode 15 (err -117) [ 425.718491][ T8210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.791538][ T5205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.924840][ T8247] loop3: detected capacity change from 0 to 164 [ 425.951692][ T8247] Unable to read rock-ridge attributes [ 425.963052][ T8247] Unable to read rock-ridge attributes [ 425.970402][ T8247] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 425.979361][ T8251] loop8: detected capacity change from 0 to 4096 [ 425.986136][ T8253] netlink: 104 bytes leftover after parsing attributes in process `syz.2.16175'. [ 425.992657][ T8251] EXT4-fs: Ignoring removed nobh option [ 426.046494][ T8251] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.067899][ T8263] SELinux: syz.3.16180 (8263) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 426.101336][ T8268] loop3: detected capacity change from 0 to 164 [ 426.119210][ T2687] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.125227][ T8268] Unsupported NM flag settings (8) [ 426.157949][ T8273] loop6: detected capacity change from 0 to 1024 [ 426.175629][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 426.273194][ T8287] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16192'. [ 426.342673][ T8300] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.16194'. [ 426.354863][ T8293] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.16194'. [ 426.424672][ T8310] xt_hashlimit: max too large, truncated to 1048576 [ 426.452355][ T8317] netlink: 133492 bytes leftover after parsing attributes in process `syz.8.16216'. [ 426.747121][ T8366] bpf_get_probe_write_proto: 2 callbacks suppressed [ 426.747142][ T8366] syz.2.16229[8366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 426.757788][ T8366] syz.2.16229[8366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 426.798555][ T8370] loop6: detected capacity change from 0 to 164 [ 426.800210][ T8371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.823107][ T8366] syz.2.16229[8366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 426.834049][ T8370] Unable to read rock-ridge attributes [ 426.836225][ T8371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.878717][ T8370] Unable to read rock-ridge attributes [ 426.884759][ T8370] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 426.917257][ T8375] loop3: detected capacity change from 0 to 512 [ 426.931287][ T8377] __nla_validate_parse: 2 callbacks suppressed [ 426.931307][ T8377] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16235'. [ 426.949223][ T8375] EXT4-fs (loop3): failed to initialize system zone (-117) [ 426.962598][ T8375] EXT4-fs (loop3): mount failed [ 427.013315][ T8382] xt_hashlimit: max too large, truncated to 1048576 [ 427.025854][ T8388] SELinux: syz.8.16240 (8388) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 427.113722][ T8400] loop1: detected capacity change from 0 to 164 [ 427.141817][ T8400] Unable to read rock-ridge attributes [ 427.170126][ T8400] Unable to read rock-ridge attributes [ 427.200240][ T8400] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 427.208925][ T3376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 427.243718][ T8418] loop8: detected capacity change from 0 to 512 [ 427.253748][ T8414] xt_hashlimit: max too large, truncated to 1048576 [ 427.285135][ T8418] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.16255: Invalid inode bitmap blk 4 in block_group 0 [ 427.307494][ T8418] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.335272][ T2687] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.385254][ T8434] syzkaller1: entered promiscuous mode [ 427.391534][ T8434] syzkaller1: entered allmulticast mode [ 427.458460][ T8447] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16269'. [ 427.467637][ T8447] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16269'. [ 427.562933][ T8460] Invalid ELF header magic: != ELF [ 427.588831][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 427.588846][ T29] audit: type=1400 audit(1735500833.496:12018): avc: denied { create } for pid=8463 comm="syz.8.16278" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 427.628954][ T29] audit: type=1400 audit(1735500833.526:12019): avc: denied { connect } for pid=8463 comm="syz.8.16278" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 427.629072][ T29] audit: type=1400 audit(1735500833.526:12020): avc: denied { write } for pid=8463 comm="syz.8.16278" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 427.629140][ T29] audit: type=1400 audit(1735500833.526:12021): avc: denied { sendto } for pid=8463 comm="syz.8.16278" scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 427.629178][ T8470] usb usb1: usbfs: process 8470 (syz.3.16280) did not claim interface 2 before use [ 427.629253][ T29] ================================================================== [ 427.629283][ T29] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 427.629338][ T29] [ 427.629344][ T29] write to 0xffffffff866e0a10 of 8 bytes by task 8470 on cpu 0: [ 427.629365][ T29] prb_reserve+0x740/0xb60 [ 427.629391][ T29] vprintk_store+0x558/0x870 [ 427.629416][ T29] vprintk_emit+0x15e/0x680 [ 427.629441][ T29] dev_vprintk_emit+0x1df/0x210 [ 427.629469][ T29] dev_printk_emit+0x82/0xb0 [ 427.629497][ T29] __dev_printk+0xf6/0x110 [ 427.629516][ T29] _dev_warn+0x99/0xc0 [ 427.629543][ T29] check_ctrlrecip+0x6db/0x7a0 [ 427.629565][ T29] proc_do_submiturb+0xece/0x1de0 [ 427.629587][ T29] usbdev_ioctl+0x1d86/0x3e00 [ 427.629606][ T29] __se_sys_ioctl+0xc9/0x140 [ 427.629631][ T29] __x64_sys_ioctl+0x43/0x50 [ 427.629655][ T29] x64_sys_call+0x1690/0x2dc0 [ 427.629675][ T29] do_syscall_64+0xc9/0x1c0 [ 427.629695][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.629729][ T29] [ 427.629734][ T29] read to 0xffffffff866e0a10 of 8 bytes by task 29 on cpu 1: [ 427.629750][ T29] _prb_read_valid+0x1ec/0xba0 [ 427.629772][ T29] prb_final_commit+0x144/0x1f0 [ 427.629794][ T29] vprintk_store+0x75d/0x870 [ 427.629817][ T29] vprintk_emit+0x15e/0x680 [ 427.629842][ T29] vprintk_default+0x26/0x30 [ 427.629867][ T29] vprintk+0x75/0x80 [ 427.629882][ T29] _printk+0x7a/0xa0 [ 427.629900][ T29] kauditd_hold_skb+0x1a3/0x1b0 [ 427.629936][ T29] kauditd_send_queue+0x288/0x2e0 [ 427.629963][ T29] kauditd_thread+0x42a/0x650 [ 427.629988][ T29] kthread+0x1d1/0x210 [ 427.630005][ T29] ret_from_fork+0x4b/0x60 [ 427.630023][ T29] ret_from_fork_asm+0x1a/0x30 [ 427.630043][ T29] [ 427.630047][ T29] value changed: 0x0000000000000dee -> 0x0000000000000000 [ 427.630059][ T29] [ 427.630063][ T29] Reported by Kernel Concurrency Sanitizer on: [ 427.630071][ T29] CPU: 1 UID: 0 PID: 29 Comm: kauditd Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 427.630100][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 427.630113][ T29] ================================================================== [ 427.712717][ T29] audit: type=1326 audit(1735500833.616:12022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8478 comm="syz.8.16284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc057655d29 code=0x7ffc0000 [ 427.712768][ T29] audit: type=1326 audit(1735500833.616:12023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8478 comm="syz.8.16284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc057655d29 code=0x7ffc0000 [ 427.712805][ T29] audit: type=1326 audit(1735500833.616:12024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8478 comm="syz.8.16284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc057655d29 code=0x7ffc0000 [ 427.712912][ T29] audit: type=1326 audit(1735500833.616:12025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8478 comm="syz.8.16284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc057655d29 code=0x7ffc0000 [ 427.713234][ T29] audit: type=1326 audit(1735500833.616:12026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8480 comm="syz.8.16284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc0576885e5 code=0x7ffc0000 [ 427.713379][ T29] audit: type=1326 audit(1735500833.616:12027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8478 comm="syz.8.16284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc057655d29 code=0x7ffc0000 [ 427.941649][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 428.259003][ T3376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 429.287182][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 430.328290][ T3376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 431.368266][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.409670][ T3376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 433.049334][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 433.449263][ T3372] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 434.492613][ T3376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 434.970382][ T3372] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 435.530986][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 436.571416][ T3372] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 437.612019][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration