last executing test programs: 1m7.550533724s ago: executing program 3 (id=4441): r0 = syz_io_uring_setup(0x2e3b, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x4000, &(0x7f0000000080)={[{@fat=@errors_continue}, {}, {@nodots}, {@dots}]}, 0x1, 0x298, &(0x7f0000000340)="$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") io_uring_enter(r0, 0x567, 0xa1ff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 1m7.47993489s ago: executing program 3 (id=4442): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) 1m7.432428203s ago: executing program 3 (id=4444): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) open(&(0x7f0000000180)='./cgroup\x00', 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x185e41, 0x22) 1m6.573430912s ago: executing program 3 (id=4470): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@noquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 1m6.491401499s ago: executing program 3 (id=4471): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0xb0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800) 1m6.335365761s ago: executing program 3 (id=4478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) 1m6.334668922s ago: executing program 32 (id=4478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) 35.551447659s ago: executing program 5 (id=5799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x70bd2b, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 35.551048279s ago: executing program 5 (id=5801): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 35.515667252s ago: executing program 5 (id=5806): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc085}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009b40)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) 35.323452778s ago: executing program 5 (id=5813): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 35.153862131s ago: executing program 5 (id=5824): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 34.928992199s ago: executing program 5 (id=5836): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r0}, 0x38) 34.904584601s ago: executing program 33 (id=5836): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r0}, 0x38) 1.451449483s ago: executing program 6 (id=7206): pipe2$9p(&(0x7f0000000200), 0x880) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 1.143026198s ago: executing program 6 (id=7213): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x200, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000a80)={0x2c, 0x1, r3, 0xa, r0}, 0x10) 1.097456832s ago: executing program 6 (id=7214): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010"], 0x80}, 0x1f}, 0x0) 996.70703ms ago: executing program 4 (id=7218): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xdf8bd000) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 634.827029ms ago: executing program 1 (id=7220): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = syz_io_uring_setup(0x83a, &(0x7f0000000180)={0x0, 0x2b94, 0x1000, 0x4, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1000}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file2\x00', 0x0, 0x200}) 519.243218ms ago: executing program 2 (id=7222): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r1, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) shutdown(r1, 0x1) 443.251734ms ago: executing program 6 (id=7223): socket(0x2, 0xa, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000340)={0x11, 0x3, r1, 0x1, 0x80}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[], 0x0) 429.677875ms ago: executing program 2 (id=7224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x4d}}], 0x30}, 0x0) 376.5709ms ago: executing program 0 (id=7225): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x4}, 0x18) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x3, 0x10, 0x6, 0x3, 0x0, 0x100, 0x0}) 331.134343ms ago: executing program 2 (id=7226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r1}, &(0x7f0000000580), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) 322.688854ms ago: executing program 4 (id=7227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x103940) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0xc, 0x2, 0xffffffff, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000040)={0x80, 0x18, 0x2, 0xfffffff7, 0x0, 0x9}) 315.678934ms ago: executing program 0 (id=7228): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x0, 0xa) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000140)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 262.799729ms ago: executing program 1 (id=7229): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) 262.427359ms ago: executing program 6 (id=7230): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f3, &(0x7f0000000900)={'sit0\x00', @random="0000330c1100"}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 259.898319ms ago: executing program 2 (id=7231): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0xe39, 0x4) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1c, 0x3a, 0xff, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x8c07, 0xe, @local, 0x1, 0x1, 0x4, 0x7}}}}}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) 231.088201ms ago: executing program 1 (id=7233): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) shutdown(r0, 0x1) 230.836911ms ago: executing program 4 (id=7234): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 215.603242ms ago: executing program 1 (id=7235): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0x300}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 168.056076ms ago: executing program 2 (id=7236): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x88, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 165.971817ms ago: executing program 0 (id=7237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf250d000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 164.452967ms ago: executing program 4 (id=7238): r0 = socket$netlink(0x10, 0x3, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r0) 152.685678ms ago: executing program 1 (id=7239): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$eJzs3c9vG0sdAPDvOnGTtHk4Dzg8nsSjgofSCmonDW0jDiVICE6VKOXCKYTEiaI4cRQ7bRNVKBV/ABLil+DEiQsSZ4SE+icgpEpwRwiBKmjLgQNgtM6ahtRJnNc4buPPR5ru7M7ufmfqeOzZWXkD6FsXI2ImIgYi4nJEFLLtuSzFzm5K93v29MF8mpJoDN35WxJJtq11riRbXsgOG46Ir30l4lvJy3FrW9src5VKeSNbL9VX10u1re0ry6tzS+Wl8trM1OT16RvT16YnTqytN7/05x9+9+dfvvmbz9774+xfL307rdZoVra3HZ3Y6XC/3abnm/8XLYMRsXGcYK+xgaw9+V5XBACAjqTf8T8cEZ+MiOc/6XVtAAAAgG5ofGE0/pVENAAAAIAzK9e8BzbJFbN7AUYjlysWd+/h/Wicz1WqtfpnFqubawu798qORT63uFwpT2T3Co9FPknXJ5v5F+tX961PRcTbEfH9wkhzvThfrSz0+uIHAAAA9IkL+8b//yjsjv8BAACAM2as1xUAAAAAus74HwAAAM6+A8f/yeDpVgQAAADohq/eupWmRuv51wt3tzZXqnevLJRrK8XVzfnifHVjvbhUrS41f7Nv9ajzVarV9c/F2ub9Ur1cq5dqW9uzq9XNtfps87nes+VG4VSaBQAAAOzx9ice/SGJiJ3PjzRT6lxWlj/68Jnu1g7optzxdk+6VQ/g9A30ugJAz7jBF/pXB2N84Iw7YmD/g33rx7xsAAAAvA7GP/ZK8//mA+ENZiAP/cv8P/Qv8//Qv8z/Q58bOnqX4YMKfnvCdQEAALpmtJmSXDGbCxyNXK5YjHir+ViAfLK4XClPRMSHIuL3hfxQuj7Z60oDAAAAAAAAAAAAAAAAAAAAAAAAwBum0UiiAQAAAJxpEbm/JNmD/McL74/uvz5wLvlnobmMiHs/vfOj+3P1+sZkuv3v/9te/3G2/WprS+obp3wlAwAAAGhpjdNb43gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEnPnj6Yb6XTjPvkixEx1i7+YAw3l8O/KkTE+edJDO45LomIgROIv/MwIt5pFz9JqxVjWS32x89FxEiP4184gfjQzx6l/c9M+v7L73v/5eJic9n+/TeYpVf15OJB/V+u1f81+7l2/d9bh596uJV59/EvSy+VFrL4DyPeHWzf/7TiJ+3in+u8jd/8+vb2QWWNn0WMH/H5k8Yv1VfXS7Wt7SvLq3NL5aXy2tTU5PXpG9PXpidKi8uVcvZv2xjf+/iv/3NQ/LT959vG3+1/D2x/RLzfYfv//fj+048cEv/Sp9q//u8cEj/9m/h09jmQlo+38ju7+b3e+8Xv3jus/QsHtP/Q1z8iLnXY/su3v/OnDncFAE5BbWt7Za5SKW90JTPStTPLpJnq2lH7pN8TP3CI/Kn8kch0M3M7ew2PfXgPOyUAAKArXnzp319yjAkeAAAAAAAAAAAAAAAAAAAA4JV0/UfIhv7/lwWGe9dUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBD/TcAAP//V7HNuw==") chmod(&(0x7f0000000340)='./file1\x00', 0x0) 131.473899ms ago: executing program 4 (id=7240): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x18}, 0x8, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 117.4657ms ago: executing program 1 (id=7241): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000140)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}]}, 0x1, 0x445, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980d6", 0x31) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 108.624551ms ago: executing program 6 (id=7242): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = syz_io_uring_setup(0x83a, &(0x7f0000000180)={0x0, 0x2b94, 0x1000, 0x4, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1000}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file2\x00', 0x0, 0x200}) 75.407764ms ago: executing program 2 (id=7243): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x2f) 63.177005ms ago: executing program 0 (id=7244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) personality(0x8) uname(&(0x7f0000000180)=""/224) 44.124746ms ago: executing program 4 (id=7245): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) 165.75µs ago: executing program 0 (id=7246): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 0 (id=7247): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0xe39, 0x4) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1c, 0x3a, 0xff, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x8c07, 0xe, @local, 0x1, 0x1, 0x4, 0x7}}}}}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) kernel console output (not intermixed with test programs): 098][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3976'. [ 128.141355][T12649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3980'. [ 128.162568][T12649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3980'. [ 128.202546][T12653] loop3: detected capacity change from 0 to 8192 [ 128.310698][T12677] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3992'. [ 128.331337][T12675] SELinux: failed to load policy [ 128.379010][T12679] loop3: detected capacity change from 0 to 8192 [ 128.399896][T12679] bio_check_eod: 103 callbacks suppressed [ 128.399912][T12679] syz.3.3993: attempt to access beyond end of device [ 128.399912][T12679] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 128.434639][T12687] rdma_op ffff88812e47e180 conn xmit_rdma 0000000000000000 [ 128.443538][T12679] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 128.451608][T12679] FAT-fs (loop3): Filesystem has been set read-only [ 128.466481][T12691] SELinux: failed to load policy [ 128.480168][T12679] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 128.492891][T12679] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 128.504094][T12693] sd 0:0:1:0: device reset [ 128.554139][T12699] atomic_op ffff888103285528 conn xmit_atomic 0000000000000000 [ 128.597740][ T3309] block device autoloading is deprecated and will be removed. [ 128.611998][T12711] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 128.611998][T12711] program syz.4.4010 not setting count and/or reply_len properly [ 128.677697][T12714] syzkaller0: entered promiscuous mode [ 128.683335][T12714] syzkaller0: entered allmulticast mode [ 129.101238][T12750] netlink: 'syz.4.4028': attribute type 1 has an invalid length. [ 129.511192][T12770] loop4: detected capacity change from 0 to 256 [ 129.562054][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 129.562069][ T29] audit: type=1326 audit(130.538:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12777 comm="syz.1.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c16edeb69 code=0x7ffc0000 [ 129.596546][ T29] audit: type=1326 audit(130.538:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12777 comm="syz.1.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c16edeb69 code=0x7ffc0000 [ 129.626579][ T29] audit: type=1326 audit(130.568:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12777 comm="syz.1.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c16edeb69 code=0x7ffc0000 [ 129.649576][ T29] audit: type=1326 audit(130.568:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12777 comm="syz.1.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c16edeb69 code=0x7ffc0000 [ 129.672814][ T29] audit: type=1326 audit(130.568:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12777 comm="syz.1.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f6c16edeb69 code=0x7ffc0000 [ 129.695710][ T29] audit: type=1326 audit(130.568:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12777 comm="syz.1.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c16edeb69 code=0x7ffc0000 [ 129.718927][ T29] audit: type=1326 audit(130.568:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12777 comm="syz.1.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c16edeb69 code=0x7ffc0000 [ 129.748995][T12780] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 129.755585][T12780] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 129.763253][T12780] vhci_hcd vhci_hcd.0: Device attached [ 129.770492][T12784] vhci_hcd: connection closed [ 129.770750][ T3969] vhci_hcd: stop threads [ 129.781850][ T3969] vhci_hcd: release socket [ 129.786340][ T3969] vhci_hcd: disconnect device [ 130.265314][T12793] usb usb7: usbfs: process 12793 (syz.1.4047) did not claim interface 0 before use [ 130.371482][ T29] audit: type=1400 audit(131.348:3927): avc: denied { ioctl } for pid=12804 comm="syz.0.4052" path="socket:[33698]" dev="sockfs" ino=33698 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.371579][T12805] syzkaller1: entered promiscuous mode [ 130.402137][T12805] syzkaller1: entered allmulticast mode [ 130.507573][T12807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.555887][T12816] loop4: detected capacity change from 0 to 512 [ 130.577537][T12816] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.4056: corrupted inode contents [ 130.596624][T12816] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.4056: mark_inode_dirty error [ 130.617245][T12816] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.4056: corrupted inode contents [ 130.631655][T12816] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.4056: mark_inode_dirty error [ 130.643939][T12816] Quota error (device loop4): write_blk: dquota write failed [ 130.652110][T12816] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 130.654356][T12828] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 130.662890][T12816] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4056: Failed to acquire dquot type 0 [ 130.669462][T12828] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 130.669607][T12828] vhci_hcd vhci_hcd.0: Device attached [ 130.683468][T12816] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.4056: corrupted inode contents [ 130.707819][T12816] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.4056: mark_inode_dirty error [ 130.719742][T12829] vhci_hcd: connection closed [ 130.720018][ T51] vhci_hcd: stop threads [ 130.720246][T12816] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.4056: corrupted inode contents [ 130.725030][ T51] vhci_hcd: release socket [ 130.730928][T12816] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.4056: mark_inode_dirty error [ 130.741817][ T51] vhci_hcd: disconnect device [ 130.763403][T12816] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.4056: corrupted inode contents [ 130.777887][T12816] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 130.786922][T12816] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.4056: corrupted inode contents [ 130.799264][T12816] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.4056: mark_inode_dirty error [ 130.810983][T12816] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 130.820920][T12816] EXT4-fs (loop4): 1 truncate cleaned up [ 130.827047][T12816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.840839][T12816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.899484][T12838] netlink: 'syz.0.4064': attribute type 3 has an invalid length. [ 130.982509][T12845] SELinux: failed to load policy [ 131.001873][T12848] loop4: detected capacity change from 0 to 8192 [ 131.109757][T12858] random: crng reseeded on system resumption [ 131.170456][T12866] netlink: 'syz.4.4078': attribute type 3 has an invalid length. [ 131.224843][T12870] ip6gretap0: entered promiscuous mode [ 131.233664][T12870] ip6gretap0: left promiscuous mode [ 131.531562][T12906] block device autoloading is deprecated and will be removed. [ 131.640520][ T3301] block device autoloading is deprecated and will be removed. [ 131.722123][T12937] hub 2-0:1.0: USB hub found [ 131.726851][T12937] hub 2-0:1.0: 8 ports detected [ 131.761334][T12942] SELinux: failed to load policy [ 131.829104][T12946] loop3: detected capacity change from 0 to 8192 [ 132.193514][T12980] netlink: 'syz.0.4129': attribute type 1 has an invalid length. [ 132.208995][T12980] bond3: entered promiscuous mode [ 132.215981][T12980] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.254008][T12980] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.268052][T12980] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 132.278391][T12980] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 132.296969][T12980] bond3: (slave ip6gre2): making interface the new active one [ 132.304555][T12980] ip6gre2: entered promiscuous mode [ 132.311384][T12980] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 132.320207][T12987] bond_slave_1: mtu less than device minimum [ 132.542331][T13000] loop4: detected capacity change from 0 to 8192 [ 132.588400][T13000] loop4: p1 < > p2 p4 [ 132.592536][T13000] loop4: partition table partially beyond EOD, truncated [ 132.599748][T13000] loop4: p1 start 408832 is beyond EOD, truncated [ 132.606196][T13000] loop4: p2 size 8388352 extends beyond EOD, truncated [ 132.644224][T13010] __nla_validate_parse: 6 callbacks suppressed [ 132.644239][T13010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4140'. [ 132.674063][T13011] block device autoloading is deprecated and will be removed. [ 132.788205][T13015] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 132.788270][T13015] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 133.035704][T13039] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4153'. [ 133.112906][T13044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4155'. [ 133.297091][T13055] ip6gretap0: entered promiscuous mode [ 133.303361][T13055] ip6gretap0: left promiscuous mode [ 133.403449][T13064] netlink: 'syz.1.4163': attribute type 4 has an invalid length. [ 133.414857][T13064] netlink: 'syz.1.4163': attribute type 4 has an invalid length. [ 133.457366][T13070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4166'. [ 133.457386][T13070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4166'. [ 133.457398][T13070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4166'. [ 133.465182][T13070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4166'. [ 133.494060][T13070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4166'. [ 133.503145][T13070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4166'. [ 133.532658][T13070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4166'. [ 133.723494][T13090] vhci_hcd: default hub control req: 0007 v0f00 i0006 l0 [ 133.992146][T13113] syz_tun (unregistering): left promiscuous mode [ 134.194884][T13143] loop3: detected capacity change from 0 to 128 [ 134.215464][T13143] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.241601][T13147] syz.0.4200: attempt to access beyond end of device [ 134.241601][T13147] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 134.259372][T13147] FAT-fs (loop1): unable to read boot sector [ 134.278178][T13143] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.429391][T13166] loop3: detected capacity change from 0 to 2048 [ 134.441457][T13166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.544165][T13176] netlink: 'syz.2.4210': attribute type 1 has an invalid length. [ 134.552056][T13176] netlink: 'syz.2.4210': attribute type 2 has an invalid length. [ 134.559797][T13176] netlink: 'syz.2.4210': attribute type 3 has an invalid length. [ 134.668784][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.759125][T13191] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.776201][T13191] bond1: (slave batadv2): Opening slave failed [ 134.813155][T13194] netlink: 'syz.3.4218': attribute type 1 has an invalid length. [ 134.828994][T13194] bond3: entered promiscuous mode [ 134.834300][T13194] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.864936][T13194] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.875583][T13194] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 134.886193][T13194] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 134.902149][T13194] bond3: (slave ip6gre2): making interface the new active one [ 134.911036][T13194] ip6gre2: entered promiscuous mode [ 134.918381][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 134.918394][ T29] audit: type=1400 audit(135.888:4143): avc: denied { getopt } for pid=13196 comm="syz.2.4219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.975990][T13194] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 134.992810][ T29] audit: type=1326 audit(135.948:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.2.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d526eb69 code=0x7ffc0000 [ 135.015850][ T29] audit: type=1326 audit(135.948:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.2.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d526eb69 code=0x7ffc0000 [ 135.038859][ T29] audit: type=1326 audit(135.958:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.2.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89d526eb69 code=0x7ffc0000 [ 135.061932][ T29] audit: type=1326 audit(135.958:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.2.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d526eb69 code=0x7ffc0000 [ 135.084923][ T29] audit: type=1326 audit(135.958:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.2.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d526eb69 code=0x7ffc0000 [ 135.108222][ T29] audit: type=1326 audit(135.958:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.2.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89d526eb69 code=0x7ffc0000 [ 135.131228][ T29] audit: type=1326 audit(135.958:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.2.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d526eb69 code=0x7ffc0000 [ 135.154300][ T29] audit: type=1326 audit(135.958:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.2.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d526eb69 code=0x7ffc0000 [ 135.177287][ T29] audit: type=1326 audit(135.968:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13200 comm="syz.2.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89d526eb69 code=0x7ffc0000 [ 135.219896][T13206] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13206 comm=syz.3.4224 [ 136.219004][T13271] loop4: detected capacity change from 0 to 2048 [ 136.239395][T13271] EXT4-fs (loop4): failed to initialize system zone (-117) [ 136.259942][T13271] EXT4-fs (loop4): mount failed [ 136.795479][T13339] netlink: 'syz.0.4291': attribute type 1 has an invalid length. [ 137.228663][T13371] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 137.236313][T13371] SELinux: failed to load policy [ 137.341544][T13375] hub 9-0:1.0: USB hub found [ 137.356318][T13375] hub 9-0:1.0: 8 ports detected [ 137.761089][T13428] sd 0:0:1:0: device reset [ 137.782032][T13423] loop3: detected capacity change from 0 to 8192 [ 137.797190][T13430] netlink: 'syz.0.4319': attribute type 5 has an invalid length. [ 137.838528][T13423] loop3: p1 < > p2 p4 [ 137.842646][T13423] loop3: partition table partially beyond EOD, truncated [ 137.851955][T13423] loop3: p1 start 408832 is beyond EOD, truncated [ 137.858441][T13423] loop3: p2 size 8388352 extends beyond EOD, truncated [ 137.933708][T13446] loop3: detected capacity change from 0 to 512 [ 137.952158][T13448] smc: net device bond0 applied user defined pnetid SYZ2 [ 137.962512][T13448] smc: net device bond0 erased user defined pnetid SYZ2 [ 137.973523][T13446] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 137.978668][T13451] loop4: detected capacity change from 0 to 512 [ 137.994960][T13451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.021015][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.034618][T13446] EXT4-fs (loop3): 1 truncate cleaned up [ 138.048680][T13446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.092257][T13446] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.110545][T13463] tipc: Started in network mode [ 138.115555][T13463] tipc: Node identity , cluster identity 4711 [ 138.122306][T13463] tipc: Failed to set node id, please configure manually [ 138.130186][T13463] tipc: Enabling of bearer rejected, failed to enable media [ 138.205213][T13468] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 138.232720][T13468] SELinux: failed to load policy [ 138.331127][T13479] __nla_validate_parse: 8 callbacks suppressed [ 138.331142][T13479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4341'. [ 138.369672][T13479] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.407382][T13479] bond2: (slave batadv1): Opening slave failed [ 138.454230][T13490] loop3: detected capacity change from 0 to 128 [ 138.500283][T13490] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.554045][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.660681][T13509] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 138.669252][T13509] SELinux: failed to load policy [ 138.701996][T13513] loop3: detected capacity change from 0 to 1024 [ 138.720423][T13513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.766679][T13524] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13524 comm=syz.0.4359 [ 138.778134][T13515] hub 9-0:1.0: USB hub found [ 138.779307][T13524] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13524 comm=syz.0.4359 [ 138.783970][T13515] hub 9-0:1.0: 8 ports detected [ 138.800253][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.962000][T13542] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 138.962000][T13542] program syz.3.4368 not setting count and/or reply_len properly [ 139.666628][T13591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4391'. [ 139.714295][T13598] smc: net device bond0 applied user defined pnetid SYZ2 [ 139.722083][T13598] smc: net device bond0 erased user defined pnetid SYZ2 [ 139.749941][T13601] macvtap0: refused to change device tx_queue_len [ 139.771226][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4394'. [ 139.968476][T13621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4404'. [ 139.977631][T13621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4404'. [ 139.992273][T13624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4405'. [ 140.029571][T13627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4404'. [ 140.038569][T13627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4404'. [ 140.100194][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 140.100209][ T29] audit: type=1326 audit(141.078:4273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13632 comm="syz.3.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66769eb69 code=0x7ffc0000 [ 140.184081][T13639] hub 9-0:1.0: USB hub found [ 140.185509][ T29] audit: type=1326 audit(141.078:4274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13632 comm="syz.3.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66769eb69 code=0x7ffc0000 [ 140.199341][T13639] hub 9-0:1.0: 8 ports detected [ 140.211679][ T29] audit: type=1326 audit(141.078:4275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13632 comm="syz.3.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7ff66769eb69 code=0x7ffc0000 [ 140.239460][ T29] audit: type=1326 audit(141.078:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13632 comm="syz.3.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66769eb69 code=0x7ffc0000 [ 140.262375][ T29] audit: type=1326 audit(141.078:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13632 comm="syz.3.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66769eb69 code=0x7ffc0000 [ 140.482082][T13655] loop3: detected capacity change from 0 to 512 [ 140.495302][T13655] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 140.505378][T13655] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 140.514437][T13655] EXT4-fs (loop3): 1 truncate cleaned up [ 140.516787][ T29] audit: type=1400 audit(141.488:4278): avc: denied { setopt } for pid=13659 comm="syz.2.4420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.522611][T13655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.612084][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.635606][T13671] binfmt_misc: register: failed to install interpreter file ./file0 [ 140.656790][ T29] audit: type=1400 audit(141.628:4279): avc: denied { read write } for pid=13676 comm="syz.2.4428" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 140.679847][ T29] audit: type=1400 audit(141.628:4280): avc: denied { open } for pid=13676 comm="syz.2.4428" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 140.774377][T13689] netlink: 'syz.2.4434': attribute type 12 has an invalid length. [ 140.782339][T13689] netlink: 'syz.2.4434': attribute type 29 has an invalid length. [ 140.790246][T13689] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4434'. [ 140.799337][T13689] netlink: 'syz.2.4434': attribute type 1 has an invalid length. [ 140.807043][T13689] netlink: 'syz.2.4434': attribute type 2 has an invalid length. [ 140.888569][T13702] netlink: 'syz.2.4437': attribute type 13 has an invalid length. [ 140.895682][T13704] loop3: detected capacity change from 0 to 512 [ 140.896565][T13702] netlink: 'syz.2.4437': attribute type 17 has an invalid length. [ 140.914989][T13704] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.925364][T13702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.938267][T13702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.992879][T13707] ALSA: seq fatal error: cannot create timer (-19) [ 141.035865][T13714] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4445'. [ 141.036080][ T29] audit: type=1326 audit(142.008:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13711 comm="syz.3.4444" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff66769eb69 code=0x0 [ 141.083575][ T29] audit: type=1326 audit(142.058:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.2.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d526eb69 code=0x7ffc0000 [ 141.767824][T13769] netlink: 'syz.1.4468': attribute type 4 has an invalid length. [ 141.887883][T13773] loop3: detected capacity change from 0 to 512 [ 141.896117][T13773] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 141.909108][T13773] EXT4-fs (loop3): 1 truncate cleaned up [ 141.915288][T13773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.951036][ T3301] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /844/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 141.972893][ T3301] EXT4-fs (loop3): Remounting filesystem read-only [ 141.981808][T13778] netlink: 'syz.1.4472': attribute type 16 has an invalid length. [ 141.989694][T13778] netlink: 'syz.1.4472': attribute type 3 has an invalid length. [ 142.006707][ T9959] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.375425][T13799] chnl_net:caif_netlink_parms(): no params data found [ 142.445951][T13799] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.453229][T13799] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.462609][T13799] bridge_slave_0: entered allmulticast mode [ 142.472600][T13799] bridge_slave_0: entered promiscuous mode [ 142.482157][T13799] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.489362][T13799] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.510213][T13799] bridge_slave_1: entered allmulticast mode [ 142.517798][T13799] bridge_slave_1: entered promiscuous mode [ 142.555318][T13799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.566542][T13799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.587600][T13799] team0: Port device team_slave_0 added [ 142.594594][T13799] team0: Port device team_slave_1 added [ 142.622917][T13799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.630014][T13799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.656080][T13799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.684304][T13799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.691312][T13799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.717224][T13799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.769856][T13799] hsr_slave_0: entered promiscuous mode [ 142.776130][T13799] hsr_slave_1: entered promiscuous mode [ 142.782474][T13799] debugfs: 'hsr0' already exists in 'hsr' [ 142.788281][T13799] Cannot create hsr debugfs directory [ 142.794200][T13858] netlink: 'syz.2.4504': attribute type 4 has an invalid length. [ 142.821977][T13858] netlink: 'syz.2.4504': attribute type 4 has an invalid length. [ 142.903391][T13799] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.915132][T13799] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.926537][T13799] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.937041][T13799] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 142.960107][T13799] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.967289][T13799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.974687][T13799] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.981812][T13799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.021687][T13799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.042519][ T3959] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.075076][ T3959] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.106442][T13799] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.128484][ T3965] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.137159][ T3965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.178971][ T4001] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.186274][ T4001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.247669][T13799] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 143.258273][T13799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.277920][T13881] rdma_op ffff888123131980 conn xmit_rdma 0000000000000000 [ 143.341866][T13799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.460155][T13799] veth0_vlan: entered promiscuous mode [ 143.474636][T13799] veth1_vlan: entered promiscuous mode [ 143.491945][T13799] veth0_macvtap: entered promiscuous mode [ 143.499473][T13799] veth1_macvtap: entered promiscuous mode [ 143.511272][T13799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.522423][T13799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.534053][ T3986] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.553143][ T3986] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.566638][ T3986] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.580114][ T3986] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.969915][T13953] vlan2: entered allmulticast mode [ 144.031905][T13959] loop5: detected capacity change from 0 to 128 [ 144.043043][T13959] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.070946][T13799] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.177722][T13984] serio: Serial port ptm0 [ 144.567738][T14022] __nla_validate_parse: 1 callbacks suppressed [ 144.567807][T14022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4567'. [ 144.816406][T14044] smc: net device bond0 applied user defined pnetid SYZ0 [ 144.825259][T14044] smc: net device bond0 erased user defined pnetid SYZ0 [ 144.845712][T14046] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4578'. [ 144.966248][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4585'. [ 144.975370][T14061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4585'. [ 145.020856][T14070] netlink: 'syz.2.4590': attribute type 1 has an invalid length. [ 145.064441][T14078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.072976][T14078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.155866][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 145.155884][ T29] audit: type=1400 audit(524434.126:4524): avc: denied { execute } for pid=14081 comm="syz.2.4596" dev="tmpfs" ino=1249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 145.184914][ T29] audit: type=1400 audit(524434.126:4525): avc: denied { execute_no_trans } for pid=14081 comm="syz.2.4596" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 145.227335][ T29] audit: type=1400 audit(524434.194:4526): avc: denied { create } for pid=14083 comm="syz.2.4597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.246722][ T29] audit: type=1400 audit(524434.194:4527): avc: denied { connect } for pid=14083 comm="syz.2.4597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.421639][ T29] audit: type=1400 audit(524434.387:4528): avc: denied { map } for pid=14085 comm="syz.0.4598" path="socket:[38735]" dev="sockfs" ino=38735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.446597][ T29] audit: type=1400 audit(524434.387:4529): avc: denied { read write } for pid=14085 comm="syz.0.4598" path="socket:[38735]" dev="sockfs" ino=38735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.476002][ T29] audit: type=1400 audit(524434.436:4530): avc: denied { read write } for pid=14087 comm="syz.0.4599" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 145.502107][ T29] audit: type=1400 audit(524434.436:4531): avc: denied { open } for pid=14087 comm="syz.0.4599" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 145.545321][ T29] audit: type=1400 audit(524434.504:4532): avc: denied { read } for pid=14089 comm="syz.4.4600" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 145.568437][ T29] audit: type=1400 audit(524434.504:4533): avc: denied { open } for pid=14089 comm="syz.4.4600" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 145.930070][T14126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4616'. [ 145.939047][T14126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4616'. [ 146.003576][T14132] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 146.031483][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4620'. [ 146.254477][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4624'. [ 146.411898][T14148] syzkaller0: entered promiscuous mode [ 146.417484][T14148] syzkaller0: entered allmulticast mode [ 146.426359][T14152] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 146.434649][T14152] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 146.524704][T14159] netlink: 'syz.2.4632': attribute type 1 has an invalid length. [ 146.532563][T14159] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.4632'. [ 146.635433][ T3965] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 146.965227][T14215] loop4: detected capacity change from 0 to 512 [ 146.980866][T14215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.028194][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.084355][T14227] loop4: detected capacity change from 0 to 512 [ 147.091969][T14227] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.111488][T14227] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.4660: casefold flag without casefold feature [ 147.128402][T14227] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4660: couldn't read orphan inode 15 (err -117) [ 147.141372][T14227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.296453][T14243] macvtap0: refused to change device tx_queue_len [ 147.338957][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.353682][T14247] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 147.378052][T14245] sd 0:0:1:0: device reset [ 147.501746][T14264] rdma_op ffff88812e5e8980 conn xmit_rdma 0000000000000000 [ 147.554358][T14273] loop5: detected capacity change from 0 to 512 [ 147.588164][T14273] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.623322][T14273] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4682: casefold flag without casefold feature [ 147.697142][T14273] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4682: couldn't read orphan inode 15 (err -117) [ 147.736998][T14273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.040770][T14292] syz!: rxe_newlink: already configured on team_slave_0 [ 148.315448][T13799] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.363468][T14310] $H: renamed from bond0 (while UP) [ 148.409975][T14310] $H: entered promiscuous mode [ 148.415121][T14310] bond_slave_0: entered promiscuous mode [ 148.420851][T14310] bond_slave_1: entered promiscuous mode [ 148.505747][T14325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4705'. [ 148.695804][ T4007] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 148.715414][T14353] block device autoloading is deprecated and will be removed. [ 148.723306][T14353] syz.2.4717: attempt to access beyond end of device [ 148.723306][T14353] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 149.222361][T14400] netlink: 'syz.0.4739': attribute type 7 has an invalid length. [ 149.230258][T14400] netlink: 'syz.0.4739': attribute type 8 has an invalid length. [ 149.329382][T14411] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 149.372263][T14419] $H: renamed from bond0 (while UP) [ 149.379882][T14419] $H: entered promiscuous mode [ 149.385022][T14419] bond_slave_0: entered promiscuous mode [ 149.390951][T14419] bond_slave_1: entered promiscuous mode [ 149.397097][T14419] bridge_slave_1: entered promiscuous mode [ 149.447098][T14421] bond0: entered promiscuous mode [ 149.452439][T14421] bond0: entered allmulticast mode [ 149.467724][T14421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.485991][T14421] bond0 (unregistering): Released all slaves [ 149.665887][T14429] syzkaller0: entered promiscuous mode [ 149.671492][T14429] syzkaller0: entered allmulticast mode [ 149.737027][T14434] __nla_validate_parse: 5 callbacks suppressed [ 149.737042][T14434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4754'. [ 149.811535][T14440] Falling back ldisc for ttyS3. [ 149.857642][T14447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4761'. [ 149.872205][T14450] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 149.926858][T14460] netlink: 'syz.1.4766': attribute type 4 has an invalid length. [ 149.937822][T14459] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4765'. [ 149.956395][T14460] netlink: 'syz.1.4766': attribute type 4 has an invalid length. [ 149.988140][T14464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4768'. [ 150.039136][T14476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4773'. [ 150.341266][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 150.341282][ T29] audit: type=1400 audit(524439.164:4650): avc: denied { lock } for pid=14511 comm="syz.5.4789" path="socket:[39829]" dev="sockfs" ino=39829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.375736][T14514] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 150.411579][ T29] audit: type=1400 audit(524439.233:4651): avc: denied { read } for pid=14518 comm="syz.2.4792" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 150.434137][ T29] audit: type=1400 audit(524439.233:4652): avc: denied { open } for pid=14518 comm="syz.2.4792" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 150.460416][T14520] loop4: detected capacity change from 0 to 512 [ 150.496537][ T29] audit: type=1400 audit(524439.301:4653): avc: denied { write } for pid=14523 comm="syz.0.4794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 150.503945][T14520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.516444][ T29] audit: type=1400 audit(524439.301:4654): avc: denied { nlmsg_write } for pid=14523 comm="syz.0.4794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 150.586225][ T29] audit: type=1400 audit(524439.408:4655): avc: denied { ioctl } for pid=14517 comm="syz.4.4793" path="/922/bus/pids.current" dev="loop4" ino=18 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 150.629432][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.735587][T14550] netlink: 'syz.4.4805': attribute type 3 has an invalid length. [ 150.767811][ T29] audit: type=1326 audit(524439.584:4656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14552 comm="syz.4.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5feeb69 code=0x7ffc0000 [ 150.791260][ T29] audit: type=1326 audit(524439.584:4657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14552 comm="syz.4.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5feeb69 code=0x7ffc0000 [ 150.814518][ T29] audit: type=1326 audit(524439.584:4658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14552 comm="syz.4.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fb6b5feeb69 code=0x7ffc0000 [ 150.837748][ T29] audit: type=1326 audit(524439.584:4659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14552 comm="syz.4.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5feeb69 code=0x7ffc0000 [ 150.913363][T14567] sd 0:0:1:0: device reset [ 150.924956][T14569] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4822'. [ 150.934209][T14569] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4822'. [ 150.943302][T14569] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4822'. [ 150.949214][T14558] serio: Serial port ptm0 [ 151.144728][T14605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4833'. [ 151.236671][T14615] netlink: 'syz.5.4837': attribute type 2 has an invalid length. [ 151.244629][T14615] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4837'. [ 151.266584][T14618] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 151.283021][T14622] loop4: detected capacity change from 0 to 1024 [ 151.294418][T14622] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4839: Failed to acquire dquot type 0 [ 151.310979][T14622] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 151.325869][T14622] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.4839: corrupted inode contents [ 151.338931][T14622] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.4839: mark_inode_dirty error [ 151.350713][T14622] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.4839: corrupted inode contents [ 151.366845][T14622] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.4839: mark_inode_dirty error [ 151.380207][T14622] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.4839: corrupted inode contents [ 151.392382][T14622] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 151.403139][T14622] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.4839: corrupted inode contents [ 151.415582][T14622] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.4839: mark_inode_dirty error [ 151.429926][T14622] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 151.440612][T14622] EXT4-fs (loop4): 1 truncate cleaned up [ 151.446696][T14622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.474491][T14632] 0XD: renamed from gretap0 (while UP) [ 151.481175][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.490923][T14632] 0XD: entered allmulticast mode [ 151.496446][T14632] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 151.614608][T14652] SELinux: Context system_u:object_r:pam_exec_t:s0 is not valid (left unmapped). [ 151.627360][T14656] hub 9-0:1.0: USB hub found [ 151.633847][T14656] hub 9-0:1.0: 8 ports detected [ 151.645886][T14660] loop5: detected capacity change from 0 to 128 [ 151.742930][T14679] loop4: detected capacity change from 0 to 512 [ 151.755381][T14679] EXT4-fs (loop4): orphan cleanup on readonly fs [ 151.771636][T14679] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4869: bg 0: block 248: padding at end of block bitmap is not set [ 151.804135][T14679] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4869: Failed to acquire dquot type 1 [ 151.830986][T14679] EXT4-fs (loop4): 1 truncate cleaned up [ 151.840283][T14679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.865457][T14690] 9pnet: Could not find request transport: f [ 151.902455][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.000919][T14717] loop5: detected capacity change from 0 to 512 [ 152.018179][T14717] EXT4-fs (loop5): orphan cleanup on readonly fs [ 152.032837][T14717] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4886: bg 0: block 248: padding at end of block bitmap is not set [ 152.049145][T14717] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4886: Failed to acquire dquot type 1 [ 152.061228][T14717] EXT4-fs (loop5): 1 truncate cleaned up [ 152.069725][T14717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.111497][T13799] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.187122][T14740] netlink: 'syz.4.4897': attribute type 1 has an invalid length. [ 152.395528][T14762] netlink: 'syz.5.4907': attribute type 4 has an invalid length. [ 152.466749][T14768] netlink: 'syz.5.4907': attribute type 4 has an invalid length. [ 152.923122][T14790] loop5: detected capacity change from 0 to 512 [ 152.945416][T14798] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 152.972308][T14798] SELinux: failed to load policy [ 152.983057][T14790] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.4920: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 1025, max 0(0), depth 0(0) [ 153.032730][T14790] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.4920: Bad quota inode: 3, type: 0 [ 153.082958][T14790] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 153.162853][T14790] EXT4-fs (loop5): mount failed [ 153.286781][T14829] loop4: detected capacity change from 0 to 128 [ 153.812610][T14890] loop5: detected capacity change from 0 to 1024 [ 153.819876][T14890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.843147][T14890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.871290][T13799] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.922697][T14910] netlink: 'syz.4.4970': attribute type 21 has an invalid length. [ 153.942130][T14912] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 154.240714][T14959] random: crng reseeded on system resumption [ 154.466785][T14975] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 154.995965][T15040] loop5: detected capacity change from 0 to 128 [ 155.051277][T15040] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.051986][T15052] block device autoloading is deprecated and will be removed. [ 155.126769][T15058] tipc: Enabled bearer , priority 0 [ 155.145001][T13799] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.159162][T15064] __nla_validate_parse: 4 callbacks suppressed [ 155.159179][T15064] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5038'. [ 155.190891][T15058] tipc: Disabling bearer [ 155.276876][T15080] 9pnet_fd: Insufficient options for proto=fd [ 155.341417][T15088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5050'. [ 155.350553][T15088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5050'. [ 155.470931][ T29] kauditd_printk_skb: 493 callbacks suppressed [ 155.470947][ T29] audit: type=1326 audit(524444.193:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15110 comm="syz.0.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 155.500600][ T29] audit: type=1326 audit(524444.193:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15110 comm="syz.0.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 155.524211][ T29] audit: type=1326 audit(524444.193:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15110 comm="syz.0.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 155.580754][ T29] audit: type=1326 audit(524444.301:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15118 comm="syz.0.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 155.604411][ T29] audit: type=1326 audit(524444.301:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15118 comm="syz.0.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 155.630156][ T29] audit: type=1326 audit(524444.360:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15118 comm="syz.0.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 155.653755][ T29] audit: type=1326 audit(524444.360:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15118 comm="syz.0.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 155.676908][ T29] audit: type=1326 audit(524444.360:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15118 comm="syz.0.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 155.700460][ T29] audit: type=1326 audit(524444.360:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15118 comm="syz.0.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 155.723607][ T29] audit: type=1326 audit(524444.360:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15118 comm="syz.0.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 155.882270][T15141] validate_nla: 1 callbacks suppressed [ 155.882310][T15141] netlink: 'syz.0.5072': attribute type 1 has an invalid length. [ 155.895584][T15141] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5072'. [ 155.970576][T15153] block device autoloading is deprecated and will be removed. [ 156.052705][T15163] netlink: 'syz.1.5083': attribute type 1 has an invalid length. [ 156.060546][T15163] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5083'. [ 156.110194][T15175] syzkaller1: entered promiscuous mode [ 156.115909][T15175] syzkaller1: entered allmulticast mode [ 156.163283][T15182] SELinux: failed to load policy [ 156.586730][T15251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5134'. [ 156.780279][T15284] pimreg: entered allmulticast mode [ 156.786988][T15284] pimreg: left allmulticast mode [ 156.798132][T15286] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5142'. [ 156.813230][T15282] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 156.820804][ T10] IPVS: starting estimator thread 0... [ 156.918242][T15288] IPVS: using max 2304 ests per chain, 115200 per kthread [ 156.930681][T15302] 9pnet_fd: Insufficient options for proto=fd [ 156.982034][T15308] pimreg: entered allmulticast mode [ 157.000237][T15308] pimreg: left allmulticast mode [ 157.861633][T15341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5175'. [ 157.895665][T15344] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 157.903320][T15344] SELinux: failed to load policy [ 157.905993][T15341] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 157.938009][T15341] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 158.131203][T15363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5177'. [ 158.140174][T15363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5177'. [ 158.513338][T15416] netlink: 'syz.5.5203': attribute type 1 has an invalid length. [ 158.559222][T15427] netlink: 'syz.5.5207': attribute type 3 has an invalid length. [ 158.583866][T15429] syz.0.5205: attempt to access beyond end of device [ 158.583866][T15429] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 158.824752][T15455] tipc: Started in network mode [ 158.829776][T15455] tipc: Node identity c692883f5763, cluster identity 4711 [ 158.837110][T15455] tipc: Enabled bearer , priority 0 [ 158.853575][T15455] tipc: Disabling bearer [ 159.002487][T15474] 9pnet: p9_errstr2errno: server reported unknown error tat [ 160.236995][T15568] SELinux: Context system_u:object is not valid (left unmapped). [ 160.238164][T15544] netlink: 'syz.5.5257': attribute type 1 has an invalid length. [ 160.252737][T15544] __nla_validate_parse: 5 callbacks suppressed [ 160.252749][T15544] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5257'. [ 160.300685][T15572] serio: Serial port ptm0 [ 160.408003][T15583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5273'. [ 160.576766][T15615] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5285'. [ 161.021020][T15641] ip6gre2: entered allmulticast mode [ 161.167976][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 161.168007][ T29] audit: type=1326 audit(524449.813:5380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15649 comm="syz.1.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c16edeb69 code=0x7ffc0000 [ 161.213866][ T29] audit: type=1326 audit(524449.813:5381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15649 comm="syz.1.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c16edeb69 code=0x7ffc0000 [ 161.237135][ T29] audit: type=1326 audit(524449.813:5382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15649 comm="syz.1.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f6c16edeb69 code=0x7ffc0000 [ 161.260313][ T29] audit: type=1326 audit(524449.813:5383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15649 comm="syz.1.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c16edeb69 code=0x7ffc0000 [ 161.283505][ T29] audit: type=1326 audit(524449.813:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15649 comm="syz.1.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c16edeb69 code=0x7ffc0000 [ 161.364576][T15665] netlink: 'syz.1.5308': attribute type 10 has an invalid length. [ 161.385883][T15672] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 161.431336][ T29] audit: type=1326 audit(524450.070:5385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15682 comm="syz.0.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 161.476725][ T29] audit: type=1326 audit(524450.099:5386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15682 comm="syz.0.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 161.500269][ T29] audit: type=1326 audit(524450.099:5387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15682 comm="syz.0.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 161.523604][ T29] audit: type=1326 audit(524450.099:5388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15682 comm="syz.0.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbdd099eba3 code=0x7ffc0000 [ 161.546671][ T29] audit: type=1326 audit(524450.109:5389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15682 comm="syz.0.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbdd099d61f code=0x7ffc0000 [ 161.820546][T15721] syz.5.5334: attempt to access beyond end of device [ 161.820546][T15721] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 162.002942][T15747] random: crng reseeded on system resumption [ 162.015955][T15747] Restarting kernel threads ... [ 162.021681][T15747] Done restarting kernel threads. [ 162.046588][T15751] serio: Serial port ptm0 [ 162.057793][T15755] siw: device registration error -23 [ 162.145334][T15766] blktrace: Concurrent blktraces are not allowed on sg0 [ 162.162428][T15770] loop5: detected capacity change from 0 to 2048 [ 162.178409][T15770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.296911][T15792] dvmrp0: entered allmulticast mode [ 162.442116][T15807] ALSA: seq fatal error: cannot create timer (-19) [ 162.458915][T13799] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.494986][T15818] loop5: detected capacity change from 0 to 512 [ 162.512324][T15818] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 162.528778][T15818] EXT4-fs (loop5): 1 truncate cleaned up [ 162.538479][T15818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.553072][T15818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.588973][T15829] serio: Serial port ptm0 [ 162.614798][T15834] loop5: detected capacity change from 0 to 1024 [ 162.623746][T15834] EXT4-fs: inline encryption not supported [ 162.629775][T15834] EXT4-fs: Ignoring removed bh option [ 162.645218][T15834] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.737314][T13799] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.029664][T15868] netlink: 'syz.2.5392': attribute type 3 has an invalid length. [ 163.052962][T15870] random: crng reseeded on system resumption [ 163.065498][T15870] Restarting kernel threads ... [ 163.070783][T15870] Done restarting kernel threads. [ 163.556019][T15902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5407'. [ 163.580960][T15903] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 163.643342][T15913] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 163.766511][T15933] syzkaller1: entered promiscuous mode [ 163.772024][T15933] syzkaller1: entered allmulticast mode [ 163.781033][T15933] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 163.948603][T15954] netem: change failed [ 164.425936][T16001] SELinux: ebitmap: truncated map [ 164.440413][T16001] SELinux: failed to load policy [ 164.716932][T16035] SELinux: ebitmap: truncated map [ 164.727660][T16035] SELinux: failed to load policy [ 164.743207][T16043] 9pnet_fd: Insufficient options for proto=fd [ 165.134795][T16107] loop5: detected capacity change from 0 to 1024 [ 165.163039][T16107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.183237][T16107] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.5503: Allocating blocks 385-513 which overlap fs metadata [ 165.201730][T16107] EXT4-fs (loop5): pa ffff888106d85460: logic 16, phys. 129, len 24 [ 165.210147][T16107] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 165.240457][T13799] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.330510][T16125] SELinux: ebitmap: truncated map [ 165.337291][T16125] SELinux: failed to load policy [ 165.634885][T16149] netlink: '+}[@': attribute type 3 has an invalid length. [ 166.003426][T16160] 9pnet_fd: Insufficient options for proto=fd [ 166.316298][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 166.316311][ T29] audit: type=1400 audit(524454.912:5662): avc: denied { bind } for pid=16181 comm="syz.5.5532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.316982][ T29] audit: type=1400 audit(524454.912:5663): avc: denied { name_bind } for pid=16181 comm="syz.5.5532" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 166.362870][ T29] audit: type=1400 audit(524454.912:5664): avc: denied { node_bind } for pid=16181 comm="syz.5.5532" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 166.540161][T16195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5533'. [ 166.541029][T16195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5533'. [ 166.541420][T16195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5533'. [ 166.541864][T16195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5533'. [ 166.542066][T16195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5533'. [ 166.634209][ T29] audit: type=1400 audit(524455.229:5665): avc: denied { write } for pid=16199 comm="syz.5.5540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 166.806851][T16209] sctp: [Deprecated]: syz.4.5545 (pid 16209) Use of int in maxseg socket option. [ 166.806851][T16209] Use struct sctp_assoc_value instead [ 166.918906][T16213] SELinux: failed to load policy [ 166.937652][ T29] audit: type=1400 audit(524455.527:5666): avc: denied { ioctl } for pid=16218 comm="syz.4.5551" path="socket:[46806]" dev="sockfs" ino=46806 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 167.001562][ T29] audit: type=1326 audit(524455.576:5667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16221 comm="syz.4.5553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5feeb69 code=0x7ffc0000 [ 167.025105][ T29] audit: type=1326 audit(524455.576:5668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16221 comm="syz.4.5553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5feeb69 code=0x7ffc0000 [ 167.048378][ T29] audit: type=1326 audit(524455.576:5669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16221 comm="syz.4.5553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fb6b5feeb69 code=0x7ffc0000 [ 167.071576][ T29] audit: type=1326 audit(524455.576:5670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16221 comm="syz.4.5553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5feeb69 code=0x7ffc0000 [ 167.094723][ T29] audit: type=1326 audit(524455.576:5671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16221 comm="syz.4.5553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6b5feeb69 code=0x7ffc0000 [ 167.308472][T16252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5563'. [ 167.367859][T16256] netlink: 368 bytes leftover after parsing attributes in process `syz.5.5565'. [ 167.664338][T16288] loop5: detected capacity change from 0 to 128 [ 167.684243][T16288] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 167.692471][T16288] FAT-fs (loop5): Filesystem has been set read-only [ 167.715740][T16288] syz.5.5579: attempt to access beyond end of device [ 167.715740][T16288] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 167.743533][T16292] vlan2: entered allmulticast mode [ 167.743948][T16288] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 167.757654][T16288] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 167.761677][T16292] dummy0: entered allmulticast mode [ 167.779880][T16293] syz.5.5579: attempt to access beyond end of device [ 167.779880][T16293] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 167.793547][T16293] buffer_io_error: 1079 callbacks suppressed [ 167.793560][T16293] Buffer I/O error on dev loop5, logical block 2065, async page read [ 167.816495][T16293] syz.5.5579: attempt to access beyond end of device [ 167.816495][T16293] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 167.832953][T16293] Buffer I/O error on dev loop5, logical block 2066, async page read [ 167.844931][T16293] syz.5.5579: attempt to access beyond end of device [ 167.844931][T16293] loop5: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 167.858282][T16293] Buffer I/O error on dev loop5, logical block 2067, async page read [ 167.875941][T16293] syz.5.5579: attempt to access beyond end of device [ 167.875941][T16293] loop5: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 167.889652][T16293] Buffer I/O error on dev loop5, logical block 2068, async page read [ 167.899096][T16293] syz.5.5579: attempt to access beyond end of device [ 167.899096][T16293] loop5: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 167.913368][T16293] Buffer I/O error on dev loop5, logical block 2069, async page read [ 167.988628][T16293] syz.5.5579: attempt to access beyond end of device [ 167.988628][T16293] loop5: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 168.004103][T16293] Buffer I/O error on dev loop5, logical block 2070, async page read [ 168.012595][T16293] syz.5.5579: attempt to access beyond end of device [ 168.012595][T16293] loop5: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 168.026506][T16293] Buffer I/O error on dev loop5, logical block 2071, async page read [ 168.036274][T16293] syz.5.5579: attempt to access beyond end of device [ 168.036274][T16293] loop5: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 168.051197][T16293] Buffer I/O error on dev loop5, logical block 2072, async page read [ 168.061458][T16288] syz.5.5579: attempt to access beyond end of device [ 168.061458][T16288] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 168.075022][T16288] Buffer I/O error on dev loop5, logical block 2065, async page read [ 168.084531][T16288] Buffer I/O error on dev loop5, logical block 2066, async page read [ 168.122818][T16314] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5591'. [ 168.165698][T16316] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5592'. [ 168.552572][T16360] netlink: 'syz.1.5612': attribute type 3 has an invalid length. [ 168.599365][T16365] loop5: detected capacity change from 0 to 1024 [ 168.612881][T16361] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5613'. [ 168.626784][T16365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.657875][T13799] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.799320][T16397] loop5: detected capacity change from 0 to 1024 [ 168.806241][T16397] EXT4-fs: Ignoring removed orlov option [ 168.813859][T16397] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.827953][T16397] SELinux: policydb version -957581230 does not match my version range 15-35 [ 168.837029][T16397] SELinux: failed to load policy [ 168.846625][T16397] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 168.864374][T13799] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.402654][T16425] loop5: detected capacity change from 0 to 512 [ 169.413452][T16425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.431820][T16425] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.5640: corrupted inode contents [ 169.443860][T16425] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.5640: mark_inode_dirty error [ 169.457330][T16425] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.5640: corrupted inode contents [ 169.469799][T16425] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.5640: mark_inode_dirty error [ 169.502662][T13799] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.528997][T16437] loop5: detected capacity change from 0 to 2048 [ 169.535996][T16437] EXT4-fs: Ignoring removed nobh option [ 169.552268][T16437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.575743][T16445] SELinux: Context system_u:object_r:dhcpc_state_t:s0 is not valid (left unmapped). [ 169.598724][T13799] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.610527][T16449] netlink: 'syz.2.5651': attribute type 1 has an invalid length. [ 170.045458][T16498] hub 9-0:1.0: USB hub found [ 170.052364][T16500] netlink: 'syz.4.5672': attribute type 3 has an invalid length. [ 170.060942][T16498] hub 9-0:1.0: 8 ports detected [ 170.065087][T16500] netlink: 'syz.4.5672': attribute type 3 has an invalid length. [ 170.111019][T16507] atomic_op ffff88811f849928 conn xmit_atomic 0000000000000000 [ 170.266341][T16534] bond4: entered promiscuous mode [ 170.271428][T16534] bond4: entered allmulticast mode [ 170.278712][T16534] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.294219][T16534] bond4 (unregistering): Released all slaves [ 170.400528][T16557] loop5: detected capacity change from 0 to 1024 [ 170.409430][T16557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.606748][T13799] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.369666][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 171.369683][ T29] audit: type=1326 audit(524459.925:5787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16622 comm="syz.1.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c16edeb69 code=0x7ffc0000 [ 171.399527][ T29] audit: type=1326 audit(524459.925:5788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16622 comm="syz.1.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c16edeb69 code=0x7ffc0000 [ 171.422729][ T29] audit: type=1326 audit(524459.935:5789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16622 comm="syz.1.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6c16edeb69 code=0x7ffc0000 [ 171.445932][ T29] audit: type=1326 audit(524459.935:5790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16622 comm="syz.1.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c16edeb69 code=0x7ffc0000 [ 171.469153][ T29] audit: type=1326 audit(524459.935:5791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16622 comm="syz.1.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f6c16edeb69 code=0x7ffc0000 [ 171.492459][ T29] audit: type=1326 audit(524459.935:5792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16622 comm="syz.1.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c16edeb69 code=0x7ffc0000 [ 171.515606][ T29] audit: type=1326 audit(524459.935:5793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16622 comm="syz.1.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c16edeb69 code=0x7ffc0000 [ 171.539718][ T29] audit: type=1400 audit(524460.094:5794): avc: denied { setcheckreqprot } for pid=16626 comm="syz.0.5732" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 171.623400][T16633] raw_sendmsg: syz.1.5735 forgot to set AF_INET. Fix it! [ 171.632664][T16636] hub 9-0:1.0: USB hub found [ 171.637555][T16636] hub 9-0:1.0: 8 ports detected [ 171.649733][ T29] audit: type=1404 audit(524460.204:5795): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 171.666360][ T29] audit: type=1400 audit(524460.214:5796): avc: denied { read write } for pid=13799 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.733639][T16646] __nla_validate_parse: 3 callbacks suppressed [ 171.733655][T16646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5741'. [ 171.751657][T16646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5741'. [ 171.951225][T16663] vcan0: entered allmulticast mode [ 171.957833][T16663] vcan0: left allmulticast mode [ 172.144496][T16673] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5754'. [ 172.207245][T16682] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5758'. [ 172.264092][T16690] netlink: 'syz.5.5762': attribute type 13 has an invalid length. [ 172.289051][T16690] gretap0: refused to change device tx_queue_len [ 172.295441][T16690] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 172.637324][T16736] tunl0: entered promiscuous mode [ 172.643797][T16736] netlink: 'syz.1.5782': attribute type 1 has an invalid length. [ 172.651744][T16736] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5782'. [ 172.684797][T16746] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 172.684797][T16746] program syz.1.5786 not setting count and/or reply_len properly [ 172.741858][T16751] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5788'. [ 172.782596][T16761] netlink: 'syz.2.5793': attribute type 12 has an invalid length. [ 172.790575][T16761] netlink: 'syz.2.5793': attribute type 29 has an invalid length. [ 172.798598][T16761] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5793'. [ 172.807739][T16761] netlink: 51 bytes leftover after parsing attributes in process `syz.2.5793'. [ 172.827779][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5796'. [ 172.863371][T16772] openvswitch: netlink: Message has 6 unknown bytes. [ 172.976181][T16788] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5806'. [ 173.106464][T16821] loop5: detected capacity change from 0 to 512 [ 173.127077][T16821] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.5813: casefold flag without casefold feature [ 173.172152][T16821] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.5813: couldn't read orphan inode 15 (err -117) [ 173.198118][T16821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.238203][T16842] geneve2: entered promiscuous mode [ 173.243571][T16842] geneve2: entered allmulticast mode [ 173.273436][T16821] loop5: detected capacity change from 512 to 64 [ 173.290027][T13799] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 173.326722][T16422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.521134][ T3970] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.597564][ T3970] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.637761][ T3970] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.688077][ T3970] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.743249][T16878] chnl_net:caif_netlink_parms(): no params data found [ 173.783788][T16878] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.791103][T16878] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.798491][T16878] bridge_slave_0: entered allmulticast mode [ 173.804989][T16878] bridge_slave_0: entered promiscuous mode [ 173.813457][T16878] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.820676][T16878] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.828490][T16878] bridge_slave_1: entered allmulticast mode [ 173.835009][T16878] bridge_slave_1: entered promiscuous mode [ 173.848631][ T3970] bridge_slave_1: left allmulticast mode [ 173.854358][ T3970] bridge_slave_1: left promiscuous mode [ 173.860056][ T3970] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.867887][ T3970] bridge_slave_0: left promiscuous mode [ 173.873524][ T3970] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.949446][ T3970] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.958474][ T3970] bond_slave_0: left promiscuous mode [ 173.965524][ T3970] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.974680][ T3970] bond_slave_1: left promiscuous mode [ 173.983181][ T3970] $H (unregistering): Released all slaves [ 174.002153][T16878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.014255][T16878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.039150][ T3970] tipc: Left network mode [ 174.040025][T16878] team0: Port device team_slave_0 added [ 174.051221][T16878] team0: Port device team_slave_1 added [ 174.073991][T16878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.081395][T16878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.108360][T16878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.127955][ T3970] hsr_slave_0: left promiscuous mode [ 174.133830][ T3970] hsr_slave_1: left promiscuous mode [ 174.139558][ T3970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.147047][ T3970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.154986][ T3970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.162612][ T3970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.173516][ T3970] veth1_macvtap: left promiscuous mode [ 174.179065][ T3970] veth0_macvtap: left promiscuous mode [ 174.184718][ T3970] veth1_vlan: left promiscuous mode [ 174.190027][ T3970] veth0_vlan: left promiscuous mode [ 174.284119][ T3970] team0 (unregistering): Port device team_slave_1 removed [ 174.297944][ T3970] team0 (unregistering): Port device team_slave_0 removed [ 174.332265][T16878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.339299][T16878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.366926][T16878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.404893][T16936] netlink: 'syz.2.5860': attribute type 13 has an invalid length. [ 174.416118][T16878] hsr_slave_0: entered promiscuous mode [ 174.424011][T16878] hsr_slave_1: entered promiscuous mode [ 174.430482][T16878] debugfs: 'hsr0' already exists in 'hsr' [ 174.436211][T16878] Cannot create hsr debugfs directory [ 174.444407][T16936] gretap0: refused to change device tx_queue_len [ 174.451273][T16936] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.537933][T16878] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 174.547145][T16878] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 174.560183][T16878] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 174.569345][T16878] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 174.644969][T16878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.664212][T16878] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.678117][ T4020] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.685417][ T4020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.715334][ T4015] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.722534][ T4015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.828562][T16878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.048302][T17020] netlink: 'syz.0.5888': attribute type 1 has an invalid length. [ 175.061584][T16878] veth0_vlan: entered promiscuous mode [ 175.083748][T16878] veth1_vlan: entered promiscuous mode [ 175.111120][T16878] veth0_macvtap: entered promiscuous mode [ 175.120396][T16878] veth1_macvtap: entered promiscuous mode [ 175.143576][T16878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.164732][T16878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.190159][ T3970] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.212347][ T3970] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.240549][ T3970] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.263451][ T3970] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.355344][T17106] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 176.402050][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 176.402062][ T29] audit: type=1400 audit(524464.929:6042): avc: denied { read write } for pid=17111 comm="syz.6.5923" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 176.432863][ T29] audit: type=1400 audit(524464.929:6043): avc: denied { open } for pid=17111 comm="syz.6.5923" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 176.459364][ T29] audit: type=1400 audit(524464.929:6044): avc: denied { ioctl } for pid=17111 comm="syz.6.5923" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 176.540619][ T29] audit: type=1326 audit(524465.079:6045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17121 comm="syz.0.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 176.564032][ T29] audit: type=1326 audit(524465.079:6046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17121 comm="syz.0.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 176.593492][ T29] audit: type=1326 audit(524465.119:6047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17121 comm="syz.0.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 176.616600][ T29] audit: type=1326 audit(524465.119:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17121 comm="syz.0.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 176.639777][ T29] audit: type=1326 audit(524465.119:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17121 comm="syz.0.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 176.663075][ T29] audit: type=1326 audit(524465.119:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17121 comm="syz.0.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 176.686232][ T29] audit: type=1326 audit(524465.119:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17121 comm="syz.0.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 176.891673][T17162] __nla_validate_parse: 14 callbacks suppressed [ 176.891687][T17162] netlink: 332 bytes leftover after parsing attributes in process `syz.6.5944'. [ 176.921667][T17161] geneve2: entered promiscuous mode [ 176.926909][T17161] geneve2: entered allmulticast mode [ 177.131885][T17190] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5956'. [ 177.254663][T17196] geneve2: entered promiscuous mode [ 177.259931][T17196] geneve2: entered allmulticast mode [ 177.402889][T17228] ALSA: seq fatal error: cannot create timer (-22) [ 177.472043][T17241] netlink: 88 bytes leftover after parsing attributes in process `syz.6.5977'. [ 178.386547][T17291] Falling back ldisc for ttyS3. [ 178.460140][T17296] hub 6-0:1.0: USB hub found [ 178.476738][T17296] hub 6-0:1.0: 8 ports detected [ 178.548497][T17312] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 178.549766][T17305] IPVS: stopping master sync thread 17312 ... [ 178.631732][T17317] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6011'. [ 179.047579][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6031'. [ 179.238297][T17384] atomic_op ffff88811a5f3928 conn xmit_atomic 0000000000000000 [ 179.266894][T17393] random: crng reseeded on system resumption [ 179.274511][T17390] 9pnet: Could not find request transport: 0xffffffffffffffff [ 179.282906][T17395] loop6: detected capacity change from 0 to 1024 [ 179.294237][T17393] Restarting kernel threads ... [ 179.311818][T17395] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.320079][T17393] Done restarting kernel threads. [ 179.338143][T17395] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.434753][T16878] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.469176][T17413] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 179.569958][T17423] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.577319][T17423] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.638977][T17423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.650269][T17423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.710082][T17431] bond2: entered promiscuous mode [ 179.715548][T17431] bond2: entered allmulticast mode [ 179.721496][T17431] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.737317][T17431] bond2 (unregistering): Released all slaves [ 179.750451][T17434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6063'. [ 179.759861][ T3970] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.803169][ T3970] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.816310][ T3970] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.816755][T17441] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6066'. [ 179.825505][ T3970] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.868349][T17441] x_tables: ip_tables: udp match: only valid for protocol 17 [ 180.105649][T17482] loop6: detected capacity change from 0 to 512 [ 180.112444][T17482] msdos: Bad value for 'allow_utime' [ 180.194431][T17493] loop6: detected capacity change from 0 to 128 [ 180.201539][T17493] FAT-fs (loop6): Directory bread(block 162) failed [ 180.208462][T17493] FAT-fs (loop6): Directory bread(block 163) failed [ 180.215398][T17493] FAT-fs (loop6): Directory bread(block 164) failed [ 180.222085][T17493] FAT-fs (loop6): Directory bread(block 165) failed [ 180.229123][T17493] FAT-fs (loop6): Directory bread(block 166) failed [ 180.236261][T17493] FAT-fs (loop6): Directory bread(block 167) failed [ 180.242965][T17493] FAT-fs (loop6): Directory bread(block 168) failed [ 180.251086][T17493] FAT-fs (loop6): Directory bread(block 169) failed [ 180.262134][T17493] FAT-fs (loop6): Directory bread(block 162) failed [ 180.270487][T17493] FAT-fs (loop6): Directory bread(block 163) failed [ 180.403370][T17525] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6102'. [ 180.412417][T17525] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6102'. [ 180.694296][T17554] bond1: entered promiscuous mode [ 180.699534][T17554] bond1: entered allmulticast mode [ 180.706668][T17554] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.716581][T17554] bond1 (unregistering): Released all slaves [ 180.817183][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 180.940252][T17585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6128'. [ 181.141473][T17600] loop6: detected capacity change from 0 to 764 [ 181.160544][T17600] Symlink component flag not implemented [ 181.166256][T17600] Symlink component flag not implemented [ 181.175497][T17600] Symlink component flag not implemented (128) [ 181.181986][T17600] Symlink component flag not implemented (122) [ 181.242028][T17607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.250875][T17607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.464414][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 181.464427][ T29] audit: type=1326 audit(524469.970:6307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.4.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5feeb69 code=0x7ffc0000 [ 181.494169][ T29] audit: type=1326 audit(524469.990:6308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.4.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6b5feeb69 code=0x7ffc0000 [ 181.517435][ T29] audit: type=1326 audit(524469.990:6309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.4.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5feeb69 code=0x7ffc0000 [ 181.540669][ T29] audit: type=1326 audit(524469.990:6310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.4.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5feeb69 code=0x7ffc0000 [ 181.563913][ T29] audit: type=1326 audit(524469.990:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.4.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6b5feeb69 code=0x7ffc0000 [ 181.587099][ T29] audit: type=1326 audit(524469.990:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.4.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5feeb69 code=0x7ffc0000 [ 181.610453][ T29] audit: type=1326 audit(524469.990:6313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.4.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5feeb69 code=0x7ffc0000 [ 181.633733][ T29] audit: type=1326 audit(524469.990:6314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.4.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6b5feeb69 code=0x7ffc0000 [ 181.659801][ T29] audit: type=1326 audit(524470.050:6315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.4.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5feeb69 code=0x7ffc0000 [ 181.683148][ T29] audit: type=1326 audit(524470.050:6316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17626 comm="syz.4.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5feeb69 code=0x7ffc0000 [ 182.253539][T17704] __nla_validate_parse: 2 callbacks suppressed [ 182.253554][T17704] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6182'. [ 182.314004][T17710] bridge0: port 3(geneve0) entered disabled state [ 182.320578][T17710] bridge0: port 2(dummy0) entered disabled state [ 182.358465][T17710] bridge1: left promiscuous mode [ 182.363720][T17710] bridge1: left allmulticast mode [ 182.375096][T17710] bond3: left promiscuous mode [ 182.380323][T17710] ip6gre2: left promiscuous mode [ 182.398537][ T3970] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.407178][ T3970] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.419386][T17712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6186'. [ 182.428325][T17712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6186'. [ 182.437463][ T3970] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.445858][ T3970] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.454469][ T3970] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.463040][ T3970] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.472271][ T3970] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.480658][ T3970] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.548872][T17722] loop6: detected capacity change from 0 to 512 [ 182.556002][T17722] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.6192: corrupted in-inode xattr: e_value size too large [ 182.557081][T17722] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.6192: couldn't read orphan inode 15 (err -117) [ 182.586159][T17722] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.616073][T16878] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.731845][T17740] netlink: 260 bytes leftover after parsing attributes in process `syz.6.6198'. [ 182.731863][T17740] netlink: 260 bytes leftover after parsing attributes in process `syz.6.6198'. [ 183.728877][T17819] ALSA: seq fatal error: cannot create timer (-19) [ 184.860672][T17890] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6263'. [ 184.907686][T17894] bond2: entered promiscuous mode [ 184.913137][T17894] bond2: entered allmulticast mode [ 184.918616][T17894] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.944445][T17894] bond2 (unregistering): Released all slaves [ 185.439297][T17934] bond6: entered promiscuous mode [ 185.444362][T17934] bond6: entered allmulticast mode [ 185.458434][T17934] 8021q: adding VLAN 0 to HW filter on device bond6 [ 185.510450][T17934] bond6 (unregistering): Released all slaves [ 185.557830][T17955] bridge1: entered allmulticast mode [ 185.564264][T17941] tunl0: left promiscuous mode [ 185.572060][T17941] 0XD: left allmulticast mode [ 185.592803][T17941] $H: left promiscuous mode [ 185.597804][T17941] bond_slave_0: left promiscuous mode [ 185.603268][T17941] bond_slave_1: left promiscuous mode [ 185.608819][T17941] bridge_slave_1: left promiscuous mode [ 185.759847][T17980] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17980 comm=syz.4.6305 [ 185.772957][T17980] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17980 comm=syz.4.6305 [ 185.843415][T17992] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000004DB|0xffffffffffffffffmemory.events [ 185.880989][T17997] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 185.880989][T17997] program syz.6.6314 not setting count and/or reply_len properly [ 185.994559][T18014] vlan1: entered allmulticast mode [ 186.034267][T18021] SELinux: failed to load policy [ 186.085224][T18033] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6321'. [ 186.281566][T18073] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 186.281566][T18073] program syz.2.6345 not setting count and/or reply_len properly [ 186.407278][T18083] futex_wake_op: syz.1.6350 tries to shift op by -1; fix this program [ 186.437274][T18089] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6353'. [ 186.446731][T18089] netlink: 277 bytes leftover after parsing attributes in process `syz.0.6353'. [ 186.510891][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 186.510929][ T29] audit: type=1400 audit(524475.017:6432): avc: denied { create } for pid=18098 comm="syz.0.6357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 186.539151][ T29] audit: type=1400 audit(524475.037:6433): avc: denied { bind } for pid=18098 comm="syz.0.6357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 186.604626][ T29] audit: type=1400 audit(524475.107:6434): avc: denied { read write } for pid=18105 comm="syz.0.6360" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 186.627888][ T29] audit: type=1400 audit(524475.107:6435): avc: denied { open } for pid=18105 comm="syz.0.6360" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 186.653347][ T3377] hid-generic 0000:0000:0000.0009: unknown main item tag 0x1 [ 186.660905][ T3377] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 186.668431][ T3377] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 186.676024][ T3377] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 186.683457][ T3377] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 186.690902][ T3377] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 186.698339][ T3377] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 186.705777][ T3377] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 186.713282][ T3377] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 186.720798][ T3377] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 186.732024][ T3377] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 186.760705][T18118] netlink: 'syz.0.6366': attribute type 1 has an invalid length. [ 186.768622][T18118] netlink: 'syz.0.6366': attribute type 6 has an invalid length. [ 186.776393][T18118] netlink: 'syz.0.6366': attribute type 3 has an invalid length. [ 186.784176][T18118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6366'. [ 186.844869][T18131] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 186.890960][ T29] audit: type=1326 audit(524475.386:6436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18138 comm="syz.0.6373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 186.914843][ T29] audit: type=1326 audit(524475.386:6437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18138 comm="syz.0.6373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 186.938058][ T29] audit: type=1326 audit(524475.386:6438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18138 comm="syz.0.6373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 186.961591][ T29] audit: type=1326 audit(524475.386:6439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18138 comm="syz.0.6373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 186.984752][ T29] audit: type=1326 audit(524475.386:6440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18138 comm="syz.0.6373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 187.008186][ T29] audit: type=1326 audit(524475.386:6441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18138 comm="syz.0.6373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fbdd099eb69 code=0x7ffc0000 [ 187.037424][T18144] netlink: 'syz.1.6374': attribute type 13 has an invalid length. [ 187.060325][T18144] 0XD: refused to change device tx_queue_len [ 187.066800][T18144] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 187.179964][T18167] batadv1: left allmulticast mode [ 187.185130][T18167] batadv1: left promiscuous mode [ 187.190272][T18167] bridge0: port 3(batadv1) entered disabled state [ 187.212708][T18167] bridge_slave_0: left promiscuous mode [ 187.218585][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.285350][T18191] netlink: 'syz.0.6383': attribute type 1 has an invalid length. [ 187.293320][T18191] __nla_validate_parse: 2 callbacks suppressed [ 187.293339][T18191] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.6383'. [ 187.356256][T18204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6386'. [ 187.445556][T18227] macvlan0: entered allmulticast mode [ 187.452623][T18227] macvlan0 (unregistering): left allmulticast mode [ 187.586157][T18253] pimreg: entered allmulticast mode [ 187.594513][T18253] pimreg: left allmulticast mode [ 188.553750][T18416] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6447'. [ 188.579752][T18418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6448'. [ 188.609614][T18421] bridge0: entered allmulticast mode [ 188.615469][T18421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6449'. [ 188.624408][T18421] batadv1: left allmulticast mode [ 188.629527][T18421] batadv1: left promiscuous mode [ 188.634646][T18421] bridge0: port 3(batadv1) entered disabled state [ 188.643700][T18421] bridge_slave_1: left promiscuous mode [ 188.649537][T18421] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.667335][T18421] bridge_slave_0: left promiscuous mode [ 188.673031][T18421] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.695940][T18421] bridge0 (unregistering): left allmulticast mode [ 188.759735][T18435] random: crng reseeded on system resumption [ 189.045600][T18475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6465'. [ 189.211278][T18503] SELinux: Context :syz0:M:18446744073709551614:{ jᴒw@+K2 -~(D@(L eD0XVlw{IڏF &t}AE$zוEUsp%KW=Q#HԩsFUg`"0q 0x000000000003f054 [ 208.587013][T20681] [ 208.589320][T20681] Reported by Kernel Concurrency Sanitizer on: [ 208.595469][T20681] CPU: 0 UID: 0 PID: 20681 Comm: syz.1.7241 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 208.607621][T20681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.617771][T20681] ==================================================================