last executing test programs: 54.311328757s ago: executing program 32 (id=4917): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x142000) ioctl$SG_IO(r1, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x1, 0xdd, &(0x7f0000000040)=[{&(0x7f0000000580)=""/226, 0xe2}]}, &(0x7f00000000c0)="ff33501ef663", 0x0, 0x840804, 0x10036, 0x1000, 0x0}) 46.605808509s ago: executing program 33 (id=5508): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xd) 45.415971413s ago: executing program 34 (id=5537): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 31.624241465s ago: executing program 5 (id=6075): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e1d, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r2, 0x5}, &(0x7f0000000080)=0x8) 31.574653966s ago: executing program 6 (id=6081): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x0, 0x236, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) 31.511098107s ago: executing program 6 (id=6085): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) timer_getoverrun(0x0) 31.459075649s ago: executing program 6 (id=6087): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f0000000000)={{}, {0x0, 0x9}}, 0x0) 31.37293653s ago: executing program 6 (id=6090): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r2) 31.138484135s ago: executing program 7 (id=6098): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x40103, 0x288}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0xddd3, 0x4, 0x0, 0x0) 31.057244746s ago: executing program 7 (id=6101): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 31.047866867s ago: executing program 7 (id=6103): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x17f, 0x4, 0x11, 0x1, 0x8}, &(0x7f0000000040)=0x9c) 30.86841396s ago: executing program 1 (id=6113): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000000c0)={[{@dots}, {@fat=@nfs}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0x3}}, {@fat=@uid}]}, 0x1, 0x22d, &(0x7f0000000300)="$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") r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback, r0, 0x2f, 0x10, 0xffffffffffffffff, @void, @value=0x0}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 30.84332568s ago: executing program 1 (id=6115): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) 30.803586811s ago: executing program 1 (id=6116): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x0, 0x1}, {0x2, 0x4, 0x1800}], 0x2, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) 30.740838373s ago: executing program 5 (id=6119): r0 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x0, 0x3}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000480), 0x66) 30.740606303s ago: executing program 5 (id=6120): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 30.683308934s ago: executing program 1 (id=6121): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="e3", 0x1}], 0x1, 0x8) fcntl$setpipe(r0, 0x407, 0x176) vmsplice(r1, &(0x7f0000001080)=[{&(0x7f0000000a40)='5', 0x1}], 0x1, 0x8) vmsplice(r0, &(0x7f0000002a80)=[{&(0x7f0000000580)='I', 0x1}], 0x1, 0x8) 30.682960834s ago: executing program 5 (id=6122): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 30.642910494s ago: executing program 5 (id=6125): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) 30.642555644s ago: executing program 6 (id=6126): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) 30.574388886s ago: executing program 1 (id=6127): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 30.521102197s ago: executing program 5 (id=6128): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfe3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 30.498904347s ago: executing program 35 (id=6128): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfe3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 30.430125489s ago: executing program 6 (id=6130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x20}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) 30.429977939s ago: executing program 36 (id=6130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x20}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) 29.34159608s ago: executing program 1 (id=6132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x0, 0xdd1, 0xffffffb3, 0x0, 0x88ff, 0x10}) 29.34154151s ago: executing program 37 (id=6132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x0, 0xdd1, 0xffffffb3, 0x0, 0x88ff, 0x10}) 29.34138959s ago: executing program 7 (id=6133): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 29.119195265s ago: executing program 7 (id=6140): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 29.099391985s ago: executing program 7 (id=6142): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x14}, 0x0) 14.734946809s ago: executing program 9 (id=6422): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) 14.587040842s ago: executing program 9 (id=6423): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x76) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 14.423621515s ago: executing program 9 (id=6426): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0, 0x0, 0x3ff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) removexattr(0x0, 0x0) 14.287638547s ago: executing program 9 (id=6428): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000b80)='./file0/file0\x00', 0x100) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221) 14.248076118s ago: executing program 9 (id=6430): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) cachestat(r1, &(0x7f0000000080)={0x1, 0x7}, &(0x7f00000000c0), 0x0) 14.052941172s ago: executing program 9 (id=6436): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x101000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x5, 0x9, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x2}}]}, 0x48}}, 0x4040014) 14.051221082s ago: executing program 38 (id=6142): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x14}, 0x0) 14.020886673s ago: executing program 39 (id=6436): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x101000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x5, 0x9, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x2}}]}, 0x48}}, 0x4040014) 1.637424517s ago: executing program 4 (id=6993): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x8966, 0x0, 0xfffc, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x9, 0x4, 0x0, 0x80000000, 0x100000000006, 0x9, 0x4, 0x40000000000000}, {0x0, 0x9, 0x53e1, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00', 0x34ff, 0x4, 0x0, 0x0, 0x8001, 0xfffffffd, 0x2}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 1.553676949s ago: executing program 4 (id=7004): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1892f84d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1.420332051s ago: executing program 4 (id=7001): ioperm(0x7fff, 0x5, 0x4) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 1.335192753s ago: executing program 2 (id=7005): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x80}, 0x18) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) 1.299804914s ago: executing program 2 (id=7006): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000b00)='fib_table_lookup\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 1.292923124s ago: executing program 0 (id=7007): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.234584495s ago: executing program 2 (id=7009): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 1.234375065s ago: executing program 0 (id=7010): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 1.199794006s ago: executing program 3 (id=7013): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r2, 0x0, 0x8) 1.199322336s ago: executing program 2 (id=7014): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 1.158547677s ago: executing program 3 (id=7015): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x38, r2, 0x1b, 0x0, 0x3, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x0) 1.153269967s ago: executing program 0 (id=7016): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000005304ec"], 0x28}, 0x1, 0x0, 0x0, 0x64801}, 0x40000) 1.101169048s ago: executing program 2 (id=7017): setuid(0xee01) r0 = semget$private(0x0, 0x4, 0x29b) semop(r0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000002340)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) 1.101028928s ago: executing program 3 (id=7018): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r2, 0x0, 0x80, 0x6) 1.100899978s ago: executing program 0 (id=7019): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 1.0096055s ago: executing program 0 (id=7020): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 578.564469ms ago: executing program 8 (id=7028): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 543.344339ms ago: executing program 4 (id=7029): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r0}, 0x10) r1 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88) 474.36463ms ago: executing program 4 (id=7030): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000700000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) 474.224101ms ago: executing program 4 (id=7031): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x12000) 285.450134ms ago: executing program 2 (id=7032): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x1000}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00", @ANYRES64=r0, @ANYRESDEC], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 285.076284ms ago: executing program 8 (id=7042): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) ioctl$VT_DISALLOCATE(r0, 0x5608) 252.034575ms ago: executing program 3 (id=7033): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x92}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x50) 240.357735ms ago: executing program 8 (id=7034): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x240, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 202.630716ms ago: executing program 8 (id=7035): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c0008"], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 74.384088ms ago: executing program 3 (id=7036): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$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") r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x8080, 0xfda97d4c0aa0cdb6) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 67.393059ms ago: executing program 8 (id=7037): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 31.878789ms ago: executing program 3 (id=7038): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000d80)="5453b4b759f9d4f4f33bda880b70a0", 0xf}], 0x1}}], 0x1, 0xc0) 526.52µs ago: executing program 0 (id=7039): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0xf8}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000240)=0x10001) write(r0, &(0x7f0000000280)="4591", 0x2) 0s ago: executing program 8 (id=7040): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00r\a\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) kernel console output (not intermixed with test programs): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.530023][T16257] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 49848 - 0 [ 176.543235][ T4614] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.569971][T16277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5344'. [ 176.592067][ T4614] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.600343][ T4614] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 49848 - 0 [ 176.608655][ T4614] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 176.643659][ T4635] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.651901][ T4635] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 49848 - 0 [ 176.660281][ T4635] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 176.668889][T16283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5346'. [ 176.678015][T16283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5346'. [ 176.735645][ T4635] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.743957][ T4635] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 49848 - 0 [ 176.752241][ T4635] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 176.779782][ T4635] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.788109][ T4635] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 49848 - 0 [ 176.796479][ T4635] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.673339][ T3509] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 177.852604][T16346] lo speed is unknown, defaulting to 1000 [ 178.326242][T16399] sd 0:0:1:0: device reset [ 178.367131][ T4614] tipc: Subscription rejected, illegal request [ 178.586080][T16428] IPv6: Can't replace route, no match found [ 178.648365][T16436] batadv_slave_1: entered promiscuous mode [ 178.655174][T16435] batadv_slave_1: left promiscuous mode [ 178.805219][T16461] loop4: detected capacity change from 0 to 128 [ 178.962986][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 178.963004][ T29] audit: type=1400 audit(252.018:6716): avc: denied { name_bind } for pid=16484 comm="syz.0.5437" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 179.156497][ T29] audit: type=1400 audit(252.218:6717): avc: denied { ioctl } for pid=16498 comm="syz.1.5443" path="socket:[44231]" dev="sockfs" ino=44231 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 179.362793][ T29] audit: type=1326 audit(252.418:6718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16508 comm="syz.2.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d4e5eec9 code=0x7ffc0000 [ 179.388479][ T29] audit: type=1326 audit(252.418:6719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16508 comm="syz.2.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d4e5eec9 code=0x7ffc0000 [ 179.411773][ T29] audit: type=1326 audit(252.458:6720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16508 comm="syz.2.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d4e5eec9 code=0x7ffc0000 [ 179.434916][ T29] audit: type=1326 audit(252.458:6722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16508 comm="syz.2.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff3d4e5eec9 code=0x7ffc0000 [ 179.457800][ T29] audit: type=1326 audit(252.458:6721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16508 comm="syz.2.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d4e5eec9 code=0x7ffc0000 [ 179.480800][ T29] audit: type=1326 audit(252.458:6723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16508 comm="syz.2.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d4e5eec9 code=0x7ffc0000 [ 179.503990][ T29] audit: type=1326 audit(252.458:6724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16508 comm="syz.2.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d4e5eec9 code=0x7ffc0000 [ 179.526964][ T29] audit: type=1326 audit(252.458:6725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16508 comm="syz.2.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d4e5eec9 code=0x7ffc0000 [ 179.689322][T16525] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 48 [ 179.915281][T16542] IPv6: Can't replace route, no match found [ 179.962424][T16544] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.998886][T16548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.021755][T16548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.031889][T16544] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.095134][T16544] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.115573][T16552] __nla_validate_parse: 13 callbacks suppressed [ 180.115587][T16552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5468'. [ 180.216619][T16544] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.309236][ T4614] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.352119][ T4614] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.390436][T16517] syz.5.5451 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 180.404663][T16517] CPU: 0 UID: 0 PID: 16517 Comm: syz.5.5451 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 180.404700][T16517] Tainted: [W]=WARN [ 180.404708][T16517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 180.404724][T16517] Call Trace: [ 180.404730][T16517] [ 180.404764][T16517] __dump_stack+0x1d/0x30 [ 180.404789][T16517] dump_stack_lvl+0xe8/0x140 [ 180.404812][T16517] dump_stack+0x15/0x1b [ 180.404832][T16517] dump_header+0x81/0x220 [ 180.404956][T16517] oom_kill_process+0x342/0x400 [ 180.405000][T16517] out_of_memory+0x979/0xb80 [ 180.405092][T16517] try_charge_memcg+0x5e6/0x9e0 [ 180.405128][T16517] obj_cgroup_charge_pages+0xa6/0x150 [ 180.405190][T16517] __memcg_kmem_charge_page+0x9f/0x170 [ 180.405231][T16517] __alloc_frozen_pages_noprof+0x188/0x360 [ 180.405272][T16517] alloc_pages_mpol+0xb3/0x250 [ 180.405325][T16517] alloc_pages_noprof+0x90/0x130 [ 180.405393][T16517] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 180.405442][T16517] __kvmalloc_node_noprof+0x30f/0x4e0 [ 180.405474][T16517] ? ip_set_alloc+0x1f/0x30 [ 180.405536][T16517] ? ip_set_alloc+0x1f/0x30 [ 180.405581][T16517] ip_set_alloc+0x1f/0x30 [ 180.405604][T16517] hash_netiface_create+0x282/0x740 [ 180.405697][T16517] ? __pfx_hash_netiface_create+0x10/0x10 [ 180.405718][T16517] ip_set_create+0x3c9/0x960 [ 180.405754][T16517] ? __nla_parse+0x40/0x60 [ 180.405824][T16517] nfnetlink_rcv_msg+0x4c3/0x590 [ 180.405893][T16517] netlink_rcv_skb+0x123/0x220 [ 180.405920][T16517] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 180.406026][T16517] nfnetlink_rcv+0x16b/0x1690 [ 180.406070][T16517] ? nlmon_xmit+0x4f/0x60 [ 180.406121][T16517] ? consume_skb+0x49/0x150 [ 180.406146][T16517] ? nlmon_xmit+0x4f/0x60 [ 180.406176][T16517] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 180.406207][T16517] ? __dev_queue_xmit+0x1200/0x2000 [ 180.406237][T16517] ? __dev_queue_xmit+0x182/0x2000 [ 180.406280][T16517] ? ref_tracker_free+0x37d/0x3e0 [ 180.406372][T16517] ? __netlink_deliver_tap+0x4dc/0x500 [ 180.406408][T16517] netlink_unicast+0x5bd/0x690 [ 180.406439][T16517] netlink_sendmsg+0x58b/0x6b0 [ 180.406529][T16517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.406556][T16517] __sock_sendmsg+0x145/0x180 [ 180.406652][T16517] ____sys_sendmsg+0x31e/0x4e0 [ 180.406685][T16517] ___sys_sendmsg+0x17b/0x1d0 [ 180.406733][T16517] __x64_sys_sendmsg+0xd4/0x160 [ 180.406835][T16517] x64_sys_call+0x191e/0x2ff0 [ 180.406877][T16517] do_syscall_64+0xd2/0x200 [ 180.406914][T16517] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 180.406954][T16517] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 180.406981][T16517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.407017][T16517] RIP: 0033:0x7fd85ea8eec9 [ 180.407060][T16517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.407158][T16517] RSP: 002b:00007fd85d4ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.407182][T16517] RAX: ffffffffffffffda RBX: 00007fd85ece5fa0 RCX: 00007fd85ea8eec9 [ 180.407199][T16517] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 180.407215][T16517] RBP: 00007fd85eb11f91 R08: 0000000000000000 R09: 0000000000000000 [ 180.407231][T16517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.407243][T16517] R13: 00007fd85ece6038 R14: 00007fd85ece5fa0 R15: 00007ffcc59543e8 [ 180.407263][T16517] [ 180.407269][T16517] memory: usage 307200kB, limit 307200kB, failcnt 90 [ 180.544940][ T4614] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.546674][T16517] memory+swap: usage 307332kB, limit 9007199254740988kB, failcnt 0 [ 180.546688][T16517] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 180.552609][ T4614] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.557006][T16517] Memory cgroup stats for /syz5: [ 180.558404][T16517] cache 0 [ 180.784714][T16517] rss 4096 [ 180.787775][T16517] shmem 0 [ 180.791029][T16517] mapped_file 0 [ 180.794527][T16517] dirty 0 [ 180.797534][T16517] writeback 0 [ 180.800838][T16517] workingset_refault_anon 2052 [ 180.805694][T16517] workingset_refault_file 0 [ 180.810227][T16517] swap 180224 [ 180.813520][T16517] swapcached 12288 [ 180.817273][T16517] pgpgin 9776 [ 180.820611][T16517] pgpgout 9773 [ 180.824055][T16517] pgfault 17907 [ 180.827515][T16517] pgmajfault 257 [ 180.831057][T16517] inactive_anon 12288 [ 180.835111][T16517] active_anon 0 [ 180.838603][T16517] inactive_file 0 [ 180.842313][T16517] active_file 0 [ 180.845791][T16517] unevictable 0 [ 180.849266][T16517] hierarchical_memory_limit 314572800 [ 180.854654][T16517] hierarchical_memsw_limit 9223372036854771712 [ 180.860830][T16517] total_cache 0 [ 180.864511][T16517] total_rss 4096 [ 180.868057][T16517] total_shmem 0 [ 180.871515][T16517] total_mapped_file 0 [ 180.875584][T16517] total_dirty 0 [ 180.879158][T16517] total_writeback 0 [ 180.883052][T16517] total_workingset_refault_anon 2052 [ 180.888361][T16517] total_workingset_refault_file 0 [ 180.893384][T16517] total_swap 180224 [ 180.897212][T16517] total_swapcached 12288 [ 180.901580][T16517] total_pgpgin 9776 [ 180.905418][T16517] total_pgpgout 9773 [ 180.909311][T16517] total_pgfault 17907 [ 180.913390][T16517] total_pgmajfault 257 [ 180.917493][T16517] total_inactive_anon 12288 [ 180.922011][T16517] total_active_anon 0 [ 180.926032][T16517] total_inactive_file 0 [ 180.930232][T16517] total_active_file 0 [ 180.934229][T16517] total_unevictable 0 [ 180.938239][T16517] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.5451,pid=16516,uid=0 [ 180.953131][T16517] Memory cgroup out of memory: Killed process 16516 (syz.5.5451) total-vm:93824kB, anon-rss:1136kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 181.049030][T16572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5478'. [ 181.342461][T16517] syz.5.5451 (16517) used greatest stack depth: 7512 bytes left [ 181.392814][T16619] loop5: detected capacity change from 0 to 128 [ 181.501172][T16629] netlink: 'syz.4.5504': attribute type 3 has an invalid length. [ 181.537894][T16631] loop5: detected capacity change from 0 to 512 [ 181.538178][T16631] EXT4-fs: Ignoring removed bh option [ 181.826276][ T4614] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.828240][T16631] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.874576][T16064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.908295][ T4614] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.926132][T16655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5514'. [ 181.952552][ T4614] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.005870][T16664] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 182.005870][T16664] program syz.1.5516 not setting count and/or reply_len properly [ 182.031565][ T4614] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.116393][ T4614] bridge_slave_1: left allmulticast mode [ 182.116418][ T4614] bridge_slave_1: left promiscuous mode [ 182.116608][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.117562][ T4614] bridge_slave_0: left allmulticast mode [ 182.117581][ T4614] bridge_slave_0: left promiscuous mode [ 182.117695][ T4614] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.163872][T16672] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5521'. [ 182.318907][ T4614] bond0 (unregistering): left promiscuous mode [ 182.318924][ T4614] bond_slave_0: left promiscuous mode [ 182.319042][ T4614] bond_slave_1: left promiscuous mode [ 182.319815][ T4614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.320672][ T4614] bond_slave_0: left allmulticast mode [ 182.321896][ T4614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.323703][ T4614] bond_slave_1: left allmulticast mode [ 182.324623][ T4614] bond0 (unregistering): Released all slaves [ 182.332272][T16643] lo speed is unknown, defaulting to 1000 [ 182.453270][ T4614] batadv0: left promiscuous mode [ 182.476338][ T4614] hsr_slave_0: left promiscuous mode [ 182.482658][ T4614] hsr_slave_1: left promiscuous mode [ 182.500161][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.507616][ T4614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.531200][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.538649][ T4614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.636754][ T4614] veth1_macvtap: left allmulticast mode [ 182.642435][ T4614] veth1_macvtap: left promiscuous mode [ 182.675382][ T4614] veth0_macvtap: left promiscuous mode [ 182.693212][ T4614] veth1_vlan: left promiscuous mode [ 182.710564][ T4614] veth0_vlan: left promiscuous mode [ 182.744441][T16702] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5535'. [ 182.819802][ T4614] team0 (unregistering): Port device vlan0 removed [ 182.923795][ T4614] team0 (unregistering): Port device team_slave_1 removed [ 182.951397][ T4614] team0 (unregistering): Port device team_slave_0 removed [ 183.063211][T16643] chnl_net:caif_netlink_parms(): no params data found [ 183.210194][T16643] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.217519][T16643] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.251708][T16643] bridge_slave_0: entered allmulticast mode [ 183.282351][T16643] bridge_slave_0: entered promiscuous mode [ 183.300856][T16643] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.307985][T16643] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.343720][T16643] bridge_slave_1: entered allmulticast mode [ 183.346472][T16763] loop5: detected capacity change from 0 to 512 [ 183.365094][T16763] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 183.372733][T16643] bridge_slave_1: entered promiscuous mode [ 183.377346][T16763] EXT4-fs (loop5): 1 orphan inode deleted [ 183.386631][T16763] EXT4-fs (loop5): 1 truncate cleaned up [ 183.405775][T16763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.434693][T16763] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.5.5560: path /43/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 183.467866][T16643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.495029][T16643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.495656][T16763] EXT4-fs (loop5): Remounting filesystem read-only [ 183.552690][T16643] team0: Port device team_slave_0 added [ 183.569685][T16643] team0: Port device team_slave_1 added [ 183.584455][T16712] lo speed is unknown, defaulting to 1000 [ 183.593129][T16064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.616683][ T4614] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.627079][ T4614] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.667630][T16643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.674627][T16643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.700611][T16643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.755512][T16777] loop9: detected capacity change from 0 to 7 [ 183.770259][T16777] Buffer I/O error on dev loop9, logical block 0, async page read [ 183.778388][T16777] Buffer I/O error on dev loop9, logical block 0, async page read [ 183.786334][T16777] loop9: unable to read partition table [ 183.794296][T16777] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 183.794296][T16777] ) failed (rc=-5) [ 183.808915][ T4614] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.819240][ T4614] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.834885][T16643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.842034][T16643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.868018][T16643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.930934][ T4614] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.941369][ T4614] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.982368][T16643] hsr_slave_0: entered promiscuous mode [ 183.993938][T16643] hsr_slave_1: entered promiscuous mode [ 184.005231][T16643] debugfs: 'hsr0' already exists in 'hsr' [ 184.010998][T16643] Cannot create hsr debugfs directory [ 184.055268][T16781] syzkaller1: entered promiscuous mode [ 184.060881][T16781] syzkaller1: entered allmulticast mode [ 184.070639][ T4614] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.081022][ T4614] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.199215][T16712] chnl_net:caif_netlink_parms(): no params data found [ 184.293222][ T3509] hid_parser_main: 29 callbacks suppressed [ 184.293241][ T3509] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 184.311441][ T3509] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 184.324204][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 184.324217][ T29] audit: type=1400 audit(257.390:6865): avc: denied { name_bind } for pid=16803 comm="syz.5.5576" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 184.400054][ T4614] bridge_slave_1: left allmulticast mode [ 184.405979][ T4614] bridge_slave_1: left promiscuous mode [ 184.411682][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.414424][ T29] audit: type=1400 audit(257.480:6866): avc: denied { write } for pid=16816 comm="syz.0.5581" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 184.421072][T16817] hub 9-0:1.0: USB hub found [ 184.443104][ T29] audit: type=1400 audit(257.510:6867): avc: denied { shutdown } for pid=16809 comm="syz.1.5578" lport=55504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 184.466445][T16817] hub 9-0:1.0: 8 ports detected [ 184.476494][ T4614] bridge_slave_0: left allmulticast mode [ 184.482170][ T4614] bridge_slave_0: left promiscuous mode [ 184.487924][ T4614] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.509923][T16823] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5582'. [ 184.601476][ T29] audit: type=1400 audit(257.660:6868): avc: denied { mount } for pid=16829 comm="syz.0.5585" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 184.626794][ T4614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.637269][ T4614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.648221][ T29] audit: type=1326 audit(257.710:6869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16831 comm="syz.0.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75609eec9 code=0x7ffc0000 [ 184.671286][ T29] audit: type=1326 audit(257.710:6870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16831 comm="syz.0.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75609eec9 code=0x7ffc0000 [ 184.694668][ T4614] bond0 (unregistering): Released all slaves [ 184.704319][ T29] audit: type=1326 audit(257.710:6871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16831 comm="syz.0.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fa75609eec9 code=0x7ffc0000 [ 184.727346][ T29] audit: type=1326 audit(257.710:6872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16831 comm="syz.0.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75609eec9 code=0x7ffc0000 [ 184.750529][ T29] audit: type=1326 audit(257.710:6873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16831 comm="syz.0.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75609eec9 code=0x7ffc0000 [ 184.794385][T16712] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.801470][T16712] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.810018][T16712] bridge_slave_0: entered allmulticast mode [ 184.817360][T16712] bridge_slave_0: entered promiscuous mode [ 184.824567][ T4614] tipc: Left network mode [ 184.829190][T16712] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.836405][T16712] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.843903][T16712] bridge_slave_1: entered allmulticast mode [ 184.851045][T16712] bridge_slave_1: entered promiscuous mode [ 184.885921][ T29] audit: type=1400 audit(257.950:6874): avc: denied { setopt } for pid=16842 comm="syz.1.5590" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 184.915701][T16712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.947269][T16712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.957927][T16643] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 184.978707][ T4614] hsr_slave_0: left promiscuous mode [ 184.993850][ T4614] hsr_slave_1: left promiscuous mode [ 185.000503][T16851] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5595'. [ 185.002996][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.017030][ T4614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.027552][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.035120][ T4614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.048151][ T4614] veth1_macvtap: left allmulticast mode [ 185.054060][ T4614] veth1_macvtap: left promiscuous mode [ 185.059693][ T4614] veth0_macvtap: left promiscuous mode [ 185.065252][ T4614] veth1_vlan: left promiscuous mode [ 185.070726][ T4614] veth0_vlan: left promiscuous mode [ 185.138696][ T4614] team0 (unregistering): Port device team_slave_1 removed [ 185.148512][ T4614] team0 (unregistering): Port device team_slave_0 removed [ 185.156503][ T4609] smc: removing ib device !yz! [ 185.186309][T16643] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 185.195520][T16643] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 185.242142][T16712] team0: Port device team_slave_0 added [ 185.251201][T16866] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16866 comm=syz.5.5602 [ 185.258298][T16712] team0: Port device team_slave_1 added [ 185.288697][T16643] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 185.319107][T16712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.326201][T16712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.352223][T16712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.374145][T16712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.381204][T16712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.407227][T16712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.427156][T16883] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 185.427934][T16881] IPVS: stopping master sync thread 16883 ... [ 185.489540][T16712] hsr_slave_0: entered promiscuous mode [ 185.495998][T16712] hsr_slave_1: entered promiscuous mode [ 185.522997][T16643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.539848][T16643] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.562617][T16888] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 185.570107][T16888] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 185.573247][ T4876] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.584216][ T4876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.646535][ T4876] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.653664][ T4876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.672657][T16643] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 185.683049][T16643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.789748][T16643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.834507][T16712] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 185.852114][T16920] loop5: detected capacity change from 0 to 1024 [ 185.860155][T16712] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 185.871889][T16712] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 185.896221][T16712] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 185.965976][T16947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5628'. [ 186.028397][T16947] team0: Port device team_slave_0 removed [ 186.040050][T16956] loop5: detected capacity change from 0 to 1024 [ 186.065526][T16956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.070996][T16712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.100475][T16712] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.131261][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.138371][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.170787][T16064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.180687][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.187800][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.210033][T16712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.220516][T16712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.258679][T16643] veth0_vlan: entered promiscuous mode [ 186.279559][T16643] veth1_vlan: entered promiscuous mode [ 186.312706][T16643] veth0_macvtap: entered promiscuous mode [ 186.330364][T16643] veth1_macvtap: entered promiscuous mode [ 186.364057][T16643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.391928][T16643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.420202][T16712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.449688][ T4876] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.468023][ T4614] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.493408][ T4614] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.516471][ T4614] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.607797][T17016] loop6: detected capacity change from 0 to 1024 [ 186.615938][T17016] EXT4-fs: Ignoring removed nobh option [ 186.621531][T17016] EXT4-fs: inline encryption not supported [ 186.636783][T17016] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.663855][T17016] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.5650: Allocating blocks 385-513 which overlap fs metadata [ 186.702665][T17016] EXT4-fs (loop6): pa ffff88810725daf0: logic 16, phys. 129, len 24 [ 186.711305][T17016] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 186.741757][T17016] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 186.754116][T17016] EXT4-fs (loop6): This should not happen!! Data will be lost [ 186.754116][T17016] [ 186.763841][T17016] EXT4-fs (loop6): Total free blocks count 0 [ 186.769894][T17016] EXT4-fs (loop6): Free/Dirty block details [ 186.775847][T17016] EXT4-fs (loop6): free_blocks=128 [ 186.780977][T17016] EXT4-fs (loop6): dirty_blocks=0 [ 186.786111][T17016] EXT4-fs (loop6): Block reservation details [ 186.792106][T17016] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 186.859261][T16712] veth0_vlan: entered promiscuous mode [ 186.886592][T16712] veth1_vlan: entered promiscuous mode [ 186.915736][T16712] veth0_macvtap: entered promiscuous mode [ 186.923144][T16712] veth1_macvtap: entered promiscuous mode [ 186.938736][T16712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.952542][T16712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.998111][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.020814][ T4876] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.022154][T17055] loop6: detected capacity change from 0 to 1024 [ 187.037010][T17055] EXT4-fs: Ignoring removed nobh option [ 187.042800][T17055] EXT4-fs: Ignoring removed bh option [ 187.053370][T17055] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 187.066193][ T4876] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.085699][ T4876] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.094830][T17055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.125801][T17055] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.5665: Allocating blocks 497-513 which overlap fs metadata [ 187.149854][T17054] EXT4-fs (loop6): pa ffff888107193a80: logic 16, phys. 145, len 23 [ 187.157915][T17054] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 187.190422][T16643] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.210666][T17056] lo speed is unknown, defaulting to 1000 [ 187.700608][T17093] loop5: detected capacity change from 0 to 512 [ 187.734654][T17093] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 187.780157][T17093] EXT4-fs (loop5): mount failed [ 187.858611][T17120] loop7: detected capacity change from 0 to 1024 [ 187.872206][T17126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5695'. [ 187.875850][T17120] EXT4-fs: Ignoring removed orlov option [ 187.901832][T17128] sg_write: data in/out 63015/8 bytes for SCSI command 0x7e-- guessing data in; [ 187.901832][T17128] program syz.6.5696 not setting count and/or reply_len properly [ 187.916595][T17124] loop5: detected capacity change from 0 to 8192 [ 187.929891][T17120] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 187.948392][T17120] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 187.986610][T16712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 188.293724][T17183] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.407359][T17168] lo speed is unknown, defaulting to 1000 [ 188.425093][T17199] all (unregistering): Released all slaves [ 188.580039][T17225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5741'. [ 188.806960][T17243] lo speed is unknown, defaulting to 1000 [ 188.924146][T17275] loop6: detected capacity change from 0 to 128 [ 189.137152][T17300] loop5: detected capacity change from 0 to 2048 [ 189.142800][T17301] smc: net device bond0 applied user defined pnetid SYZ0 [ 189.155515][T17301] smc: net device bond0 erased user defined pnetid SYZ0 [ 189.165042][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5775'. [ 189.186395][T17300] loop5: p1 < > p4 [ 189.192328][T17300] loop5: p4 size 8388608 extends beyond EOD, truncated [ 189.265333][T17315] 9pnet: Could not find request transport: r [ 189.273670][T17319] netlink: 'syz.6.5783': attribute type 10 has an invalid length. [ 189.298906][T17319] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 189.369178][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 189.369208][ T29] audit: type=1400 audit(262.430:7039): avc: denied { allowed } for pid=17335 comm="syz.6.5793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 189.394388][ T29] audit: type=1400 audit(262.430:7040): avc: denied { create } for pid=17335 comm="syz.6.5793" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 189.452667][ T29] audit: type=1400 audit(262.510:7041): avc: denied { read } for pid=17338 comm="syz.0.5794" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 189.475285][ T29] audit: type=1400 audit(262.510:7042): avc: denied { open } for pid=17338 comm="syz.0.5794" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 189.475798][T17339] rtc_cmos 00:00: Alarms can be up to one day in the future [ 189.498358][ T29] audit: type=1400 audit(262.510:7043): avc: denied { ioctl } for pid=17338 comm="syz.0.5794" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 189.545696][ T29] audit: type=1326 audit(262.600:7044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17342 comm="syz.6.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0c65eec9 code=0x7ffc0000 [ 189.568661][ T29] audit: type=1326 audit(262.600:7045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17342 comm="syz.6.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0c65eec9 code=0x7ffc0000 [ 189.591676][ T29] audit: type=1326 audit(262.600:7046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17342 comm="syz.6.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f6d0c65eec9 code=0x7ffc0000 [ 189.614682][ T29] audit: type=1326 audit(262.600:7047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17342 comm="syz.6.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0c65eec9 code=0x7ffc0000 [ 189.637716][ T29] audit: type=1326 audit(262.600:7048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17342 comm="syz.6.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0c65eec9 code=0x7ffc0000 [ 189.662398][ T3381] rtc_cmos 00:00: Alarms can be up to one day in the future [ 189.670040][ T3381] rtc_cmos 00:00: Alarms can be up to one day in the future [ 189.677707][ T3381] rtc_cmos 00:00: Alarms can be up to one day in the future [ 189.685593][ T3381] rtc_cmos 00:00: Alarms can be up to one day in the future [ 189.692894][ T3381] rtc rtc0: __rtc_set_alarm: err=-22 [ 189.975984][T17327] Set syz1 is full, maxelem 65536 reached [ 190.004461][T17183] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.246359][T17183] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.294856][T17183] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.319945][T17391] bridge: RTM_NEWNEIGH with invalid ether address [ 190.320050][T17391] bridge: RTM_NEWNEIGH with invalid ether address [ 190.341419][ T4876] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.360136][T17395] IPv6: NLM_F_CREATE should be specified when creating new route [ 190.382780][ T4876] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.382821][ T4876] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.382883][ T4876] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.542289][T17416] loop7: detected capacity change from 0 to 512 [ 190.556409][T17416] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 190.556509][T17416] EXT4-fs (loop7): orphan cleanup on readonly fs [ 190.557965][T17416] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.5829: corrupted inode contents [ 190.582926][T17416] EXT4-fs (loop7): Remounting filesystem read-only [ 190.582991][T17416] EXT4-fs (loop7): 1 truncate cleaned up [ 190.595329][ T4609] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 190.605861][ T4609] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 190.605886][ T4609] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 190.606437][T17416] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.650430][T16712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.146513][T17468] loop6: detected capacity change from 0 to 1764 [ 191.163187][T17471] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5854'. [ 191.172709][T17471] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5854'. [ 191.181744][T17471] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5854'. [ 191.220083][T17471] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5854'. [ 191.230307][T17471] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5854'. [ 191.239404][T17471] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5854'. [ 191.277220][T17486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5859'. [ 191.297868][T17471] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5854'. [ 191.307349][T17471] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5854'. [ 191.316441][T17471] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5854'. [ 191.570162][T17537] syzkaller1: entered promiscuous mode [ 191.575941][T17537] syzkaller1: entered allmulticast mode [ 191.615627][T17542] team0: Port device team_slave_0 removed [ 191.729007][T17551] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 191.829710][T17568] loop6: detected capacity change from 0 to 256 [ 191.853252][T17573] GUP no longer grows the stack in syz.5.5901 (17573): 200000004000-200000005000 (200000002000) [ 191.863915][T17573] CPU: 0 UID: 0 PID: 17573 Comm: syz.5.5901 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 191.863950][T17573] Tainted: [W]=WARN [ 191.863957][T17573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 191.863972][T17573] Call Trace: [ 191.863979][T17573] [ 191.863988][T17573] __dump_stack+0x1d/0x30 [ 191.864012][T17573] dump_stack_lvl+0xe8/0x140 [ 191.864035][T17573] dump_stack+0x15/0x1b [ 191.864063][T17573] __get_user_pages+0x198d/0x1fa0 [ 191.864097][T17573] ? __rcu_read_unlock+0x4f/0x70 [ 191.864135][T17573] get_user_pages_remote+0x1d5/0x6d0 [ 191.864213][T17573] __access_remote_vm+0x15c/0x590 [ 191.864244][T17573] access_remote_vm+0x32/0x40 [ 191.864274][T17573] proc_pid_cmdline_read+0x32b/0x6c0 [ 191.864398][T17573] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 191.864431][T17573] vfs_readv+0x3f8/0x690 [ 191.864475][T17573] __x64_sys_preadv+0xfd/0x1c0 [ 191.864504][T17573] x64_sys_call+0x282a/0x2ff0 [ 191.864608][T17573] do_syscall_64+0xd2/0x200 [ 191.864646][T17573] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 191.864670][T17573] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 191.864701][T17573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.864856][T17573] RIP: 0033:0x7fd85ea8eec9 [ 191.864872][T17573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.864889][T17573] RSP: 002b:00007fd85d4ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 191.864912][T17573] RAX: ffffffffffffffda RBX: 00007fd85ece5fa0 RCX: 00007fd85ea8eec9 [ 191.864928][T17573] RDX: 0000000000000001 RSI: 0000200000001040 RDI: 0000000000000003 [ 191.864945][T17573] RBP: 00007fd85eb11f91 R08: 0000000000000007 R09: 0000000000000000 [ 191.865014][T17573] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 191.865027][T17573] R13: 00007fd85ece6038 R14: 00007fd85ece5fa0 R15: 00007ffcc59543e8 [ 191.865050][T17573] [ 192.191768][T17595] IPVS: Error connecting to the multicast addr [ 192.256202][T17601] loop6: detected capacity change from 0 to 512 [ 192.292545][T17601] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.426117][T17632] loop5: detected capacity change from 0 to 512 [ 192.432949][T17632] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 192.444626][T17632] EXT4-fs (loop5): 1 truncate cleaned up [ 192.450649][T17632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.465357][T16643] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.489439][T16064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.566156][T17647] IPVS: Error connecting to the multicast addr [ 192.606600][T17653] loop6: detected capacity change from 0 to 1024 [ 192.620544][T17653] EXT4-fs: Ignoring removed oldalloc option [ 192.626581][T17653] EXT4-fs: Ignoring removed bh option [ 192.635562][T17653] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.659979][T17664] loop0: detected capacity change from 0 to 512 [ 192.669610][T17664] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.5941: bg 0: block 5: invalid block bitmap [ 192.682187][T17664] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 192.692206][T17664] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.5941: invalid indirect mapped block 3 (level 2) [ 192.705835][T17664] EXT4-fs (loop0): 2 truncates cleaned up [ 192.712086][T17664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.742303][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.450274][T16643] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.784143][ T3509] IPVS: starting estimator thread 0... [ 193.784157][T17809] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 193.856260][T17833] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 193.863864][T17833] macsec1: entered promiscuous mode [ 193.869240][T17833] macsec1: entered allmulticast mode [ 193.874666][T17833] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 193.883744][T17821] IPVS: using max 2736 ests per chain, 136800 per kthread [ 193.891871][T17833] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 193.899264][T17833] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 193.976031][T17844] netlink: 'syz.6.5966': attribute type 10 has an invalid length. [ 193.986066][T17844] team0: Device hsr_slave_0 failed to register rx_handler [ 194.246590][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a220800: rx timeout, send abort [ 194.255049][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a220800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 194.314714][T17890] SELinux: policydb version 4376 does not match my version range 15-35 [ 194.329771][T17890] SELinux: failed to load policy [ 194.390556][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 194.390572][ T29] audit: type=1400 audit(267.450:7245): avc: denied { create } for pid=17901 comm="syz.6.5994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 194.425991][ T29] audit: type=1400 audit(267.480:7246): avc: denied { write } for pid=17901 comm="syz.6.5994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 194.468992][ T29] audit: type=1326 audit(267.510:7247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17903 comm="syz.7.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a36deec9 code=0x7ffc0000 [ 194.493102][ T29] audit: type=1326 audit(267.510:7248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17903 comm="syz.7.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a36deec9 code=0x7ffc0000 [ 194.516113][ T29] audit: type=1326 audit(267.510:7249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17903 comm="syz.7.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f24a36deec9 code=0x7ffc0000 [ 194.539121][ T29] audit: type=1326 audit(267.510:7250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17903 comm="syz.7.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a36deec9 code=0x7ffc0000 [ 194.562132][ T29] audit: type=1326 audit(267.510:7251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17903 comm="syz.7.5995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a36deec9 code=0x7ffc0000 [ 194.622300][ T29] audit: type=1400 audit(267.670:7252): avc: denied { ioctl } for pid=17912 comm="syz.1.5999" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 194.760988][ T29] audit: type=1400 audit(267.820:7253): avc: denied { setopt } for pid=17929 comm="syz.7.6007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 194.801369][T17926] 0X: left allmulticast mode [ 194.801387][T17926] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 194.801554][T17919] lo speed is unknown, defaulting to 1000 [ 194.847093][ T29] audit: type=1400 audit(267.910:7254): avc: denied { map } for pid=17938 comm="syz.7.6010" path="socket:[49915]" dev="sockfs" ino=49915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 194.889000][T17941] netlink: 'syz.5.6011': attribute type 3 has an invalid length. [ 195.118808][ T36] IPVS: starting estimator thread 0... [ 195.168910][T17983] loop0: detected capacity change from 0 to 512 [ 195.177829][T17983] journal_path: Non-blockdev passed as './file1' [ 195.184486][T17983] EXT4-fs: error: could not find journal device path [ 195.192906][T17987] loop7: detected capacity change from 0 to 512 [ 195.206111][T17987] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.223792][T17972] IPVS: using max 2544 ests per chain, 127200 per kthread [ 195.308033][T16712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.579582][T18022] 9pnet_fd: Insufficient options for proto=fd [ 196.030590][T18034] lo speed is unknown, defaulting to 1000 [ 196.038733][T18034] lo speed is unknown, defaulting to 1000 [ 196.044850][T18034] lo speed is unknown, defaulting to 1000 [ 196.048099][T18036] macvlan1: entered promiscuous mode [ 196.057001][T18036] ipvlan0: entered promiscuous mode [ 196.062878][T18036] ipvlan0: left promiscuous mode [ 196.070245][T18036] macvlan1: left promiscuous mode [ 196.082073][T18034] infiniband syz2: set active [ 196.087080][T18034] infiniband syz2: added lo [ 196.091608][ T3388] lo speed is unknown, defaulting to 1000 [ 196.100610][T18034] RDS/IB: syz2: added [ 196.106213][T18034] smc: adding ib device syz2 with port count 1 [ 196.112403][T18034] smc: ib device syz2 port 1 has pnetid [ 196.118350][ T36] lo speed is unknown, defaulting to 1000 [ 196.124163][T18034] lo speed is unknown, defaulting to 1000 [ 196.158925][T18034] lo speed is unknown, defaulting to 1000 [ 196.192699][T18041] wireguard0: entered promiscuous mode [ 196.198252][T18041] wireguard0: entered allmulticast mode [ 196.207350][T18034] lo speed is unknown, defaulting to 1000 [ 196.238393][T18034] lo speed is unknown, defaulting to 1000 [ 196.272200][T18034] lo speed is unknown, defaulting to 1000 [ 196.379076][T18053] __nla_validate_parse: 4 callbacks suppressed [ 196.379090][T18053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6061'. [ 196.397109][T18053] batadv_slave_1: entered promiscuous mode [ 196.403001][T18053] macsec1: entered promiscuous mode [ 196.408487][T18053] macsec1: entered allmulticast mode [ 196.413828][T18053] batadv_slave_1: entered allmulticast mode [ 196.421131][T18053] batadv_slave_1: left allmulticast mode [ 196.426844][T18053] batadv_slave_1: left promiscuous mode [ 196.456645][T18059] loop7: detected capacity change from 0 to 512 [ 196.561740][T18078] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6073'. [ 196.656425][T18099] loop6: detected capacity change from 0 to 128 [ 196.666594][T18099] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.705260][T16643] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.864842][T18117] lo speed is unknown, defaulting to 1000 [ 196.871047][T18117] lo speed is unknown, defaulting to 1000 [ 196.943695][T18121] bridge0: port 3(dummy0) entered blocking state [ 196.950198][T18121] bridge0: port 3(dummy0) entered forwarding state [ 196.956898][T18121] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.964069][T18121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.974218][T18121] 8021q: adding VLAN 0 to HW filter on device .` [ 196.983933][T18121] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.998354][T18121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.014040][ T36] lo speed is unknown, defaulting to 1000 [ 197.019788][ T36] syz0: Port: 1 Link ACTIVE [ 197.129589][T18141] loop0: detected capacity change from 0 to 512 [ 197.218376][T18152] loop0: detected capacity change from 0 to 512 [ 197.238236][T18152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.285599][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.318989][T18167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6111'. [ 197.479486][T18188] netlink: 'syz.5.6120': attribute type 21 has an invalid length. [ 197.487561][T18188] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6120'. [ 197.497462][T18188] netlink: 'syz.5.6120': attribute type 21 has an invalid length. [ 197.505330][T18188] netlink: 6 bytes leftover after parsing attributes in process `syz.5.6120'. [ 197.704130][ T4635] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.787885][ T4635] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.866519][ T4635] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.907023][ T4635] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.967229][ T4635] bridge_slave_1: left allmulticast mode [ 197.972877][ T4635] bridge_slave_1: left promiscuous mode [ 197.978534][ T4635] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.987131][ T4635] bridge_slave_0: left allmulticast mode [ 197.992877][ T4635] bridge_slave_0: left promiscuous mode [ 197.998614][ T4635] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.095489][ T4635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.105159][ T4635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.114576][ T4635] bond0 (unregistering): Released all slaves [ 198.196565][ T4635] hsr_slave_0: left promiscuous mode [ 198.202301][ T4635] hsr_slave_1: left promiscuous mode [ 198.207880][ T4635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.215345][ T4635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.230191][ T4635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.237659][ T4635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.250129][ T4635] veth1_macvtap: left promiscuous mode [ 198.255663][ T4635] veth0_macvtap: left promiscuous mode [ 198.261233][ T4635] veth1_vlan: left promiscuous mode [ 198.266516][ T4635] veth0_vlan: left promiscuous mode [ 198.326302][ T4635] team0 (unregistering): Port device team_slave_1 removed [ 198.335869][ T4635] team0 (unregistering): Port device team_slave_0 removed [ 198.367239][ T4876] smc: removing ib device syz2 [ 198.372982][ T3388] lo speed is unknown, defaulting to 1000 [ 198.378740][ T3388] syz2: Port: 1 Link DOWN [ 198.727409][ T4635] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.766195][ T4635] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.831941][T18218] lo speed is unknown, defaulting to 1000 [ 198.856364][ T4635] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.926645][ T4635] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.956934][T18236] netlink: 'syz.0.6135': attribute type 153 has an invalid length. [ 198.966130][T18232] wireguard0: entered promiscuous mode [ 198.971650][T18232] wireguard0: entered allmulticast mode [ 199.039215][ T4635] bridge_slave_1: left allmulticast mode [ 199.044905][ T4635] bridge_slave_1: left promiscuous mode [ 199.050591][ T4635] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.062294][ T4635] bridge_slave_0: left allmulticast mode [ 199.068079][ T4635] bridge_slave_0: left promiscuous mode [ 199.073813][ T4635] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.207023][ T4635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.217286][ T4635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.228031][ T4635] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 199.237695][ T4635] bond0 (unregistering): Released all slaves [ 199.253636][T18218] chnl_net:caif_netlink_parms(): no params data found [ 199.383131][ T4635] hsr_slave_0: left promiscuous mode [ 199.388993][ T4635] hsr_slave_1: left promiscuous mode [ 199.395627][ T4635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.403079][ T4635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.410544][ T4635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.418100][ T4635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.428414][ T4635] veth1_macvtap: left promiscuous mode [ 199.434213][ T4635] veth0_macvtap: left promiscuous mode [ 199.439746][ T4635] veth1_vlan: left promiscuous mode [ 199.445029][ T4635] veth0_vlan: left promiscuous mode [ 199.516393][ T4635] team0 (unregistering): Port device team_slave_1 removed [ 199.556210][T18218] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.563272][T18218] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.571190][T18218] bridge_slave_0: entered allmulticast mode [ 199.577652][T18218] bridge_slave_0: entered promiscuous mode [ 199.585278][T18218] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.592377][T18218] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.599537][T18218] bridge_slave_1: entered allmulticast mode [ 199.609162][T18218] bridge_slave_1: entered promiscuous mode [ 199.615284][T18239] lo speed is unknown, defaulting to 1000 [ 199.658851][T18218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.675738][T18218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.702217][T18235] lo speed is unknown, defaulting to 1000 [ 199.703194][T18218] team0: Port device team_slave_0 added [ 199.738262][T18218] team0: Port device team_slave_1 added [ 199.762535][T18218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.769557][T18218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.795540][T18218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.826741][T18218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.833720][T18218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.859752][T18218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.913424][T18218] hsr_slave_0: entered promiscuous mode [ 199.920647][T18218] hsr_slave_1: entered promiscuous mode [ 199.927738][T18218] debugfs: 'hsr0' already exists in 'hsr' [ 199.933497][T18218] Cannot create hsr debugfs directory [ 199.939091][T18239] chnl_net:caif_netlink_parms(): no params data found [ 199.980246][ T4635] IPVS: stop unused estimator thread 0... [ 200.069991][T18281] SELinux: failed to load policy [ 200.092036][ T4635] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.103642][ T4635] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 49848 - 0 [ 200.113480][ T4635] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 200.145766][T18235] chnl_net:caif_netlink_parms(): no params data found [ 200.193804][T18289] wireguard0: entered promiscuous mode [ 200.199290][T18289] wireguard0: entered allmulticast mode [ 200.226172][ T4635] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.236050][ T4635] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 49848 - 0 [ 200.245983][ T4635] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 200.260848][T18239] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.268036][T18239] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.276744][T18239] bridge_slave_0: entered allmulticast mode [ 200.283354][T18239] bridge_slave_0: entered promiscuous mode [ 200.305454][ T4635] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.315342][ T4635] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 49848 - 0 [ 200.325309][ T4635] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 200.344285][T18239] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.351419][T18239] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.360043][T18239] bridge_slave_1: entered allmulticast mode [ 200.366883][T18239] bridge_slave_1: entered promiscuous mode [ 200.438683][T18235] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.445900][T18235] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.463231][T18235] bridge_slave_0: entered allmulticast mode [ 200.472848][T18235] bridge_slave_0: entered promiscuous mode [ 200.597683][ T4635] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.607507][ T4635] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 49848 - 0 [ 200.617357][ T4635] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 200.632109][T18218] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 200.640976][T18235] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.648142][T18235] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.655477][T18235] bridge_slave_1: entered allmulticast mode [ 200.662119][T18235] bridge_slave_1: entered promiscuous mode [ 200.669421][T18239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.681648][T18218] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 200.691173][T18218] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 200.702640][T18239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.734291][T18218] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 200.759344][T18235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.789776][T18239] team0: Port device team_slave_0 added [ 200.795908][ T4635] dummy0: left allmulticast mode [ 200.800937][ T4635] dummy0: left promiscuous mode [ 200.805955][ T4635] bridge0: port 3(dummy0) entered disabled state [ 200.825571][ T4635] bridge_slave_1: left allmulticast mode [ 200.831543][ T4635] bridge_slave_1: left promiscuous mode [ 200.837247][ T4635] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.865922][ T4635] bridge_slave_0: left allmulticast mode [ 200.871609][ T4635] bridge_slave_0: left promiscuous mode [ 200.877257][ T4635] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.029673][ T4635] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.048148][ T4635] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.066820][ T4635] .` (unregistering): Released all slaves [ 201.086882][T18235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.111953][T18239] team0: Port device team_slave_1 added [ 201.162898][T18235] team0: Port device team_slave_0 added [ 201.185432][T18239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.192507][T18239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.218440][T18239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.236786][T18235] team0: Port device team_slave_1 added [ 201.286733][ T4635] hsr_slave_0: left promiscuous mode [ 201.293604][ T4635] hsr_slave_1: left promiscuous mode [ 201.299153][ T4635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.306574][ T4635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.334501][ T4635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.341903][ T4635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.366746][ T4635] veth1_macvtap: left allmulticast mode [ 201.372418][ T4635] veth1_macvtap: left promiscuous mode [ 201.393582][ T4635] veth0_macvtap: left promiscuous mode [ 201.399114][ T4635] veth1_vlan: left promiscuous mode [ 201.413656][ T4635] veth0_vlan: left promiscuous mode [ 201.429792][T18295] syz.0.6149 (18295) used greatest stack depth: 7320 bytes left [ 201.514026][ T4635] team0 (unregistering): Port device team_slave_1 removed [ 201.524100][ T4635] team0 (unregistering): Port device team_slave_0 removed [ 201.532964][ T4614] smc: removing ib device syz! [ 201.603987][T18239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.610957][T18239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.636923][T18239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.657775][T18235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.664828][T18235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.690806][T18235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.702547][ T8970] lo speed is unknown, defaulting to 1000 [ 201.706205][T18218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.708443][ T8970] infiniband syz0: ib_query_port failed (-19) [ 201.776305][T18235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.783292][T18235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.809377][T18235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.866642][T18239] hsr_slave_0: entered promiscuous mode [ 201.872589][T18239] hsr_slave_1: entered promiscuous mode [ 201.886244][T18316] loop0: detected capacity change from 0 to 1024 [ 201.893507][T18239] debugfs: 'hsr0' already exists in 'hsr' [ 201.899339][T18239] Cannot create hsr debugfs directory [ 201.912194][T18218] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.931444][T18316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.968730][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.001811][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 202.001825][ T29] audit: type=1400 audit(275.060:7449): avc: denied { create } for pid=18321 comm="syz.0.6157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 202.053338][ T29] audit: type=1400 audit(275.100:7450): avc: denied { write } for pid=18321 comm="syz.0.6157" path="socket:[51684]" dev="sockfs" ino=51684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 202.078932][T18235] hsr_slave_0: entered promiscuous mode [ 202.087063][T18235] hsr_slave_1: entered promiscuous mode [ 202.093002][T18235] debugfs: 'hsr0' already exists in 'hsr' [ 202.098776][T18235] Cannot create hsr debugfs directory [ 202.106739][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.113841][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.122688][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.129779][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.165873][T18218] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.176290][T18218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.191434][T18326] loop0: detected capacity change from 0 to 512 [ 202.209386][ T4635] IPVS: stop unused estimator thread 0... [ 202.225304][T18326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.285591][ T29] audit: type=1400 audit(275.350:7451): avc: denied { add_name } for pid=18325 comm="syz.0.6159" name="blkio.bfq.io_queued" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.307150][ T29] audit: type=1400 audit(275.350:7452): avc: denied { create } for pid=18325 comm="syz.0.6159" name="blkio.bfq.io_queued" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 202.356934][ T29] audit: type=1400 audit(275.410:7453): avc: denied { read append open } for pid=18325 comm="syz.0.6159" path="/1292/file1/blkio.bfq.io_queued" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 202.381600][ T29] audit: type=1400 audit(275.410:7454): avc: denied { create } for pid=18325 comm="syz.0.6159" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 202.407461][T18218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.416208][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.454493][ T29] audit: type=1326 audit(275.520:7455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18336 comm="syz.0.6160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75609eec9 code=0x7ffc0000 [ 202.477437][ T29] audit: type=1326 audit(275.520:7456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18336 comm="syz.0.6160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fa75609eec9 code=0x7ffc0000 [ 202.500228][ T29] audit: type=1326 audit(275.520:7457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18336 comm="syz.0.6160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75609eec9 code=0x7ffc0000 [ 202.523120][ T29] audit: type=1326 audit(275.520:7458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18336 comm="syz.0.6160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75609eec9 code=0x7ffc0000 [ 202.565710][T18341] loop0: detected capacity change from 0 to 1024 [ 202.572749][T18341] EXT4-fs: Ignoring removed orlov option [ 202.578561][T18341] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.613090][T18341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.719437][T18218] veth0_vlan: entered promiscuous mode [ 202.743629][T18218] veth1_vlan: entered promiscuous mode [ 202.793496][T18235] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.807027][T18235] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.817359][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.830067][T18218] veth0_macvtap: entered promiscuous mode [ 202.840891][T18235] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 202.855663][T18235] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.876355][T18218] veth1_macvtap: entered promiscuous mode [ 202.902832][T18218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.920400][T18239] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 202.953732][T18367] loop0: detected capacity change from 0 to 1024 [ 202.964510][T18218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.971754][T18239] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 202.981477][T18367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.984815][T18239] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 203.002226][T18239] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 203.013708][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.023010][ T4635] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.066491][ T4635] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.086647][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.095854][ T4635] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.115610][T18235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.146818][T18235] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.163337][ T4635] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.170508][ T4635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.182687][ T4635] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.189765][ T4635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.209194][T18380] IPv6: NLM_F_CREATE should be specified when creating new route [ 203.210794][T18235] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.227403][T18235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.244757][T18239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.275441][T18239] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.296168][ T4876] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.303293][ T4876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.322271][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.329445][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.376216][T18235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.452695][T18239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.497420][T18235] veth0_vlan: entered promiscuous mode [ 203.515437][T18407] loop0: detected capacity change from 0 to 2048 [ 203.525575][T18235] veth1_vlan: entered promiscuous mode [ 203.544251][T18235] veth0_macvtap: entered promiscuous mode [ 203.551537][T18235] veth1_macvtap: entered promiscuous mode [ 203.560767][T18407] Alternate GPT is invalid, using primary GPT. [ 203.567186][T18407] loop0: p2 p3 p7 [ 203.576292][T18235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.595197][T18235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.606518][ T126] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.632907][ T126] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.678532][ T4614] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.710105][ T126] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.779061][T18239] veth0_vlan: entered promiscuous mode [ 203.797872][T18239] veth1_vlan: entered promiscuous mode [ 203.838801][T18239] veth0_macvtap: entered promiscuous mode [ 203.854869][T18437] pim6reg1: entered promiscuous mode [ 203.860178][T18437] pim6reg1: entered allmulticast mode [ 203.880878][T18239] veth1_macvtap: entered promiscuous mode [ 203.901957][T18239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.935473][T18239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.956237][ T4614] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.990417][ T126] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.008107][ T126] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.040171][ T126] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.527119][T18466] tap0: tun_chr_ioctl cmd 1074025675 [ 204.532544][T18466] tap0: persist enabled [ 204.544619][T18466] tap0: tun_chr_ioctl cmd 1074025675 [ 204.549945][T18466] tap0: persist disabled [ 204.699729][T18475] loop9: detected capacity change from 0 to 2048 [ 204.736877][T18475] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 204.753468][T18475] System zones: 0-7 [ 204.759112][T18475] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 204.824795][T18218] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 205.125015][T18498] loop9: detected capacity change from 0 to 1024 [ 205.131745][T18498] EXT4-fs: Ignoring removed orlov option [ 205.137468][T18498] EXT4-fs: Ignoring removed nomblk_io_submit option [ 205.352528][T18498] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.554439][T18524] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6214'. [ 205.598125][T18218] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.709524][T18539] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6221'. [ 205.829870][T18555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6228'. [ 205.830605][T18553] loop8: detected capacity change from 0 to 512 [ 205.864520][T18553] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.916909][T18553] EXT4-fs (loop8): shut down requested (0) [ 205.927127][T18564] loop9: detected capacity change from 0 to 256 [ 205.992481][T18552] SELinux: failed to load policy [ 205.998759][T18239] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.065894][T18572] serio: Serial port ptm0 [ 206.089907][T18581] random: crng reseeded on system resumption [ 206.169786][T18592] loop9: detected capacity change from 0 to 736 [ 206.218689][T18592] Symlink component flag not implemented [ 206.231590][T18592] Symlink component flag not implemented (122) [ 206.274451][T18605] loop9: detected capacity change from 0 to 512 [ 206.292081][T18605] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.353183][T18605] EXT4-fs (loop9): shut down requested (0) [ 206.394920][T18218] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.890306][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 207.890324][ T29] audit: type=1400 audit(280.950:7636): avc: denied { ioctl } for pid=18753 comm="syz.8.6259" path="socket:[53425]" dev="sockfs" ino=53425 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 207.890398][T18754] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6259'. [ 207.969948][T18754] batadv_slave_0: entered promiscuous mode [ 207.977640][T18754] batadv_slave_1: entered promiscuous mode [ 207.985330][T18754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.995864][T18754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.029321][T18765] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6262'. [ 208.047181][T18766] SELinux: failed to load policy [ 208.053959][ T29] audit: type=1400 audit(281.120:7637): avc: denied { mount } for pid=18767 comm="syz.3.6263" name="/" dev="ramfs" ino=53445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 208.115237][ T29] audit: type=1326 audit(281.170:7638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18771 comm="syz.3.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9cd7eec9 code=0x7ffc0000 [ 208.138252][ T29] audit: type=1326 audit(281.170:7639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18771 comm="syz.3.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fdd9cd7eec9 code=0x7ffc0000 [ 208.161309][ T29] audit: type=1326 audit(281.170:7640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18771 comm="syz.3.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9cd7eec9 code=0x7ffc0000 [ 208.215305][ T29] audit: type=1326 audit(281.280:7641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18774 comm="syz.3.6268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9cd7eec9 code=0x7ffc0000 [ 208.238302][ T29] audit: type=1326 audit(281.280:7642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18774 comm="syz.3.6268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9cd7eec9 code=0x7ffc0000 [ 208.261256][ T29] audit: type=1326 audit(281.280:7643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18774 comm="syz.3.6268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdd9cd7eec9 code=0x7ffc0000 [ 208.284236][ T29] audit: type=1326 audit(281.280:7644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18774 comm="syz.3.6268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9cd7eec9 code=0x7ffc0000 [ 208.319163][T18779] netlink: 272 bytes leftover after parsing attributes in process `syz.0.6269'. [ 208.394270][T18794] veth0: entered promiscuous mode [ 208.401835][T18794] veth0: left promiscuous mode [ 208.405369][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6276'. [ 208.408059][ T29] audit: type=1400 audit(281.380:7645): avc: denied { nlmsg_read } for pid=18777 comm="syz.0.6269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 208.424745][T18797] netlink: 312 bytes leftover after parsing attributes in process `syz.0.6276'. [ 208.445023][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6276'. [ 208.539031][T18814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=18814 comm=syz.0.6280 [ 208.567211][T18814] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6280'. [ 208.661943][T18832] loop0: detected capacity change from 0 to 128 [ 208.852958][T18855] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.860181][T18855] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.926177][T18855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.937219][T18855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.983589][ T4876] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.996347][ T4876] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.020136][ T4876] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.047691][ T4876] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.137388][T18881] netlink: 'syz.3.6293': attribute type 21 has an invalid length. [ 209.153573][T18881] netlink: 'syz.3.6293': attribute type 1 has an invalid length. [ 209.900037][T18978] loop0: detected capacity change from 0 to 1024 [ 209.928721][T18978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.988329][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.069667][T18995] SELinux: failed to load policy [ 210.153294][T19005] netlink: 'syz.3.6319': attribute type 13 has an invalid length. [ 210.334569][T19016] loop9: detected capacity change from 0 to 128 [ 210.369176][T19016] FAT-fs (loop9): Directory bread(block 162) failed [ 210.376013][T19016] FAT-fs (loop9): Directory bread(block 163) failed [ 210.392798][T19016] FAT-fs (loop9): Directory bread(block 164) failed [ 210.403580][T19016] FAT-fs (loop9): Directory bread(block 165) failed [ 210.420548][T19016] FAT-fs (loop9): Directory bread(block 166) failed [ 210.431664][T19016] FAT-fs (loop9): Directory bread(block 167) failed [ 210.445042][T19016] FAT-fs (loop9): Directory bread(block 168) failed [ 210.461917][T19016] FAT-fs (loop9): Directory bread(block 169) failed [ 210.478648][T19016] FAT-fs (loop9): Directory bread(block 162) failed [ 210.493564][T19016] FAT-fs (loop9): Directory bread(block 163) failed [ 210.510785][T19016] bio_check_eod: 16538 callbacks suppressed [ 210.510799][T19016] !#^-!)$}: attempt to access beyond end of device [ 210.510799][T19016] loop9: rw=3, sector=226, nr_sectors = 6 limit=128 [ 210.549990][T19016] !#^-!)$}: attempt to access beyond end of device [ 210.549990][T19016] loop9: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 210.960873][T19050] batadv1: entered promiscuous mode [ 211.175592][T19071] __nla_validate_parse: 3 callbacks suppressed [ 211.175611][T19071] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6348'. [ 211.398283][T19098] 9pnet_fd: Insufficient options for proto=fd [ 211.446824][T19104] loop9: detected capacity change from 0 to 1024 [ 211.461376][T19104] EXT4-fs: Ignoring removed orlov option [ 211.467167][T19104] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.498211][T19104] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.762694][T18218] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.827472][T19118] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 211.839489][T19118] bond0: (slave lo): Error: Device can not be enslaved while up [ 212.159722][T19148] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6382'. [ 212.170441][T19148] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6382'. [ 212.218148][T19154] loop0: detected capacity change from 0 to 512 [ 212.228810][T19154] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 212.245658][T19154] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.6384: Invalid block bitmap block 0 in block_group 0 [ 212.259963][T19154] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 212.270100][T19154] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.6384: attempt to clear invalid blocks 983261 len 1 [ 212.284872][T19154] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.6384: Invalid inode table block 0 in block_group 0 [ 212.297809][T19154] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 212.308827][T19154] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 212.317553][T19154] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.6384: Invalid inode table block 0 in block_group 0 [ 212.332233][T19154] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 212.342081][T19154] EXT4-fs error (device loop0): ext4_truncate:4666: inode #11: comm syz.0.6384: mark_inode_dirty error [ 212.354683][T19154] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 212.364088][T19154] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.6384: Invalid inode table block 0 in block_group 0 [ 212.377767][T19154] EXT4-fs (loop0): 1 truncate cleaned up [ 212.388462][T19154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.410349][T19154] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.6384: Invalid inode table block 0 in block_group 0 [ 212.433238][T19154] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 212.444599][T19154] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.6384: mark_inode_dirty error [ 212.513273][ T126] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm kworker/u8:4: Invalid inode table block 0 in block_group 0 [ 212.535495][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.740043][T19195] usb usb1: usbfs: process 19195 (syz.0.6403) did not claim interface 4 before use [ 212.759725][T19197] random: crng reseeded on system resumption [ 212.797403][T19203] loop0: detected capacity change from 0 to 512 [ 212.834156][T19203] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.6407: error while reading EA inode 32 err=-116 [ 212.856517][T19203] EXT4-fs (loop0): Remounting filesystem read-only [ 212.863127][T19203] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 212.882386][T19203] EXT4-fs (loop0): 1 orphan inode deleted [ 212.897898][T19214] loop9: detected capacity change from 0 to 512 [ 212.906210][T19203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.919964][T19203] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.929103][T19214] EXT4-fs: Ignoring removed nobh option [ 212.947208][T19214] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.6411: iget: bad i_size value: 38620345925642 [ 212.978716][T19214] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.6411: couldn't read orphan inode 15 (err -117) [ 213.013241][T19214] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.035407][T19223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6415'. [ 213.079913][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 213.079931][ T29] audit: type=1400 audit(286.140:7759): avc: denied { write } for pid=19213 comm="syz.9.6411" path="/83/file1/bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 213.135077][T19214] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.6411: bg 0: block 5: invalid block bitmap [ 213.149841][T19214] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 213.162161][T19214] EXT4-fs (loop9): This should not happen!! Data will be lost [ 213.162161][T19214] [ 213.171826][T19214] EXT4-fs (loop9): Total free blocks count 0 [ 213.177945][T19214] EXT4-fs (loop9): Free/Dirty block details [ 213.183962][T19214] EXT4-fs (loop9): free_blocks=0 [ 213.188933][T19214] EXT4-fs (loop9): dirty_blocks=16 [ 213.194122][T19214] EXT4-fs (loop9): Block reservation details [ 213.200170][T19214] EXT4-fs (loop9): i_reserved_data_blocks=16 [ 213.239719][T19229] syzkaller1: entered promiscuous mode [ 213.245292][T19229] syzkaller1: entered allmulticast mode [ 213.374605][T18218] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.461661][T19237] tipc: Enabling of bearer rejected, failed to enable media [ 213.510539][ T29] audit: type=1326 audit(286.560:7760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.9.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fe3deec9 code=0x7ffc0000 [ 213.533694][ T29] audit: type=1326 audit(286.560:7761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.9.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fe3deec9 code=0x7ffc0000 [ 213.556570][ T29] audit: type=1326 audit(286.560:7762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.9.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fa7fe3deec9 code=0x7ffc0000 [ 213.579598][ T29] audit: type=1326 audit(286.560:7763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.9.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fe3deec9 code=0x7ffc0000 [ 213.602555][ T29] audit: type=1326 audit(286.560:7764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.9.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fe3deec9 code=0x7ffc0000 [ 213.638364][T19244] loop0: detected capacity change from 0 to 512 [ 213.646276][T19244] EXT4-fs: Ignoring removed oldalloc option [ 213.721064][ T29] audit: type=1326 audit(286.730:7765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.9.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fe3deec9 code=0x7ffc0000 [ 213.744029][ T29] audit: type=1326 audit(286.730:7766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.9.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fa7fe3deec9 code=0x7ffc0000 [ 213.766917][ T29] audit: type=1326 audit(286.730:7767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19242 comm="syz.9.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fe3deec9 code=0x7ffc0000 [ 213.795062][T19244] EXT4-fs (loop0): orphan cleanup on readonly fs [ 213.801442][T19244] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 213.821978][ T29] audit: type=1326 audit(286.880:7768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19249 comm="syz.9.6426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fe3deec9 code=0x7ffc0000 [ 213.823478][T19244] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 213.883360][T19244] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.6424: attempt to clear invalid blocks 2 len 1 [ 213.925236][T19244] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.6424: invalid indirect mapped block 1819239214 (level 0) [ 213.942570][T19256] netlink: 'syz.8.6429': attribute type 3 has an invalid length. [ 213.950463][T19244] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.6424: invalid indirect mapped block 1819239214 (level 1) [ 213.974129][T19244] EXT4-fs (loop0): 1 truncate cleaned up [ 213.980162][T19244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.040386][T19244] EXT4-fs (loop0): shut down requested (1) [ 214.080400][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.150533][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.224990][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.294963][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.324647][T19289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6444'. [ 214.396371][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.538214][ T12] bridge_slave_1: left allmulticast mode [ 214.543931][ T12] bridge_slave_1: left promiscuous mode [ 214.549719][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.558965][ T12] bridge_slave_0: left allmulticast mode [ 214.564804][ T12] bridge_slave_0: left promiscuous mode [ 214.570598][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.708366][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.718455][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.729379][ T12] bond0 (unregistering): Released all slaves [ 214.798799][T19337] loop0: detected capacity change from 0 to 128 [ 214.806757][ T12] hsr_slave_0: left promiscuous mode [ 214.813926][ T12] hsr_slave_1: left promiscuous mode [ 214.813883][T19337] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 214.819562][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.827393][T19337] System zones: 1-3, 19-19, 35-36 [ 214.834658][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.848979][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.856394][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.865715][T19337] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 214.878781][ T12] veth1_macvtap: left promiscuous mode [ 214.893578][ T12] veth0_macvtap: left promiscuous mode [ 214.899134][ T12] veth1_vlan: left promiscuous mode [ 214.907370][ T12] veth0_vlan: left promiscuous mode [ 214.928588][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.009553][ T12] team0 (unregistering): Port device team_slave_1 removed [ 215.016462][T19355] loop9: detected capacity change from 0 to 7 [ 215.023036][T19355] Buffer I/O error on dev loop9, logical block 0, async page read [ 215.023039][ T12] team0 (unregistering): Port device team_slave_0 removed [ 215.039371][T19355] Buffer I/O error on dev loop9, logical block 0, async page read [ 215.047362][T19355] loop9: unable to read partition table [ 215.053022][T19355] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 215.053022][T19355] ) failed (rc=-5) [ 215.069073][T19276] chnl_net:caif_netlink_parms(): no params data found [ 215.087587][T19280] chnl_net:caif_netlink_parms(): no params data found [ 215.105870][T19359] SELinux: policydb version 280 does not match my version range 15-35 [ 215.114307][T19359] SELinux: failed to load policy [ 215.224703][T19276] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.231894][T19276] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.240179][T19276] bridge_slave_0: entered allmulticast mode [ 215.246889][T19276] bridge_slave_0: entered promiscuous mode [ 215.253392][T19280] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.260490][T19280] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.267737][T19280] bridge_slave_0: entered allmulticast mode [ 215.274224][T19280] bridge_slave_0: entered promiscuous mode [ 215.291206][T19280] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.298487][T19280] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.305872][T19280] bridge_slave_1: entered allmulticast mode [ 215.312658][T19280] bridge_slave_1: entered promiscuous mode [ 215.319984][T19276] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.327274][T19276] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.339744][T19276] bridge_slave_1: entered allmulticast mode [ 215.352917][T19276] bridge_slave_1: entered promiscuous mode [ 215.398361][T19280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.409368][T19280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.419946][T19276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.444462][T19280] team0: Port device team_slave_0 added [ 215.456568][T19276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.471675][T19280] team0: Port device team_slave_1 added [ 215.492731][T19276] team0: Port device team_slave_0 added [ 215.531229][T19276] team0: Port device team_slave_1 added [ 215.542115][T19280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.549217][T19280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.575269][T19280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.594661][T19280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.601659][T19280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.627679][T19280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.646145][T19407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6491'. [ 215.668046][T19276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.675209][T19276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.701138][T19276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.740090][ T12] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.762240][T19276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.769327][T19276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.795380][T19276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.807983][T19415] IPVS: Error connecting to the multicast addr [ 215.815725][ T12] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.850033][T19280] hsr_slave_0: entered promiscuous mode [ 215.859318][T19280] hsr_slave_1: entered promiscuous mode [ 215.866208][T19280] debugfs: 'hsr0' already exists in 'hsr' [ 215.871982][T19280] Cannot create hsr debugfs directory [ 215.886788][T19276] hsr_slave_0: entered promiscuous mode [ 215.895467][T19276] hsr_slave_1: entered promiscuous mode [ 215.901547][T19276] debugfs: 'hsr0' already exists in 'hsr' [ 215.907332][T19276] Cannot create hsr debugfs directory [ 215.914697][ T12] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.986126][ T12] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.119873][ T12] bridge_slave_1: left allmulticast mode [ 216.125605][ T12] bridge_slave_1: left promiscuous mode [ 216.131399][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.163786][ T12] bridge_slave_0: left allmulticast mode [ 216.169476][ T12] bridge_slave_0: left promiscuous mode [ 216.175197][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.278266][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.289983][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.299715][ T12] bond0 (unregistering): Released all slaves [ 216.378536][ T12] hsr_slave_0: left promiscuous mode [ 216.396984][ T12] hsr_slave_1: left promiscuous mode [ 216.413817][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.421214][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.438636][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.446109][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.467861][ T12] veth1_macvtap: left promiscuous mode [ 216.481094][ T12] veth0_macvtap: left promiscuous mode [ 216.490928][ T12] veth1_vlan: left promiscuous mode [ 216.498658][ T12] veth0_vlan: left promiscuous mode [ 216.507760][T19493] vhci_hcd: invalid port number 96 [ 216.512937][T19493] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 216.520921][T19495] loop8: detected capacity change from 0 to 512 [ 216.539581][T19495] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6530: bg 0: block 288: padding at end of block bitmap is not set [ 216.557831][T19495] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 216.569862][T19495] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.6530: attempt to clear invalid blocks 1024 len 1 [ 216.581147][T19498] loop0: detected capacity change from 0 to 512 [ 216.601378][T19498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 216.616636][T19495] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.6530: invalid indirect mapped block 1819239214 (level 0) [ 216.632179][T19495] EXT4-fs (loop8): 1 truncate cleaned up [ 216.638239][T19495] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.663464][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 216.685486][ T12] team0 (unregistering): Port device team_slave_1 removed [ 216.699685][ T12] team0 (unregistering): Port device team_slave_0 removed [ 216.700344][T18239] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.755666][T19510] loop8: detected capacity change from 0 to 512 [ 216.778769][T19514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6538'. [ 216.972698][T19552] loop0: detected capacity change from 0 to 256 [ 217.003073][T19280] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 217.015649][T19280] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 217.027211][T19280] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 217.040288][T19558] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6559'. [ 217.049499][T19280] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 217.096608][T19564] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6563'. [ 217.107378][T19564] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.118890][ T12] IPVS: stop unused estimator thread 0... [ 217.202962][T19280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.217187][T19280] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.236558][ T4876] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.243712][ T4876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.266569][ T4876] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.273726][ T4876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.370509][T19276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 217.393061][T19276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 217.414051][T19276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 217.432538][T19276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 217.464325][T19618] syzkaller1: entered promiscuous mode [ 217.469895][T19618] syzkaller1: entered allmulticast mode [ 217.483346][T19280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.492228][T19618] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 217.555579][T19276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.568209][T19276] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.586140][ T126] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.593196][ T126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.615868][ T4635] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.623015][ T4635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.637939][T19638] 9pnet_fd: Insufficient options for proto=fd [ 217.811895][T19276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.833904][T19280] veth0_vlan: entered promiscuous mode [ 217.842997][T19280] veth1_vlan: entered promiscuous mode [ 217.867131][T19280] veth0_macvtap: entered promiscuous mode [ 217.882609][T19671] loop9: detected capacity change from 0 to 7 [ 217.885556][T19280] veth1_macvtap: entered promiscuous mode [ 217.895356][T19671] Buffer I/O error on dev loop9, logical block 0, async page read [ 217.903291][T19671] Buffer I/O error on dev loop9, logical block 0, async page read [ 217.911294][T19671] loop9: unable to read partition table [ 217.929720][T19671] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 217.929720][T19671] ) failed (rc=-5) [ 217.933153][T19280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.960747][T19280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.982125][ T4876] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.004782][ T4876] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.016699][ T4876] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.035675][ T4876] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.066391][T19276] veth0_vlan: entered promiscuous mode [ 218.076244][T19276] veth1_vlan: entered promiscuous mode [ 218.100796][T19276] veth0_macvtap: entered promiscuous mode [ 218.101229][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 218.101247][ T29] audit: type=1400 audit(291.160:8062): avc: denied { read } for pid=19685 comm="syz.4.6441" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 218.108253][T19276] veth1_macvtap: entered promiscuous mode [ 218.112749][ T29] audit: type=1400 audit(291.160:8063): avc: denied { open } for pid=19685 comm="syz.4.6441" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 218.182736][T19276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.203076][T19276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.216301][ T29] audit: type=1326 audit(291.280:8064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.8.6600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ae18eec9 code=0x7ffc0000 [ 218.239376][ T29] audit: type=1326 audit(291.280:8065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.8.6600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ae18eec9 code=0x7ffc0000 [ 218.264674][ T29] audit: type=1326 audit(291.280:8066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.8.6600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0ae18eec9 code=0x7ffc0000 [ 218.287711][ T29] audit: type=1326 audit(291.280:8067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.8.6600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ae18eec9 code=0x7ffc0000 [ 218.292577][T19696] loop8: detected capacity change from 0 to 512 [ 218.310860][ T29] audit: type=1326 audit(291.280:8068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.8.6600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0ae18eec9 code=0x7ffc0000 [ 218.340145][ T29] audit: type=1326 audit(291.280:8069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.8.6600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ae18eec9 code=0x7ffc0000 [ 218.363094][ T29] audit: type=1326 audit(291.280:8070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.8.6600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0ae18eec9 code=0x7ffc0000 [ 218.386049][ T29] audit: type=1326 audit(291.330:8071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.8.6600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ae18eec9 code=0x7ffc0000 [ 218.397377][T19696] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.420066][ T4635] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.431085][ T4635] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.436286][T19696] EXT4-fs (loop8): shut down requested (2) [ 218.458785][ T4635] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.471283][T18239] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.481528][ T4635] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.499568][T19705] sd 0:0:1:0: device reset [ 218.661978][T19726] syzkaller1: entered promiscuous mode [ 218.667694][T19726] syzkaller1: entered allmulticast mode [ 218.734424][T19742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6623'. [ 218.743932][T19742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6623'. [ 218.762229][T19747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6624'. [ 218.824979][T19759] loop0: detected capacity change from 0 to 512 [ 218.836741][T19759] EXT4-fs: Ignoring removed oldalloc option [ 218.844966][T19759] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 218.868720][T19759] EXT4-fs (loop0): 1 truncate cleaned up [ 218.877331][T19759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.921211][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.950512][T19777] binfmt_misc: register: failed to install interpreter file ./file2 [ 219.003324][T19785] EXT4-fs (loop8): unable to read superblock [ 219.400247][T19779] Set syz1 is full, maxelem 65536 reached [ 219.484504][T19801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6652'. [ 219.532338][T19808] netlink: 'syz.8.6657': attribute type 21 has an invalid length. [ 219.543732][T19808] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6657'. [ 219.669572][T19830] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 219.779044][T19845] SELinux: failed to load policy [ 219.836341][T19851] netlink: 'syz.0.6677': attribute type 1 has an invalid length. [ 219.867335][T19856] loop8: detected capacity change from 0 to 512 [ 219.875436][T19856] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 219.995336][T19870] loop8: detected capacity change from 0 to 1024 [ 220.002467][T19870] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 220.015295][T19870] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 220.030614][T19870] EXT4-fs (loop8): mount failed [ 220.117025][T19887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.128307][T19887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.145179][T19891] sctp: [Deprecated]: syz.4.6695 (pid 19891) Use of int in maxseg socket option. [ 220.145179][T19891] Use struct sctp_assoc_value instead [ 220.197722][T19897] rdma_op ffff888118c15d80 conn xmit_rdma 0000000000000000 [ 220.352429][T19928] macvtap0: refused to change device tx_queue_len [ 220.496090][T19947] syzkaller1: entered promiscuous mode [ 220.501602][T19947] syzkaller1: entered allmulticast mode [ 220.637055][T19951] 9pnet: Could not find request transport: 0xffffffffffffffff [ 220.686338][T19960] loop8: detected capacity change from 0 to 164 [ 220.719236][T19964] loop0: detected capacity change from 0 to 512 [ 220.748243][T19964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.786564][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.796231][T19972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.850822][T19979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.863318][T19979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.206957][T20019] : renamed from bond0 (while UP) [ 221.259613][T20025] syzkaller1: entered promiscuous mode [ 221.265268][T20025] syzkaller1: entered allmulticast mode [ 221.396453][T20031] netlink: 'syz.3.6761': attribute type 1 has an invalid length. [ 221.419648][T20033] netlink: 'syz.2.6762': attribute type 3 has an invalid length. [ 221.783972][T20090] loop8: detected capacity change from 0 to 512 [ 221.802135][T20090] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 221.817523][T20090] EXT4-fs (loop8): invalid journal inode [ 221.823371][T20097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6791'. [ 221.833896][T20090] EXT4-fs (loop8): can't get journal size [ 221.844757][T20090] EXT4-fs (loop8): 1 truncate cleaned up [ 221.848541][T20095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.850887][T20090] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.859362][T20095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.899272][T18239] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.914960][T20107] loop0: detected capacity change from 0 to 128 [ 221.922923][T20107] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 221.953127][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.017997][T20123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6798'. [ 222.096667][T20139] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20139 comm=syz.8.6803 [ 222.661671][T20232] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 223.166289][T20295] vhci_hcd: invalid port number 254 [ 223.264474][T20317] IPv6: Can't replace route, no match found [ 223.299990][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 223.300003][ T29] audit: type=1400 audit(296.360:8250): avc: denied { read } for pid=20322 comm="syz.8.6842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 223.331035][ T29] audit: type=1326 audit(296.360:8251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20325 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa827f9eec9 code=0x7ffc0000 [ 223.354226][ T29] audit: type=1326 audit(296.360:8252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20325 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa827f9eec9 code=0x7ffc0000 [ 223.377678][ T29] audit: type=1326 audit(296.370:8253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20325 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa827f9eec9 code=0x7ffc0000 [ 223.400694][ T29] audit: type=1326 audit(296.370:8254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20325 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa827f9eec9 code=0x7ffc0000 [ 223.423705][ T29] audit: type=1326 audit(296.370:8255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20325 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa827f9eec9 code=0x7ffc0000 [ 223.446993][ T29] audit: type=1326 audit(296.370:8256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20325 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa827f9eec9 code=0x7ffc0000 [ 223.469996][ T29] audit: type=1326 audit(296.370:8257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20325 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa827f9eec9 code=0x7ffc0000 [ 223.492878][ T29] audit: type=1326 audit(296.370:8258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20325 comm="syz.2.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa827f9eec9 code=0x7ffc0000 [ 223.528477][ T29] audit: type=1400 audit(296.490:8259): avc: denied { name_bind } for pid=20330 comm="syz.3.6845" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 223.604253][T20349] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 223.610883][T20349] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.618404][T20349] vhci_hcd vhci_hcd.0: Device attached [ 223.626582][T20351] vhci_hcd: connection closed [ 223.626701][ T4614] vhci_hcd: stop threads [ 223.635687][ T4614] vhci_hcd: release socket [ 223.640107][ T4614] vhci_hcd: disconnect device [ 223.707195][T20369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.715791][T20369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.759139][T20377] IPv6: Can't replace route, no match found [ 223.838093][T20383] hub 6-0:1.0: USB hub found [ 223.842809][T20383] hub 6-0:1.0: 8 ports detected [ 224.191895][T20403] syzkaller1: entered promiscuous mode [ 224.197559][T20403] syzkaller1: entered allmulticast mode [ 224.291352][T20413] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6877'. [ 224.322897][T20417] serio: Serial port ttyS3 [ 224.420421][T20435] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6888'. [ 224.573617][T20453] 9pnet_fd: p9_fd_create_unix (20453): problem connecting socket: ./file0: -2 [ 225.032575][T20501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6917'. [ 225.351019][T20534] IPv6: NLM_F_CREATE should be specified when creating new route [ 225.427373][T20545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6937'. [ 225.460553][T20547] rdma_op ffff888123864580 conn xmit_rdma 0000000000000000 [ 225.513467][T20553] netlink: 'syz.3.6941': attribute type 3 has an invalid length. [ 225.732977][T20580] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 225.934142][T20594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6958'. [ 226.231195][T20619] dummy0: entered promiscuous mode [ 226.261436][T20619] dummy0: left promiscuous mode [ 226.286185][ T23] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 226.293916][ T23] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 226.327802][ T23] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x3 [ 226.348721][ T23] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 226.373826][T20631] random: crng reseeded on system resumption [ 226.491681][T20645] rdma_op ffff8881059ded80 conn xmit_rdma 0000000000000000 [ 226.530147][T20651] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 226.548939][T20655] hub 9-0:1.0: USB hub found [ 226.562310][T20655] hub 9-0:1.0: 8 ports detected [ 226.793638][T20681] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6999'. [ 227.182448][T20718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7019'. [ 227.212899][T20724] loop0: detected capacity change from 0 to 512 [ 227.225438][T20724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.242037][T20724] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.7020: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 227.264498][T20724] EXT4-fs (loop0): Remounting filesystem read-only [ 227.334481][T20704] Set syz1 is full, maxelem 65536 reached [ 227.594669][T20740] IPv6: Can't replace route, no match found [ 228.020982][T20761] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7035'. [ 228.030105][T20761] netlink: 'syz.8.7035': attribute type 7 has an invalid length. [ 228.037839][T20761] netlink: 'syz.8.7035': attribute type 8 has an invalid length. [ 228.045580][T20761] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7035'. [ 228.213908][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.234582][ T3302] ================================================================== [ 228.242688][ T3302] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 228.250229][ T3302] [ 228.252545][ T3302] read-write to 0xffff888237d25ea8 of 1 bytes by task 20768 on cpu 1: [ 228.260710][ T3302] folio_add_lru+0xa5/0x1f0 [ 228.265224][ T3302] folio_add_lru_vma+0x49/0x70 [ 228.269998][ T3302] handle_mm_fault+0x281f/0x2c20 [ 228.274942][ T3302] do_user_addr_fault+0x636/0x1090 [ 228.280068][ T3302] exc_page_fault+0x62/0xa0 [ 228.284579][ T3302] asm_exc_page_fault+0x26/0x30 [ 228.289464][ T3302] [ 228.291795][ T3302] read to 0xffff888237d25ea8 of 1 bytes by task 3302 on cpu 0: [ 228.299339][ T3302] __lru_add_drain_all+0x12b/0x3f0 [ 228.304466][ T3302] lru_add_drain_all+0x10/0x20 [ 228.309229][ T3302] invalidate_bdev+0x47/0x70 [ 228.313822][ T3302] ext4_put_super+0x624/0x7d0 [ 228.318509][ T3302] generic_shutdown_super+0xe6/0x210 [ 228.323805][ T3302] kill_block_super+0x2a/0x70 [ 228.328487][ T3302] ext4_kill_sb+0x42/0x80 [ 228.332820][ T3302] deactivate_locked_super+0x75/0x1c0 [ 228.338203][ T3302] deactivate_super+0x97/0xa0 [ 228.342909][ T3302] cleanup_mnt+0x269/0x2e0 [ 228.347338][ T3302] __cleanup_mnt+0x19/0x20 [ 228.351770][ T3302] task_work_run+0x131/0x1a0 [ 228.356368][ T3302] exit_to_user_mode_loop+0xe4/0x100 [ 228.361656][ T3302] do_syscall_64+0x1d6/0x200 [ 228.366262][ T3302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.372152][ T3302] [ 228.374467][ T3302] value changed: 0x0f -> 0x10 [ 228.379131][ T3302] [ 228.381446][ T3302] Reported by Kernel Concurrency Sanitizer on: [ 228.387595][ T3302] CPU: 0 UID: 0 PID: 3302 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 228.399135][ T3302] Tainted: [W]=WARN [ 228.402929][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 228.412982][ T3302] ================================================================== [ 228.467057][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 228.467069][ T29] audit: type=1400 audit(301.520:8398): avc: denied { read write } for pid=20772 comm="syz.0.7039" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 228.496077][ T29] audit: type=1400 audit(301.520:8399): avc: denied { open } for pid=20772 comm="syz.0.7039" path="/dev/ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 228.518860][ T29] audit: type=1400 audit(301.520:8400): avc: denied { ioctl } for pid=20772 comm="syz.0.7039" path="/dev/ppp" dev="devtmpfs" ino=139 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 228.590499][T20755] Set syz1 is full, maxelem 65536 reached