last executing test programs: 1m7.046178052s ago: executing program 0 (id=142): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000300)={0x62, "a4395026f7fca8f411d271a8ac0352f02647be56f7af5c020d00a854bde7a3a2e42c1c5fcac45b88f2eb03642b134fd8e5b9bfd57889164508e1794a753cea7f"}) 1m5.906320128s ago: executing program 0 (id=170): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x800, 0x0, 0x6, 0x20000000}, 0x0, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x29}, 0x4000000, 0x2b}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x3}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x20000050) 1m5.835967629s ago: executing program 0 (id=173): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 1m5.286276727s ago: executing program 0 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x3) 1m5.233784819s ago: executing program 0 (id=187): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) 1m5.004456562s ago: executing program 0 (id=196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 1m5.004176982s ago: executing program 32 (id=196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 40.967328156s ago: executing program 1 (id=647): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x14, r3, 0x209, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000040}, 0x800) unshare(0x8000000) 40.911370077s ago: executing program 1 (id=649): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x16}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000000000000000600000004"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r4}, 0x27) 40.772097779s ago: executing program 1 (id=652): syz_emit_ethernet(0x4e, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2ab}, 0x18) close(r0) 40.633764481s ago: executing program 1 (id=654): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x3) 40.563699242s ago: executing program 1 (id=655): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 40.316306646s ago: executing program 1 (id=659): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x4}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x4}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{0x0, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x2, 0x0, @time, {}, {}, @connect}], 0xc4) read$snapshot(r1, 0x0, 0xffffffbf) read$char_usb(r1, 0x0, 0x0) 40.308855466s ago: executing program 33 (id=659): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x4}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x4}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{0x0, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x2, 0x0, @time, {}, {}, @connect}], 0xc4) read$snapshot(r1, 0x0, 0xffffffbf) read$char_usb(r1, 0x0, 0x0) 6.692616742s ago: executing program 3 (id=1638): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000600)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 6.375237166s ago: executing program 3 (id=1645): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) 6.264676168s ago: executing program 3 (id=1646): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x98, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x0, 0x200000}, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) 6.263805058s ago: executing program 3 (id=1648): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x3) 6.210585859s ago: executing program 3 (id=1652): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) close(r2) 6.1276719s ago: executing program 5 (id=1655): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 6.12737213s ago: executing program 5 (id=1656): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) 6.060564741s ago: executing program 5 (id=1659): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) r3 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000500), 0x12) 6.060208171s ago: executing program 3 (id=1660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc2901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 6.059615601s ago: executing program 34 (id=1660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc2901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 6.056745961s ago: executing program 5 (id=1663): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x3) 6.016565322s ago: executing program 5 (id=1664): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x5, 0x590, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x2, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/183, 0xb7}], 0x1, 0x0, 0x6}}], 0x48}, 0x0) 5.640093977s ago: executing program 5 (id=1667): socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5.598482548s ago: executing program 35 (id=1667): socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.623482506s ago: executing program 8 (id=1759): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff00, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.558432188s ago: executing program 8 (id=1762): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a3, &(0x7f0000000200)='bridge0\x00') 1.557745157s ago: executing program 6 (id=1763): socket$inet6(0xa, 0x6, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x15, 0x88, 0xc000067}, 0x2c) 1.432973639s ago: executing program 7 (id=1764): socket$packet(0x11, 0x2, 0x300) socket$pppoe(0x18, 0x1, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x1, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.432116669s ago: executing program 8 (id=1765): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 1.37262364s ago: executing program 6 (id=1767): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r2, 0x0, 0x0, 0x1001f0) copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xc615, 0x39ea, 0x0) 1.313625051s ago: executing program 2 (id=1771): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000140)=0x6, 0x4) 1.304612531s ago: executing program 4 (id=1772): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 1.191231553s ago: executing program 7 (id=1773): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newtfilter={0x134, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x108, 0x2, [@TCA_BPF_ACT={0x104, 0x1, [@m_skbedit={0x100, 0xf, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x6, 0x7e0fc254f980ecd8, 0x10000, 0x9}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xc3f}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xf, 0x9, 0x3, 0x40}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0x3}}]}, {0x79, 0x6, "6dfb4a73e91d5eb7ba99de0fd3a08170bd6414d9d4c7150e187f15101d1c46a352e29dd5fa89ae74b94ec2787ed75068da8b9e72058a45ad24177f7dbc6c241fd20e9123a71cd2b983bd68e994b4d4a9ec3142bc7e148ce4309ec262dee56caaabfea70013b979fca7347da8f95f7f132741b5f137"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x134}}, 0x0) 1.189183963s ago: executing program 2 (id=1783): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3e0, 0x108, 0x1f0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100, 0x108}}}, {{@arp={@rand_addr, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 1.055418905s ago: executing program 2 (id=1774): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x75}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 1.054082935s ago: executing program 6 (id=1785): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r3}) 1.000329956s ago: executing program 6 (id=1775): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@fallback=r3, r3, 0x2f, 0x0, 0x0, @void, @value}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 787.940429ms ago: executing program 8 (id=1776): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 787.455689ms ago: executing program 7 (id=1777): r0 = socket$inet(0x2, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x24, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000004) 679.387431ms ago: executing program 7 (id=1778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x1070bd27, 0x7ffa, {0x0, 0x0, 0x0, r4, {0x5, 0x7}, {}, {0x71022c39d5e9904c, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 651.638661ms ago: executing program 4 (id=1779): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 599.948241ms ago: executing program 6 (id=1780): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x41, &(0x7f0000000100)={[{@lazytime}, {@noload}, {@bh}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@discard}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$eJzs3UFsI1cZAOB/HHu72U2bFDhAJUqhRdkVrJ00tI16KEVCcKoElPsSEieK4sRR7LSbqIKsOHBEQgiQOJULFyROnJBQJS4cEVIlOIMAgRBs4YAEdCrb43Q3GSfZjWNn4++TJvPmeeb97zma8byZp5kARtZTEfFyRLybpun1iJjM8gvZFHudqbXeO3feWGxNSaTpq/9IIsnyumWlbY/E1WyzyxHxlS9GfD05HLexs7u2UKtVt7LlSnN9s9LY2b2xur6wUl2pbszNzT4//8L8c/MzfWnnRES89Pm/fP87P/nCS7/89Ot/vPm3a99Isvw40I77VDzqw07TS+3v4u4Nth4w2HlUbLcwM563xtihnNtnXCcAAHr7QER8IiKux2SMHX06CwAAADyE0s9OxP+S7r27Qy71yAcAAAAeIoX2GNikUM7G+05EoVAuR3sM74fiSqFWbzQ/tVzf3ljqjJWdilJhebVWncnGCk9FKWktz7bT7y8/e2B5LiIej4jvTY63l8uL9drSsC9+AAAAwIi4eqD//+/JTv8fAAAAuGCmhl0BAAAA4Mzp/wMAAMDFp/8PAAAAF9qXXnmlNaXd918vvbazvVZ/7cZStbFWXt9eLC/WtzbLK/X6SvuZfevHlVer1zc/ExvbtyrNaqNZaezs3lyvb280b67e8wpsAAAAYIAe/9hbv08iYu/F8fbUculkm55wNeC8Ku6nkmyes1v/4bHO/M8DqhQwEGPDrgAwNMVhVwAYmtKwKwAMXXLM5z0H7/wmm3+8v/UBAAD6b/oj+ff/j78uuFcYQPWAM+T+H4wu+z+MrvZ5/klH8jrjhwul5AwARt6p7/8fK03vq0IAAEDfTbSnpFDOLu9NRKFQLkc82n4tQClZXq1VZyLisYj43WTpkdbybHvL5Ng+AwAAAAAAAAAAAAAAAAAAAAAAAADQkaZJpAAAAMCFFlH4a/KrzrP8pyefmTh4feBS8p/JyF4R+vqPXv3BrYVmc2u2lf/P/fzmD7P8Z4dxBQMAAABGQvF+Vu7207v9eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADop3fuvLHYnQYZ9++fi4ipvPjFuNyeX45SRFz5VxLFu7ZLImKsD/HHW38+nBc/aVVrP2Re/PE3Tx9/7/aR8WMq+xby4l89fXgYaW+1jj8v5+1/hXiqPc/f/4oR9yw/qN7Hv9g//o312P8fPWGMJ97+WaVn/NsRTxTzjz/d+EmP+E/nFfjzbx/K+tpXd3d7xU/fjJjO/f1J7olVaa5vVho7uzdW1xdWqivVjbm52efnX5h/bn6msrxaq2Z/c2N896O/ePeo9l/pEX/qmPY/k1PepZy8/799684HO8lSXvxrT+fE//WPszUOxy9kv32fzNKtz6e76b1O+m5P/vS3Tx7V/qUe7T/u/3+tV6EHXP/yt/50wlUBgAFo7OyuLdRq1a3zkXgx+l5yq4c/9HY9fIn/pueiGmeb+GZfC0zTNG3tU6coJ4nBfQnJ0VUd9pEJAADot/dP+oddEwAAAAAAAAAAAAAAAAAAABhdg3jS2MGYe/uppB+P0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iv3AgAA//8ZWuAG") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f0000000600), &(0x7f0000000800)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c) 518.009603ms ago: executing program 8 (id=1781): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000080)="fd", 0x1}], 0x1}}], 0x2, 0x4000841) r1 = syz_io_uring_setup(0x72b1, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x36}, &(0x7f0000000500), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1868, &(0x7f0000000200)={0x0, 0xab62, 0x800, 0x3, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000001540)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2000fff) accept(r0, 0x0, 0x0) 511.669083ms ago: executing program 4 (id=1782): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r2], 0x20}}, 0x0) 511.045763ms ago: executing program 7 (id=1784): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x1, 0x2de}) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f0000001880)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e84b928ecb96e0e4e781bfca4c928c956321dd51400000000000020011584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26cfbb2eb91e40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a63d070000930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299dea6c08073dd0c47b9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8303985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725436101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809584d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495cd9ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35cfe7d498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c17d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467c09815712165cee2af784f9e5db9f7227701ca9a3de588503c84c490f4986aa26e7b63d4c5a30157cdf82e433a1b64496392a1990b2a46b910d9a16429736308f71d8e78824a26f25f21829546b973c0905b20c2ef751eb0064eaf831874f0b58ef8779cafd02bcf075a212e79e07c73c49fc240d6845877fda649d1ab59ea06b907ec5031299a0e1fa2f8cbc241a8531ad241302b569d4581dcc944f27799f25593b97ea7681ba74d6cde9c8f58840ac4c4be3aa90e6273a64e549c47c7232f423406604c9c210eabe3d6a2343bd6c2ae72ab013ce2af32467bcfa8cbf0769f", 0x45b) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45b], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 498.431773ms ago: executing program 2 (id=1786): creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e052500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 435.727584ms ago: executing program 8 (id=1787): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 435.036604ms ago: executing program 4 (id=1797): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000400)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@mblk_io_submit}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r0], 0x1000f) 367.424285ms ago: executing program 7 (id=1788): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x80000001}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x1, 0x0, 0x10, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10}) 260.189637ms ago: executing program 4 (id=1789): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 249.719237ms ago: executing program 2 (id=1800): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000380)="721fa8beb0dcec6dd07c238b793882ea91d6bfa6654fe625194f27c8134d3403a797c17d711ab4204bc6bf69474eb3aa7c3b294710f70cd5ea12c71776135ee4f0b95996", 0x44}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 196.144687ms ago: executing program 2 (id=1790): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 84.653979ms ago: executing program 6 (id=1791): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_io_uring_setup(0x1090, &(0x7f0000000340)={0x0, 0xf1bd, 0x400, 0x0, 0x400132a}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47ba, 0x233a, 0x0, 0x0, 0x41) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, "30af0128ffffb70800000000000000ff7800"}) r4 = dup(r0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xff) 0s ago: executing program 4 (id=1792): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) kernel console output (not intermixed with test programs): erface [ 52.023424][ T4623] team_slave_0: left promiscuous mode [ 52.030651][ T4623] team0: Port device team_slave_0 removed [ 52.037444][ T4623] team_slave_1: left promiscuous mode [ 52.045428][ T4623] team0: Port device team_slave_1 removed [ 52.052795][ T4623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.060627][ T4623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.069406][ T4623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.076872][ T4623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.134831][ T4622] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.220831][ T4622] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.252305][ T4637] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 52.273767][ T4622] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.322584][ T4622] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.394053][ T4622] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.405246][ T4622] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.416757][ T4622] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.428164][ T4622] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.480751][ T4641] smc: net device bond0 applied user defined pnetid SYZ2 [ 52.488738][ T4641] smc: net device bond0 erased user defined pnetid SYZ2 [ 52.622538][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 52.635359][ T3390] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 52.780552][ T4656] loop9: detected capacity change from 0 to 7 [ 52.797637][ T4656] buffer_io_error: 4 callbacks suppressed [ 52.797655][ T4656] Buffer I/O error on dev loop9, logical block 0, async page read [ 52.831377][ T4656] Buffer I/O error on dev loop9, logical block 0, async page read [ 52.839315][ T4656] loop9: unable to read partition table [ 52.867949][ T4656] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 52.867949][ T4656] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 53.144135][ T4668] SELinux: failed to load policy [ 53.174559][ T4670] netlink: 32 bytes leftover after parsing attributes in process `syz.5.421'. [ 53.183742][ T4670] netlink: 7 bytes leftover after parsing attributes in process `syz.5.421'. [ 53.211787][ T4664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.221433][ T4664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.463177][ T4702] loop3: detected capacity change from 0 to 512 [ 54.493374][ T4702] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.428: bg 0: block 5: invalid block bitmap [ 54.589834][ T4702] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 54.600217][ T4702] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.428: invalid indirect mapped block 3 (level 2) [ 54.616727][ T4702] EXT4-fs (loop3): 2 truncates cleaned up [ 54.624235][ T4702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.648845][ T4706] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.712900][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 54.712918][ T29] audit: type=1400 audit(1747373805.180:644): avc: denied { connect } for pid=4710 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.742268][ T4706] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.795416][ T29] audit: type=1400 audit(1747373805.220:645): avc: denied { read } for pid=4710 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.835085][ T4706] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.868457][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.939899][ T4706] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.960198][ T29] audit: type=1400 audit(1747373805.420:646): avc: denied { watch watch_reads } for pid=4715 comm="syz.3.437" path="/80/file0" dev="tmpfs" ino=433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.034780][ T4706] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.062095][ T4720] loop2: detected capacity change from 0 to 512 [ 55.071582][ T4706] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.084776][ T4706] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.093222][ T4720] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.102863][ T4706] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.133687][ T4720] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.450: invalid block [ 55.167463][ T4720] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.450: invalid indirect mapped block 4294967295 (level 1) [ 55.182965][ T4720] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.450: invalid indirect mapped block 4294967295 (level 1) [ 55.197235][ T4720] EXT4-fs (loop2): 2 truncates cleaned up [ 55.204443][ T4720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.233509][ T4720] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.2.450: path /92/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 55.328070][ T4723] loop3: detected capacity change from 0 to 164 [ 55.339884][ T4723] syz.3.441: attempt to access beyond end of device [ 55.339884][ T4723] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 55.356732][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.371078][ T4723] syz.3.441: attempt to access beyond end of device [ 55.371078][ T4723] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 55.498612][ T4732] netlink: 96 bytes leftover after parsing attributes in process `syz.3.444'. [ 55.762530][ T4741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'. [ 55.774946][ T4741] veth0_macvtap: left promiscuous mode [ 56.409678][ T29] audit: type=1400 audit(1747373806.880:647): avc: denied { mounton } for pid=4742 comm="syz.4.449" path="/97/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 56.491610][ T4754] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.451'. [ 56.500787][ T4754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.451'. [ 56.564763][ T4758] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.616881][ T4760] loop4: detected capacity change from 0 to 128 [ 56.641008][ T4758] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.659230][ T29] audit: type=1400 audit(1747373807.130:648): avc: denied { map } for pid=4759 comm="syz.4.469" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 56.720972][ T4758] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.780996][ T4758] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.834113][ T4758] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.845598][ T4758] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.856991][ T4758] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.869093][ T4758] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.915839][ T4765] loop5: detected capacity change from 0 to 164 [ 56.926200][ T4768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 56.928422][ T4765] syz.5.459: attempt to access beyond end of device [ 56.928422][ T4765] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 56.949119][ T4765] syz.5.459: attempt to access beyond end of device [ 56.949119][ T4765] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 56.989777][ T29] audit: type=1400 audit(1747373807.460:649): avc: denied { lock } for pid=4771 comm="syz.5.464" path="socket:[9641]" dev="sockfs" ino=9641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 57.289299][ T29] audit: type=1400 audit(1747373807.760:650): avc: denied { accept } for pid=4778 comm="syz.2.466" lport=55593 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.312390][ T29] audit: type=1400 audit(1747373807.760:651): avc: denied { setopt } for pid=4778 comm="syz.2.466" lport=55593 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 57.336245][ T29] audit: type=1400 audit(1747373807.760:652): avc: denied { write } for pid=4778 comm="syz.2.466" lport=55593 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 57.369256][ T4782] loop2: detected capacity change from 0 to 512 [ 57.377659][ T4782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.390342][ T4782] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.415532][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.086471][ T4795] loop3: detected capacity change from 0 to 128 [ 59.145434][ T4799] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.269791][ T4799] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.323527][ T4811] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 59.333652][ T4799] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.334829][ T4813] loop2: detected capacity change from 0 to 164 [ 59.360234][ T4813] syz.2.476: attempt to access beyond end of device [ 59.360234][ T4813] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 59.392472][ T4813] syz.2.476: attempt to access beyond end of device [ 59.392472][ T4813] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 59.402068][ T29] audit: type=1326 audit(1747373809.860:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.1.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c8abe969 code=0x7ffc0000 [ 59.449675][ T4799] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.528368][ T4832] loop3: detected capacity change from 0 to 128 [ 59.590072][ T4830] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 59.597971][ T4830] FAT-fs (loop3): Filesystem has been set read-only [ 59.604630][ T4830] syz.3.491: attempt to access beyond end of device [ 59.604630][ T4830] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 59.648130][ T4830] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 59.656015][ T4830] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 59.723420][ T4837] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 59.731623][ T4837] syz.3.491: attempt to access beyond end of device [ 59.731623][ T4837] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 59.745456][ T4837] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 59.753364][ T4837] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 59.808386][ T4837] syz.3.491: attempt to access beyond end of device [ 59.808386][ T4837] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 59.842183][ T4837] syz.3.491: attempt to access beyond end of device [ 59.842183][ T4837] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 60.070609][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 60.070626][ T29] audit: type=1400 audit(1747373810.540:710): avc: denied { connect } for pid=4851 comm="syz.2.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.177637][ T29] audit: type=1400 audit(1747373810.640:711): avc: denied { create } for pid=4855 comm="syz.4.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 60.212865][ T4854] syzkaller0: entered promiscuous mode [ 60.218436][ T4854] syzkaller0: entered allmulticast mode [ 60.237040][ T29] audit: type=1400 audit(1747373810.670:712): avc: denied { ioctl } for pid=4855 comm="syz.4.501" path="socket:[8961]" dev="sockfs" ino=8961 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 60.418859][ T4865] random: crng reseeded on system resumption [ 60.488040][ T29] audit: type=1400 audit(1747373810.890:713): avc: denied { append } for pid=4864 comm="syz.3.505" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 60.511206][ T29] audit: type=1400 audit(1747373810.890:714): avc: denied { open } for pid=4864 comm="syz.3.505" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 60.589477][ T4799] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.608050][ T29] audit: type=1326 audit(1747373811.030:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4864 comm="syz.3.505" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff954c5e969 code=0x0 [ 60.633972][ T4869] bridge0: entered promiscuous mode [ 60.639458][ T4869] macvlan2: entered promiscuous mode [ 60.655417][ T4869] bridge0: port 1(macvlan2) entered blocking state [ 60.662075][ T4869] bridge0: port 1(macvlan2) entered disabled state [ 60.708086][ T4869] macvlan2: entered allmulticast mode [ 60.713536][ T4869] bridge0: entered allmulticast mode [ 60.732080][ T4869] macvlan2: left allmulticast mode [ 60.737279][ T4869] bridge0: left allmulticast mode [ 60.762767][ T4869] bridge0: left promiscuous mode [ 60.776957][ T4799] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.815471][ T4799] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.819478][ T4885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.511'. [ 60.841024][ T4799] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.843833][ T4887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.867007][ T4887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.966754][ T29] audit: type=1400 audit(1747373811.430:716): avc: denied { create } for pid=4900 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 61.014067][ T4908] loop4: detected capacity change from 0 to 164 [ 61.024429][ T29] audit: type=1400 audit(1747373811.430:717): avc: denied { read } for pid=4900 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 61.124907][ T29] audit: type=1400 audit(1747373811.590:718): avc: denied { accept } for pid=4910 comm="syz.1.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 61.174742][ T29] audit: type=1400 audit(1747373811.640:719): avc: denied { listen } for pid=4910 comm="syz.1.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 61.288115][ T4919] syzkaller0: entered allmulticast mode [ 61.293943][ T4917] SELinux: failed to load policy [ 61.303024][ T4919] syzkaller0 (unregistering): left allmulticast mode [ 61.324155][ T4925] loop5: detected capacity change from 0 to 512 [ 61.331108][ T4925] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.348398][ T4925] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 61.681739][ T4954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.543'. [ 61.708081][ T4954] netlink: 12 bytes leftover after parsing attributes in process `syz.5.543'. [ 61.835109][ T4971] netlink: 24 bytes leftover after parsing attributes in process `syz.5.551'. [ 62.080258][ T4988] netlink: 24 bytes leftover after parsing attributes in process `syz.3.559'. [ 62.093751][ T4990] tipc: Started in network mode [ 62.098725][ T4990] tipc: Node identity ac14140f, cluster identity 4711 [ 62.106464][ T4990] tipc: New replicast peer: 255.255.255.255 [ 62.112705][ T4990] tipc: Enabled bearer , priority 10 [ 62.171282][ T5001] netlink: 'syz.5.565': attribute type 4 has an invalid length. [ 62.278307][ T5012] loop3: detected capacity change from 0 to 2048 [ 62.285117][ T5012] ext4: Unknown parameter 'noacl' [ 62.295351][ T5017] vlan2: entered allmulticast mode [ 62.300677][ T5017] bridge_slave_0: entered allmulticast mode [ 62.338544][ T5019] vlan0: entered allmulticast mode [ 62.343741][ T5019] bond0: entered allmulticast mode [ 62.348920][ T5019] bond_slave_0: entered allmulticast mode [ 62.354688][ T5019] bond_slave_1: entered allmulticast mode [ 62.448917][ T5023] netlink: 60 bytes leftover after parsing attributes in process `syz.2.575'. [ 62.458214][ T5023] unsupported nlmsg_type 40 [ 62.473746][ T5029] netlink: 'syz.1.578': attribute type 4 has an invalid length. [ 62.607264][ T5041] loop5: detected capacity change from 0 to 2048 [ 62.614681][ T5041] ext4: Unknown parameter 'noacl' [ 62.630968][ T5046] vlan2: entered allmulticast mode [ 62.898703][ T5063] loop3: detected capacity change from 0 to 512 [ 62.913428][ T5063] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.928441][ T5063] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 62.976456][ T5065] loop5: detected capacity change from 0 to 8192 [ 63.010269][ T5065] loop5: p2 p3 p4 [ 63.014250][ T5065] loop5: p2 start 452985600 is beyond EOD, truncated [ 63.021095][ T5065] loop5: p3 size 33554432 extends beyond EOD, truncated [ 63.038709][ T5075] loop4: detected capacity change from 0 to 2048 [ 63.046640][ T5065] loop5: p4 start 8388607 is beyond EOD, truncated [ 63.061114][ T5075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.111868][ T5084] netlink: 'syz.5.598': attribute type 4 has an invalid length. [ 63.118322][ T3390] tipc: Node number set to 2886997007 [ 63.222979][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.285721][ T5091] vlan2: entered allmulticast mode [ 63.291006][ T5091] bond0: entered allmulticast mode [ 63.296252][ T5091] bond_slave_0: entered allmulticast mode [ 63.302127][ T5091] bond_slave_1: entered allmulticast mode [ 63.491620][ T5109] loop3: detected capacity change from 0 to 2048 [ 63.511745][ T5109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.540388][ T5115] vlan2: entered allmulticast mode [ 63.545593][ T5115] bridge_slave_0: entered allmulticast mode [ 63.714846][ T5125] bridge0: entered promiscuous mode [ 63.726818][ T5125] macvlan2: entered promiscuous mode [ 63.741119][ T5125] bridge0: port 3(macvlan2) entered blocking state [ 63.747935][ T5125] bridge0: port 3(macvlan2) entered disabled state [ 63.757930][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.810361][ T5125] macvlan2: entered allmulticast mode [ 63.815880][ T5125] bridge0: entered allmulticast mode [ 63.822536][ T5125] macvlan2: left allmulticast mode [ 63.827744][ T5125] bridge0: left allmulticast mode [ 63.835378][ T5125] bridge0: left promiscuous mode [ 64.091372][ T5147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 64.142409][ T5149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 64.192127][ T5151] vlan2: entered allmulticast mode [ 64.719863][ T5176] bridge0: entered promiscuous mode [ 64.757937][ T5176] macvlan2: entered promiscuous mode [ 64.779623][ T5176] bridge0: port 3(macvlan2) entered blocking state [ 64.786329][ T5176] bridge0: port 3(macvlan2) entered disabled state [ 64.816992][ T5176] macvlan2: entered allmulticast mode [ 64.822534][ T5176] bridge0: entered allmulticast mode [ 64.839542][ T5176] macvlan2: left allmulticast mode [ 64.844767][ T5176] bridge0: left allmulticast mode [ 64.850596][ T5176] bridge0: left promiscuous mode [ 64.951752][ T5191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'. [ 64.962853][ T5191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'. [ 65.095382][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 65.095400][ T29] audit: type=1326 audit(1747373815.560:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5218 comm="syz.5.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 65.125273][ T29] audit: type=1326 audit(1747373815.560:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5218 comm="syz.5.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 65.170544][ T29] audit: type=1326 audit(1747373815.620:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5218 comm="syz.5.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 65.193951][ T29] audit: type=1326 audit(1747373815.620:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5218 comm="syz.5.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 65.217364][ T29] audit: type=1326 audit(1747373815.620:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5218 comm="syz.5.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 65.240636][ T29] audit: type=1326 audit(1747373815.620:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5218 comm="syz.5.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 65.264153][ T29] audit: type=1326 audit(1747373815.620:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5218 comm="syz.5.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 65.287502][ T29] audit: type=1326 audit(1747373815.620:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5218 comm="syz.5.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 65.310834][ T29] audit: type=1326 audit(1747373815.620:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5218 comm="syz.5.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 65.334316][ T29] audit: type=1326 audit(1747373815.620:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5218 comm="syz.5.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 65.582299][ T4231] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.640000][ T4231] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.739875][ T4231] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.829781][ T4231] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.944471][ T4231] bridge_slave_1: left allmulticast mode [ 65.950305][ T4231] bridge_slave_1: left promiscuous mode [ 65.956071][ T4231] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.969901][ T4231] bridge_slave_0: left allmulticast mode [ 65.975633][ T4231] bridge_slave_0: left promiscuous mode [ 65.981459][ T4231] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.120571][ T4231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.131930][ T4231] bond_slave_0: left allmulticast mode [ 66.143145][ T4231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.152545][ T4231] bond_slave_1: left allmulticast mode [ 66.160076][ T4231] bond0 (unregistering): Released all slaves [ 66.216876][ T5283] chnl_net:caif_netlink_parms(): no params data found [ 66.234014][ T4231] hsr_slave_0: left promiscuous mode [ 66.240256][ T4231] hsr_slave_1: left promiscuous mode [ 66.246236][ T4231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.253984][ T4231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.274938][ T4231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.282455][ T4231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.300255][ T4231] veth1_macvtap: left promiscuous mode [ 66.312238][ T5366] loop5: detected capacity change from 0 to 1024 [ 66.319102][ T4231] veth0_macvtap: left promiscuous mode [ 66.324743][ T4231] veth1_vlan: left promiscuous mode [ 66.331305][ T5366] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 66.342280][ T5366] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 66.342290][ T4231] veth0_vlan: left promiscuous mode [ 66.359655][ T5366] JBD2: no valid journal superblock found [ 66.365424][ T5366] EXT4-fs (loop5): Could not load journal inode [ 66.380389][ T5366] __nla_validate_parse: 1 callbacks suppressed [ 66.380410][ T5366] netlink: 20 bytes leftover after parsing attributes in process `syz.5.669'. [ 66.420824][ T4231] team0 (unregistering): Port device team_slave_1 removed [ 66.430280][ T4231] team0 (unregistering): Port device team_slave_0 removed [ 66.496227][ T5283] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.503641][ T5283] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.516073][ T5283] bridge_slave_0: entered allmulticast mode [ 66.529161][ T5283] bridge_slave_0: entered promiscuous mode [ 66.539350][ T5283] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.546487][ T5283] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.553932][ T5283] bridge_slave_1: entered allmulticast mode [ 66.560580][ T5283] bridge_slave_1: entered promiscuous mode [ 66.579856][ T5283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.590684][ T5283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.612013][ T5283] team0: Port device team_slave_0 added [ 66.620070][ T5283] team0: Port device team_slave_1 added [ 66.660757][ T5283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.667811][ T5283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.694149][ T5283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.732530][ T5283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.739583][ T5283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.765634][ T5283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.823719][ T5283] hsr_slave_0: entered promiscuous mode [ 66.830071][ T5283] hsr_slave_1: entered promiscuous mode [ 66.836329][ T5283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.844111][ T5283] Cannot create hsr debugfs directory [ 66.900210][ T5404] loop4: detected capacity change from 0 to 512 [ 66.920355][ T5404] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.942838][ T5404] EXT4-fs (loop4): 1 truncate cleaned up [ 66.956110][ T5404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.029733][ T5283] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 67.048876][ T5283] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 67.058601][ T5283] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 67.071687][ T5283] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 67.089255][ T5415] loop3: detected capacity change from 0 to 512 [ 67.098738][ T5283] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.106045][ T5283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.113514][ T5283] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.120665][ T5283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.132255][ T5416] netlink: 96 bytes leftover after parsing attributes in process `syz.5.687'. [ 67.151290][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.164975][ T5415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.197675][ T5415] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.220710][ T5283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.242210][ T5426] loop5: detected capacity change from 0 to 512 [ 67.249557][ T5426] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.256648][ T5283] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.274435][ T5426] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 67.284506][ T4217] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.292934][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.302630][ T5426] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 67.311252][ T4217] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.313059][ T5426] EXT4-fs (loop5): orphan cleanup on readonly fs [ 67.326020][ T5426] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.691: Invalid block bitmap block 0 in block_group 0 [ 67.347284][ T5426] EXT4-fs (loop5): Remounting filesystem read-only [ 67.357631][ T4217] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.364819][ T4217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.378119][ T5426] EXT4-fs (loop5): 1 orphan inode deleted [ 67.390667][ T5426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.402588][ T4217] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.410301][ T4217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.425334][ T4026] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.482072][ T5447] netlink: 12 bytes leftover after parsing attributes in process `syz.5.701'. [ 67.504681][ T5283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.572390][ T5466] program syz.4.705 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.583813][ T5466] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 67.648655][ T5283] veth0_vlan: entered promiscuous mode [ 67.654626][ T5474] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 67.665448][ T5474] vhci_hcd: default hub control req: 0531 v0000 i0000 l31125 [ 67.674356][ T5283] veth1_vlan: entered promiscuous mode [ 67.687285][ T5283] veth0_macvtap: entered promiscuous mode [ 67.700337][ T5283] veth1_macvtap: entered promiscuous mode [ 67.725792][ T5283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.739110][ T5283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.753037][ T5283] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.761845][ T5283] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.770659][ T5283] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.779407][ T5283] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.937744][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 67.994558][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 68.237143][ T5520] netlink: '+}[@': attribute type 13 has an invalid length. [ 68.299504][ T5527] loop4: detected capacity change from 0 to 2048 [ 68.356892][ T5527] loop4: p1 < > p4 [ 68.363426][ T5527] loop4: p4 size 8388608 extends beyond EOD, truncated [ 68.445812][ T5544] loop3: detected capacity change from 0 to 512 [ 68.455762][ T5520] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.464248][ T5520] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.472796][ T5520] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.481415][ T5520] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.490887][ T5547] loop9: detected capacity change from 0 to 7 [ 68.500151][ T5547] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.520144][ T5544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 68.523393][ T5534] pim6reg1: entered promiscuous mode [ 68.533147][ T5547] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.538202][ T5534] pim6reg1: entered allmulticast mode [ 68.546029][ T5547] loop9: unable to read partition table [ 68.558980][ T5544] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.585785][ T5547] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 68.585785][ T5547] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 68.610985][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 68.660082][ T5562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.742'. [ 68.868098][ T5586] futex_wake_op: syz.3.752 tries to shift op by -1; fix this program [ 68.883917][ T5586] netlink: zone id is out of range [ 68.889301][ T5586] netlink: zone id is out of range [ 68.894543][ T5586] netlink: zone id is out of range [ 68.899790][ T5586] netlink: zone id is out of range [ 68.904950][ T5586] netlink: zone id is out of range [ 68.910143][ T5586] netlink: zone id is out of range [ 68.915443][ T5586] netlink: zone id is out of range [ 68.920680][ T5586] netlink: zone id is out of range [ 68.925854][ T5586] netlink: zone id is out of range [ 68.931063][ T5586] netlink: zone id is out of range [ 69.010987][ T5599] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 69.024576][ T5602] pim6reg: entered allmulticast mode [ 69.033014][ T5602] pim6reg: left allmulticast mode [ 69.060278][ T5605] netlink: 96 bytes leftover after parsing attributes in process `syz.4.761'. [ 69.208523][ T5631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.773'. [ 69.922121][ T5669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'. [ 70.077409][ T5681] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.794'. [ 70.153247][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 70.153267][ T29] audit: type=1400 audit(1747373820.620:1056): avc: denied { getopt } for pid=5688 comm="syz.5.798" lport=49302 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 70.439165][ T5722] random: crng reseeded on system resumption [ 70.467107][ T5647] syz.3.780 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 70.481362][ T5647] CPU: 1 UID: 0 PID: 5647 Comm: syz.3.780 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 70.481391][ T5647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 70.481406][ T5647] Call Trace: [ 70.481415][ T5647] [ 70.481425][ T5647] __dump_stack+0x1d/0x30 [ 70.481454][ T5647] dump_stack_lvl+0xe8/0x140 [ 70.481534][ T5647] dump_stack+0x15/0x1b [ 70.481555][ T5647] dump_header+0x81/0x220 [ 70.481654][ T5647] oom_kill_process+0x334/0x3f0 [ 70.481686][ T5647] out_of_memory+0x979/0xb80 [ 70.481711][ T5647] ? css_next_descendant_pre+0x138/0x160 [ 70.481736][ T5647] mem_cgroup_out_of_memory+0x13d/0x190 [ 70.481837][ T5647] try_charge_memcg+0x5e2/0x870 [ 70.481942][ T5647] obj_cgroup_charge_pages+0xb7/0x1a0 [ 70.481965][ T5647] __memcg_kmem_charge_page+0x9f/0x170 [ 70.481999][ T5647] __alloc_frozen_pages_noprof+0x188/0x360 [ 70.482104][ T5647] alloc_pages_mpol+0xb3/0x250 [ 70.482130][ T5647] alloc_pages_noprof+0x90/0x130 [ 70.482160][ T5647] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 70.482209][ T5647] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 70.482238][ T5647] ? ip_set_alloc+0x1f/0x30 [ 70.482331][ T5647] ? ip_set_alloc+0x1f/0x30 [ 70.482360][ T5647] ? __kmalloc_cache_noprof+0x189/0x320 [ 70.482402][ T5647] ip_set_alloc+0x1f/0x30 [ 70.482427][ T5647] hash_netiface_create+0x282/0x740 [ 70.482459][ T5647] ? __pfx_hash_netiface_create+0x10/0x10 [ 70.482498][ T5647] ip_set_create+0x3cc/0x960 [ 70.482590][ T5647] ? __nla_parse+0x40/0x60 [ 70.482612][ T5647] nfnetlink_rcv_msg+0x4c6/0x590 [ 70.482736][ T5647] netlink_rcv_skb+0x120/0x220 [ 70.482776][ T5647] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 70.482816][ T5647] nfnetlink_rcv+0x16b/0x1690 [ 70.482883][ T5647] ? __kfree_skb+0x109/0x150 [ 70.482910][ T5647] ? nlmon_xmit+0x4f/0x60 [ 70.482935][ T5647] ? consume_skb+0x49/0x150 [ 70.482977][ T5647] ? nlmon_xmit+0x4f/0x60 [ 70.483070][ T5647] ? dev_hard_start_xmit+0x39e/0x3d0 [ 70.483096][ T5647] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 70.483141][ T5647] ? __dev_queue_xmit+0x182/0x1fb0 [ 70.483169][ T5647] ? ref_tracker_free+0x37d/0x3e0 [ 70.483208][ T5647] ? __netlink_deliver_tap+0x4dc/0x500 [ 70.483300][ T5647] netlink_unicast+0x5a1/0x670 [ 70.483398][ T5647] netlink_sendmsg+0x58b/0x6b0 [ 70.483425][ T5647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.483450][ T5647] __sock_sendmsg+0x145/0x180 [ 70.483479][ T5647] ____sys_sendmsg+0x31e/0x4e0 [ 70.483536][ T5647] ___sys_sendmsg+0x17b/0x1d0 [ 70.483656][ T5647] __x64_sys_sendmsg+0xd4/0x160 [ 70.483689][ T5647] x64_sys_call+0x2999/0x2fb0 [ 70.483718][ T5647] do_syscall_64+0xd0/0x1a0 [ 70.483753][ T5647] ? clear_bhb_loop+0x40/0x90 [ 70.483777][ T5647] ? clear_bhb_loop+0x40/0x90 [ 70.483801][ T5647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.483821][ T5647] RIP: 0033:0x7ff954c5e969 [ 70.483886][ T5647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.483915][ T5647] RSP: 002b:00007ff9532c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.483938][ T5647] RAX: ffffffffffffffda RBX: 00007ff954e85fa0 RCX: 00007ff954c5e969 [ 70.483951][ T5647] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 70.483983][ T5647] RBP: 00007ff954ce0ab1 R08: 0000000000000000 R09: 0000000000000000 [ 70.483995][ T5647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.484007][ T5647] R13: 0000000000000000 R14: 00007ff954e85fa0 R15: 00007ffd17d4df68 [ 70.484027][ T5647] [ 70.484034][ T5647] memory: usage 307200kB, limit 307200kB, failcnt 230 [ 70.661856][ T29] audit: type=1400 audit(1747373821.130:1057): avc: denied { listen } for pid=5726 comm="syz.4.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.664650][ T5647] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 70.664669][ T5647] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 70.897698][ T5647] Memory cgroup stats for /syz3: [ 70.898103][ T5647] cache 8192 [ 70.906379][ T5647] rss 0 [ 70.909348][ T5647] shmem 8192 [ 70.912626][ T5647] mapped_file 0 [ 70.916168][ T5647] dirty 0 [ 70.919244][ T5647] writeback 0 [ 70.922538][ T5647] workingset_refault_anon 58 [ 70.927151][ T5647] workingset_refault_file 52 [ 70.931829][ T5647] swap 188416 [ 70.935184][ T5647] swapcached 0 [ 70.938568][ T5647] pgpgin 22574 [ 70.941944][ T5647] pgpgout 22572 [ 70.945393][ T5647] pgfault 38631 [ 70.948878][ T5647] pgmajfault 41 [ 70.952343][ T5647] inactive_anon 8192 [ 70.956317][ T5647] active_anon 0 [ 70.959829][ T5647] inactive_file 0 [ 70.963471][ T5647] active_file 0 [ 70.966921][ T5647] unevictable 0 [ 70.970396][ T5647] hierarchical_memory_limit 314572800 [ 70.975854][ T5647] hierarchical_memsw_limit 9223372036854771712 [ 70.982053][ T5647] total_cache 8192 [ 70.985847][ T5647] total_rss 0 [ 70.989191][ T5647] total_shmem 8192 [ 70.992913][ T5647] total_mapped_file 0 [ 70.996886][ T5647] total_dirty 0 [ 71.000394][ T5647] total_writeback 0 [ 71.004372][ T5647] total_workingset_refault_anon 58 [ 71.009536][ T5647] total_workingset_refault_file 52 [ 71.014729][ T5647] total_swap 188416 [ 71.018560][ T5647] total_swapcached 0 [ 71.022541][ T5647] total_pgpgin 22574 [ 71.026450][ T5647] total_pgpgout 22572 [ 71.030600][ T5647] total_pgfault 38631 [ 71.034590][ T5647] total_pgmajfault 41 [ 71.038652][ T5647] total_inactive_anon 8192 [ 71.043167][ T5647] total_active_anon 0 [ 71.047224][ T5647] total_inactive_file 0 [ 71.051402][ T5647] total_active_file 0 [ 71.055438][ T5647] total_unevictable 0 [ 71.059472][ T5647] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.780,pid=5646,uid=0 [ 71.074169][ T5647] Memory cgroup out of memory: Killed process 5646 (syz.3.780) total-vm:95664kB, anon-rss:936kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 71.173139][ T29] audit: type=1326 audit(1747373821.640:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.5.824" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc86ddae969 code=0x0 [ 71.280376][ T5751] loop4: detected capacity change from 0 to 164 [ 71.300629][ T5751] bio_check_eod: 2 callbacks suppressed [ 71.300647][ T5751] syz.4.823: attempt to access beyond end of device [ 71.300647][ T5751] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 71.311617][ T5753] pim6reg: entered allmulticast mode [ 71.321942][ T5751] syz.4.823: attempt to access beyond end of device [ 71.321942][ T5751] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 71.357995][ T5754] pim6reg: left allmulticast mode [ 71.419083][ T29] audit: type=1326 audit(1747373821.890:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0cf49e969 code=0x7ffc0000 [ 71.447145][ T29] audit: type=1326 audit(1747373821.910:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe0cf49e969 code=0x7ffc0000 [ 71.470767][ T29] audit: type=1326 audit(1747373821.910:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe0cf49e9a3 code=0x7ffc0000 [ 71.494313][ T29] audit: type=1326 audit(1747373821.910:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe0cf49e9a3 code=0x7ffc0000 [ 71.517631][ T29] audit: type=1326 audit(1747373821.910:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0cf49e969 code=0x7ffc0000 [ 71.541098][ T29] audit: type=1326 audit(1747373821.910:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fe0cf49e969 code=0x7ffc0000 [ 71.564429][ T29] audit: type=1326 audit(1747373821.910:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0cf49e969 code=0x7ffc0000 [ 71.654910][ T5766] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 71.771127][ T5781] __nla_validate_parse: 3 callbacks suppressed [ 71.771145][ T5781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.839'. [ 71.786845][ T5781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.839'. [ 71.828054][ T5786] loop4: detected capacity change from 0 to 512 [ 71.840987][ T5786] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.858218][ T5786] EXT4-fs (loop4): 1 truncate cleaned up [ 71.867784][ T5786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.900990][ T5786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.841'. [ 72.011951][ T5804] SELinux: Context : is not valid (left unmapped). [ 72.195973][ T5830] serio: Serial port ptm0 [ 72.343240][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.389600][ T5853] pim6reg1: entered promiscuous mode [ 72.394991][ T5853] pim6reg1: entered allmulticast mode [ 72.486637][ T5867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.874'. [ 72.555563][ T5873] loop5: detected capacity change from 0 to 1024 [ 72.579571][ T5873] EXT4-fs: Ignoring removed bh option [ 72.585202][ T5873] EXT4-fs: inline encryption not supported [ 72.599167][ T5873] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 72.619092][ T5873] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 72.641699][ T5877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.879'. [ 72.645243][ T5873] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 2: comm syz.5.877: lblock 2 mapped to illegal pblock 2 (length 1) [ 72.669424][ T5873] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 48: comm syz.5.877: lblock 0 mapped to illegal pblock 48 (length 1) [ 72.686472][ T5873] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.877: Failed to acquire dquot type 0 [ 72.701619][ T5873] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 72.712668][ T5873] EXT4-fs error (device loop5): ext4_evict_inode:259: inode #11: comm syz.5.877: mark_inode_dirty error [ 72.726331][ T5873] EXT4-fs warning (device loop5): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 72.737206][ T5873] EXT4-fs (loop5): 1 orphan inode deleted [ 72.743542][ T5873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.756311][ T4217] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:54: lblock 1 mapped to illegal pblock 1 (length 1) [ 72.772309][ T4217] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:54: Failed to release dquot type 0 [ 72.806149][ T4026] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.833129][ T4026] EXT4-fs error (device loop5): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 72.846669][ T4026] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 72.857617][ T4026] EXT4-fs error (device loop5): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 72.950787][ T5899] netlink: 96 bytes leftover after parsing attributes in process `syz.5.886'. [ 73.076480][ T5897] cgroup: fork rejected by pids controller in /syz3 [ 73.355300][ T5963] vlan2: entered allmulticast mode [ 73.583804][ T5981] smc: net device bond0 applied user defined pnetid SYZ2 [ 73.592640][ T5981] smc: net device bond0 erased user defined pnetid SYZ2 [ 74.046615][ T6006] netlink: 87 bytes leftover after parsing attributes in process `syz.3.922'. [ 74.075003][ T6004] SELinux: failed to load policy [ 74.136987][ T6014] pim6reg1: entered promiscuous mode [ 74.143833][ T6014] pim6reg1: entered allmulticast mode [ 74.284297][ T10] kernel write not supported for file /348/attr/exec (pid: 10 comm: kworker/0:1) [ 74.284427][ T6023] loop4: detected capacity change from 0 to 512 [ 74.313484][ T6023] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.327009][ T6026] netlink: 'syz.6.930': attribute type 10 has an invalid length. [ 74.338709][ T6026] batman_adv: batadv0: Adding interface: team0 [ 74.344908][ T6026] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.370578][ T6026] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 74.401075][ T6023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.401364][ T6026] netlink: 'syz.6.930': attribute type 10 has an invalid length. [ 74.423981][ T6026] netlink: 2 bytes leftover after parsing attributes in process `syz.6.930'. [ 74.424030][ T6023] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.462351][ T6026] team0: entered promiscuous mode [ 74.467483][ T6026] team_slave_0: entered promiscuous mode [ 74.473366][ T6026] team_slave_1: entered promiscuous mode [ 74.480372][ T6026] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.487525][ T6026] batman_adv: batadv0: Interface activated: team0 [ 74.494286][ T6026] batman_adv: batadv0: Interface deactivated: team0 [ 74.501006][ T6026] batman_adv: batadv0: Removing interface: team0 [ 74.504510][ T6023] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 74.517584][ T6026] bridge0: port 3(team0) entered blocking state [ 74.524100][ T6026] bridge0: port 3(team0) entered disabled state [ 74.530731][ T6026] team0: entered allmulticast mode [ 74.535965][ T6026] team_slave_0: entered allmulticast mode [ 74.541776][ T6026] team_slave_1: entered allmulticast mode [ 74.549098][ T6026] bridge0: port 3(team0) entered blocking state [ 74.555424][ T6026] bridge0: port 3(team0) entered forwarding state [ 74.567076][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.661553][ T6049] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 74.692818][ T6053] 9pnet: p9_errstr2errno: server reported unknown error [ 74.714508][ T6051] loop6: detected capacity change from 0 to 8192 [ 74.760838][ T6051] loop6: p1 p3 p4 [ 74.770394][ T6051] loop6: p1 size 8390912 extends beyond EOD, truncated [ 74.784647][ T6051] loop6: p3 size 589824 extends beyond EOD, truncated [ 74.795792][ T6057] netlink: 56 bytes leftover after parsing attributes in process `syz.5.944'. [ 74.806336][ T6057] netlink: 24 bytes leftover after parsing attributes in process `syz.5.944'. [ 74.944608][ T6071] loop5: detected capacity change from 0 to 1024 [ 74.953254][ T6071] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 75.191336][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 75.191353][ T29] audit: type=1326 audit(1747373825.660:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.5.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 75.196926][ T6087] ref_ctr_offset mismatch. inode: 0xe1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 75.201095][ T29] audit: type=1326 audit(1747373825.660:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.5.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 75.294739][ T29] audit: type=1326 audit(1747373825.730:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6098 comm="syz.5.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc86dde1225 code=0x7ffc0000 [ 75.318140][ T29] audit: type=1326 audit(1747373825.740:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.5.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 75.341575][ T29] audit: type=1326 audit(1747373825.740:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.5.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 75.426498][ T29] audit: type=1326 audit(1747373825.880:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6098 comm="syz.5.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 75.453344][ T29] audit: type=1326 audit(1747373825.920:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.5.968" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc86ddae969 code=0x0 [ 75.498656][ T6119] loop6: detected capacity change from 0 to 512 [ 75.510020][ T6119] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 75.518351][ T6119] EXT4-fs (loop6): orphan cleanup on readonly fs [ 75.526615][ T6119] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 75.538335][ T6119] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 75.547764][ T6119] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.971: Failed to acquire dquot type 1 [ 75.561375][ T6119] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.971: bg 0: block 40: padding at end of block bitmap is not set [ 75.577468][ T6119] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 75.599467][ T6119] EXT4-fs (loop6): 1 truncate cleaned up [ 75.605631][ T6119] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.636489][ T5283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.692884][ T29] audit: type=1400 audit(1747373826.160:1224): avc: denied { mounton } for pid=6134 comm="syz.6.978" path="/43/file0" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.812133][ T6141] SELinux: failed to load policy [ 76.155689][ T6185] syz.2.1001 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 76.298542][ T6192] net_ratelimit: 289 callbacks suppressed [ 76.298561][ T6192] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 76.312299][ T10] IPVS: starting estimator thread 0... [ 76.391393][ T6204] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 76.417944][ T6198] IPVS: using max 2064 ests per chain, 103200 per kthread [ 76.440799][ T6207] pim6reg: entered allmulticast mode [ 76.451113][ T6207] pim6reg: left allmulticast mode [ 76.498934][ T6217] loop4: detected capacity change from 0 to 512 [ 76.505542][ T6217] journal_path: Lookup failure for './file0' [ 76.511621][ T6217] EXT4-fs: error: could not find journal device path [ 76.682641][ T6237] atomic_op ffff88811a25f128 conn xmit_atomic 0000000000000000 [ 76.874079][ T6255] loop3: detected capacity change from 0 to 512 [ 76.880783][ T6255] EXT4-fs: Ignoring removed bh option [ 76.886276][ T6255] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.898340][ T6255] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 76.909754][ T6255] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 76.917926][ T6255] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.924797][ T6255] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1032: Failed to acquire dquot type 1 [ 76.936442][ T6255] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1032: Invalid block bitmap block 0 in block_group 0 [ 76.950221][ T6255] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1032: Invalid block bitmap block 0 in block_group 0 [ 76.963869][ T6255] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1032: Invalid block bitmap block 0 in block_group 0 [ 76.977705][ T6255] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1032: Failed to acquire dquot type 1 [ 76.989634][ T6255] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1032: Failed to acquire dquot type 1 [ 77.001260][ T6255] EXT4-fs (loop3): 1 orphan inode deleted [ 77.007659][ T6255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.040791][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.101325][ T6265] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 77.234048][ T6286] loop6: detected capacity change from 0 to 164 [ 77.262196][ T6286] syz.6.1045: attempt to access beyond end of device [ 77.262196][ T6286] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 77.282482][ T6286] syz.6.1045: attempt to access beyond end of device [ 77.282482][ T6286] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 77.311970][ T6292] xt_hashlimit: max too large, truncated to 1048576 [ 77.512436][ T6318] __nla_validate_parse: 1 callbacks suppressed [ 77.512454][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1060'. [ 77.643467][ T6335] netlink: 'syz.6.1064': attribute type 5 has an invalid length. [ 77.734058][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'. [ 77.782450][ T6357] smc: net device bond0 applied user defined pnetid SYZ2 [ 77.800897][ T6357] smc: net device bond0 erased user defined pnetid SYZ2 [ 77.834873][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1071'. [ 78.014017][ T6397] bridge0: entered promiscuous mode [ 78.019679][ T6397] macvlan2: entered promiscuous mode [ 78.026441][ T6397] bridge0: port 4(macvlan2) entered blocking state [ 78.033297][ T6397] bridge0: port 4(macvlan2) entered disabled state [ 78.040231][ T6397] macvlan2: entered allmulticast mode [ 78.045698][ T6397] bridge0: entered allmulticast mode [ 78.052409][ T6397] macvlan2: left allmulticast mode [ 78.057571][ T6397] bridge0: left allmulticast mode [ 78.069490][ T6397] bridge0: left promiscuous mode [ 78.160222][ T6419] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 78.172960][ T6418] IPVS: stopping master sync thread 6419 ... [ 78.193510][ T6424] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1085'. [ 78.342093][ T6443] geneve0: entered allmulticast mode [ 78.355778][ T6447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6447 comm=syz.4.1093 [ 78.754846][ T6483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1100'. [ 78.763931][ T6483] netem: change failed [ 78.852244][ T6489] netlink: 'syz.5.1101': attribute type 3 has an invalid length. [ 78.869722][ T6498] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1107'. [ 78.927433][ T6502] pim6reg1: entered promiscuous mode [ 78.934629][ T6502] pim6reg1: entered allmulticast mode [ 79.033012][ T6513] loop6: detected capacity change from 0 to 512 [ 79.042190][ T6513] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 79.075940][ T6513] EXT4-fs (loop6): 1 truncate cleaned up [ 79.096057][ T6513] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.232871][ T5283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.529877][ T6566] program syz.3.1138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.567912][ T6566] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 79.818112][ T6584] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1147'. [ 80.207167][ T6616] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 80.222842][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1161'. [ 80.338971][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 80.338990][ T29] audit: type=1326 audit(1747373830.810:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.5.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 80.370928][ T29] audit: type=1326 audit(1747373830.810:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.5.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 80.396320][ T29] audit: type=1326 audit(1747373830.810:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.5.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 80.419946][ T29] audit: type=1326 audit(1747373830.810:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.5.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 80.445409][ T29] audit: type=1326 audit(1747373830.810:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.5.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 80.470391][ T29] audit: type=1326 audit(1747373830.810:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.5.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 80.495407][ T29] audit: type=1326 audit(1747373830.810:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.5.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 80.520517][ T29] audit: type=1326 audit(1747373830.810:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.5.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 80.544058][ T29] audit: type=1326 audit(1747373830.810:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.5.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 80.568880][ T29] audit: type=1326 audit(1747373830.810:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.5.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86ddae969 code=0x7ffc0000 [ 80.639730][ T6632] loop5: detected capacity change from 0 to 512 [ 80.646826][ T6632] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 80.669789][ T6632] EXT4-fs (loop5): 1 truncate cleaned up [ 80.675926][ T6632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.693210][ T6632] EXT4-fs error (device loop5): __ext4_iget:5025: inode #12: block 2: comm syz.5.1169: invalid block [ 80.704465][ T6632] EXT4-fs (loop5): Remounting filesystem read-only [ 80.724609][ T4026] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.801910][ T6641] syzkaller1: entered promiscuous mode [ 80.807587][ T6641] syzkaller1: entered allmulticast mode [ 80.930056][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888119e71200: rx timeout, send abort [ 80.938469][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888119e71200: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 81.026547][ T6656] netlink: '+}[@': attribute type 13 has an invalid length. [ 81.064592][ T6658] loop5: detected capacity change from 0 to 2048 [ 81.100953][ T6656] bridge0: port 3(team0) entered disabled state [ 81.107440][ T6656] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.114845][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.123203][ T6658] loop5: p1 < > p4 [ 81.127639][ T6658] loop5: p4 size 8388608 extends beyond EOD, truncated [ 81.259559][ T6656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.272250][ T6656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.317252][ T6656] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.326409][ T6656] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.335663][ T6656] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.344676][ T6656] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.386358][ T6666] pim6reg: entered allmulticast mode [ 81.394354][ T6671] pim6reg: left allmulticast mode [ 81.420937][ T6677] futex_wake_op: syz.2.1189 tries to shift op by -1; fix this program [ 81.431905][ T6677] netlink: zone id is out of range [ 81.437066][ T6677] netlink: zone id is out of range [ 81.442310][ T6677] netlink: zone id is out of range [ 81.447464][ T6677] netlink: zone id is out of range [ 81.452678][ T6677] netlink: zone id is out of range [ 81.458018][ T6677] netlink: zone id is out of range [ 81.463146][ T6677] netlink: zone id is out of range [ 81.468309][ T6677] netlink: zone id is out of range [ 81.473586][ T6677] netlink: zone id is out of range [ 81.478754][ T6677] netlink: zone id is out of range [ 81.644236][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1198'. [ 82.100646][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 82.212236][ T6720] bond1: entered promiscuous mode [ 82.218811][ T6720] bond1: entered allmulticast mode [ 82.235579][ T6720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.258237][ T6792] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 83.467315][ T6773] syz.2.1231 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 83.481310][ T6773] CPU: 0 UID: 0 PID: 6773 Comm: syz.2.1231 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 83.481346][ T6773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 83.481362][ T6773] Call Trace: [ 83.481370][ T6773] [ 83.481379][ T6773] __dump_stack+0x1d/0x30 [ 83.481412][ T6773] dump_stack_lvl+0xe8/0x140 [ 83.481435][ T6773] dump_stack+0x15/0x1b [ 83.481456][ T6773] dump_header+0x81/0x220 [ 83.481552][ T6773] oom_kill_process+0x334/0x3f0 [ 83.481581][ T6773] out_of_memory+0x979/0xb80 [ 83.481612][ T6773] ? css_next_descendant_pre+0x138/0x160 [ 83.481703][ T6773] mem_cgroup_out_of_memory+0x13d/0x190 [ 83.481822][ T6773] try_charge_memcg+0x5e2/0x870 [ 83.481926][ T6773] obj_cgroup_charge_pages+0xb7/0x1a0 [ 83.481958][ T6773] __memcg_kmem_charge_page+0x9f/0x170 [ 83.481989][ T6773] __alloc_frozen_pages_noprof+0x188/0x360 [ 83.482070][ T6773] alloc_pages_mpol+0xb3/0x250 [ 83.482094][ T6773] alloc_pages_noprof+0x90/0x130 [ 83.482176][ T6773] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 83.482294][ T6773] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 83.482325][ T6773] ? ip_set_alloc+0x1f/0x30 [ 83.482367][ T6773] ? ip_set_alloc+0x1f/0x30 [ 83.482406][ T6773] ? __kmalloc_cache_noprof+0x189/0x320 [ 83.482435][ T6773] ip_set_alloc+0x1f/0x30 [ 83.482470][ T6773] hash_netiface_create+0x282/0x740 [ 83.482576][ T6773] ? __pfx_hash_netiface_create+0x10/0x10 [ 83.482621][ T6773] ip_set_create+0x3cc/0x960 [ 83.482738][ T6773] ? __nla_parse+0x40/0x60 [ 83.482768][ T6773] nfnetlink_rcv_msg+0x4c6/0x590 [ 83.482825][ T6773] netlink_rcv_skb+0x120/0x220 [ 83.482867][ T6773] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 83.482966][ T6773] nfnetlink_rcv+0x16b/0x1690 [ 83.482998][ T6773] ? __rcu_read_unlock+0x4f/0x70 [ 83.483037][ T6773] ? follow_page_pte+0x658/0x7c0 [ 83.483092][ T6773] ? __get_user_pages+0x1a0a/0x1d20 [ 83.483140][ T6773] ? check_and_migrate_movable_pages_or_folios+0x67e/0x7a0 [ 83.483178][ T6773] ? should_fail_ex+0x30/0x280 [ 83.483244][ T6773] ? selinux_nlmsg_lookup+0x99/0x8b0 [ 83.483330][ T6773] ? selinux_netlink_send+0x59f/0x5f0 [ 83.483362][ T6773] ? __rcu_read_unlock+0x34/0x70 [ 83.483390][ T6773] ? __netlink_lookup+0x266/0x2a0 [ 83.483421][ T6773] netlink_unicast+0x5a1/0x670 [ 83.483464][ T6773] netlink_sendmsg+0x58b/0x6b0 [ 83.483524][ T6773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.483550][ T6773] __sock_sendmsg+0x145/0x180 [ 83.483587][ T6773] ____sys_sendmsg+0x31e/0x4e0 [ 83.483624][ T6773] ___sys_sendmsg+0x17b/0x1d0 [ 83.483702][ T6773] __x64_sys_sendmsg+0xd4/0x160 [ 83.483734][ T6773] x64_sys_call+0x2999/0x2fb0 [ 83.483841][ T6773] do_syscall_64+0xd0/0x1a0 [ 83.483949][ T6773] ? clear_bhb_loop+0x40/0x90 [ 83.483977][ T6773] ? clear_bhb_loop+0x40/0x90 [ 83.484032][ T6773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.484100][ T6773] RIP: 0033:0x7fd98c09e969 [ 83.484120][ T6773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.484145][ T6773] RSP: 002b:00007fd98a707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.484171][ T6773] RAX: ffffffffffffffda RBX: 00007fd98c2c5fa0 RCX: 00007fd98c09e969 [ 83.484188][ T6773] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 83.484205][ T6773] RBP: 00007fd98c120ab1 R08: 0000000000000000 R09: 0000000000000000 [ 83.484243][ T6773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.484258][ T6773] R13: 0000000000000000 R14: 00007fd98c2c5fa0 R15: 00007fff5725c758 [ 83.484281][ T6773] [ 83.484288][ T6773] memory: usage 307200kB, limit 307200kB, failcnt 372 [ 83.843086][ T6773] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 83.851001][ T6773] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 83.858399][ T6773] Memory cgroup stats for /syz2: [ 83.858946][ T6773] cache 8192 [ 83.867187][ T6773] rss 4096 [ 83.870378][ T6773] shmem 8192 [ 83.873596][ T6773] mapped_file 0 [ 83.877088][ T6773] dirty 0 [ 83.880077][ T6773] writeback 0 [ 83.883380][ T6773] workingset_refault_anon 31 [ 83.887332][ T6808] netlink: 'syz.6.1247': attribute type 1 has an invalid length. [ 83.888072][ T6773] workingset_refault_file 48 [ 83.888158][ T6773] swap 176128 [ 83.888165][ T6773] swapcached 12288 [ 83.888174][ T6773] pgpgin 70186 [ 83.888183][ T6773] pgpgout 70181 [ 83.888189][ T6773] pgfault 72253 [ 83.888197][ T6773] pgmajfault 19 [ 83.888203][ T6773] inactive_anon 20480 [ 83.888210][ T6773] active_anon 0 [ 83.888217][ T6773] inactive_file 0 [ 83.888226][ T6773] active_file 0 [ 83.888234][ T6773] unevictable 0 [ 83.888321][ T6773] hierarchical_memory_limit 314572800 [ 83.888333][ T6773] hierarchical_memsw_limit 9223372036854771712 [ 83.888346][ T6773] total_cache 8192 [ 83.888353][ T6773] total_rss 4096 [ 83.888359][ T6773] total_shmem 8192 [ 83.888368][ T6773] total_mapped_file 0 [ 83.888377][ T6773] total_dirty 0 [ 83.888386][ T6773] total_writeback 0 [ 83.888399][ T6773] total_workingset_refault_anon 31 [ 83.888409][ T6773] total_workingset_refault_file 48 [ 83.888420][ T6773] total_swap 176128 [ 83.888429][ T6773] total_swapcached 12288 [ 83.888509][ T6773] total_pgpgin 70186 [ 83.888542][ T6773] total_pgpgout 70181 [ 83.888552][ T6773] total_pgfault 72253 [ 83.888561][ T6773] total_pgmajfault 19 [ 83.888570][ T6773] total_inactive_anon 20480 [ 83.888581][ T6773] total_active_anon 0 [ 83.888589][ T6773] total_inactive_file 0 [ 83.888598][ T6773] total_active_file 0 [ 83.888607][ T6773] total_unevictable 0 [ 83.888621][ T6773] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1231,pid=6772,uid=0 [ 83.888707][ T6773] Memory cgroup out of memory: Killed process 6772 (syz.2.1231) total-vm:95664kB, anon-rss:1064kB, file-rss:22320kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 84.322190][ T6822] loop6: detected capacity change from 0 to 1024 [ 84.330390][ T6822] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.336968][ T6822] EXT4-fs: Ignoring removed nobh option [ 84.344012][ T6822] EXT4-fs: Ignoring removed bh option [ 84.380076][ T6822] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.425517][ T6822] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.1254: inode #327696: comm syz.6.1254: iget: illegal inode # [ 84.475929][ T6822] EXT4-fs (loop6): Remounting filesystem read-only [ 84.500039][ T6822] EXT4-fs warning (device loop6): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.6.1254: cleanup dec ref error -30 [ 84.556895][ T6822] EXT4-fs warning (device loop6): ext4_xattr_block_set:2190: inode #18: comm syz.6.1254: dec ref error=-30 [ 84.621508][ T6855] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -28928, delta: 1 [ 84.631717][ T6855] ref_ctr increment failed for inode: 0x55c offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88811675d280 [ 84.653702][ T5283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.166968][ T6886] vlan2: entered allmulticast mode [ 85.550767][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 85.550785][ T29] audit: type=1326 audit(1747373836.020:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6898 comm="syz.6.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83f0d5e969 code=0x7ffc0000 [ 85.580816][ T29] audit: type=1326 audit(1747373836.020:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6898 comm="syz.6.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f83f0d5e969 code=0x7ffc0000 [ 85.604362][ T29] audit: type=1326 audit(1747373836.020:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6898 comm="syz.6.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83f0d5e969 code=0x7ffc0000 [ 85.733107][ T29] audit: type=1326 audit(1747373836.060:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6898 comm="syz.6.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f83f0d5e969 code=0x7ffc0000 [ 85.756716][ T29] audit: type=1326 audit(1747373836.060:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6898 comm="syz.6.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83f0d5e969 code=0x7ffc0000 [ 85.780366][ T29] audit: type=1326 audit(1747373836.060:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6898 comm="syz.6.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83f0d5e969 code=0x7ffc0000 [ 85.937523][ T6919] loop4: detected capacity change from 0 to 512 [ 85.990385][ T6919] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.038921][ T6919] EXT4-fs (loop4): 1 truncate cleaned up [ 86.045177][ T6919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.089288][ T6919] EXT4-fs error (device loop4): __ext4_iget:5025: inode #12: block 2: comm syz.4.1294: invalid block [ 86.139047][ T6919] EXT4-fs (loop4): Remounting filesystem read-only [ 86.248404][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.534694][ T6942] __nla_validate_parse: 3 callbacks suppressed [ 86.534713][ T6942] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1305'. [ 86.551413][ T6942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1305'. [ 86.635010][ T6947] pim6reg1: entered promiscuous mode [ 86.641897][ T6947] pim6reg1: entered allmulticast mode [ 86.760591][ T6961] loop6: detected capacity change from 0 to 1024 [ 86.776723][ T6961] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 87.033157][ T6968] bridge0: entered promiscuous mode [ 87.040455][ T6968] macvlan2: entered promiscuous mode [ 87.046898][ T6968] bridge0: port 3(macvlan2) entered blocking state [ 87.053594][ T6968] bridge0: port 3(macvlan2) entered disabled state [ 87.061471][ T6968] macvlan2: entered allmulticast mode [ 87.066986][ T6968] bridge0: entered allmulticast mode [ 87.079479][ T6968] macvlan2: left allmulticast mode [ 87.084680][ T6968] bridge0: left allmulticast mode [ 87.106226][ T6968] bridge0: left promiscuous mode [ 87.187247][ T6980] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -28928, delta: 1 [ 87.197380][ T6980] ref_ctr increment failed for inode: 0x250 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888116759600 [ 87.205638][ T6981] 9pnet: p9_errstr2errno: server reported unknown error [ 87.277562][ T29] audit: type=1400 audit(1747373837.740:1506): avc: denied { read write } for pid=5283 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.302162][ T29] audit: type=1400 audit(1747373837.740:1507): avc: denied { open } for pid=5283 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.326524][ T29] audit: type=1400 audit(1747373837.740:1508): avc: denied { ioctl } for pid=5283 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.362534][ T29] audit: type=1400 audit(1747373837.830:1509): avc: denied { map_create } for pid=6991 comm="syz.6.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 87.590300][ T7016] loop4: detected capacity change from 0 to 1024 [ 87.603702][ T7016] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 87.614785][ T7016] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 87.627041][ T7016] JBD2: no valid journal superblock found [ 87.632867][ T7016] EXT4-fs (loop4): Could not load journal inode [ 87.647262][ T7016] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1349'. [ 87.683544][ T7026] loop3: detected capacity change from 0 to 164 [ 87.712589][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1343'. [ 88.558313][ T7051] 9pnet_fd: Insufficient options for proto=fd [ 88.676548][ T7060] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -28928, delta: 1 [ 88.685522][ T7060] ref_ctr increment failed for inode: 0x5ab offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88810005dd80 [ 88.862686][ T7069] macvlan2: entered promiscuous mode [ 88.869580][ T7069] bridge0: entered promiscuous mode [ 88.877255][ T7069] bridge0: port 1(macvlan2) entered blocking state [ 88.885334][ T7069] bridge0: port 1(macvlan2) entered disabled state [ 88.894609][ T7069] macvlan2: entered allmulticast mode [ 88.894636][ T7071] loop6: detected capacity change from 0 to 1024 [ 88.896418][ T7071] EXT4-fs: Ignoring removed oldalloc option [ 88.901677][ T7069] bridge0: entered allmulticast mode [ 88.919702][ T7071] ext4: Unknown parameter 'nouser_xattr' [ 88.920655][ T7069] macvlan2: left allmulticast mode [ 88.930608][ T7069] bridge0: left allmulticast mode [ 88.961795][ T7069] bridge0: left promiscuous mode [ 89.082807][ T7082] IPVS: Error connecting to the multicast addr [ 89.218576][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1370'. [ 89.565860][ T7109] loop3: detected capacity change from 0 to 1024 [ 89.575050][ T7109] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 89.586231][ T7109] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 89.632680][ T7109] JBD2: no valid journal superblock found [ 89.638493][ T7109] EXT4-fs (loop3): Could not load journal inode [ 89.662480][ T7109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1377'. [ 89.852851][ T7118] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 89.866243][ T7116] IPVS: stopping master sync thread 7118 ... [ 89.929247][ T7121] pim6reg1: entered promiscuous mode [ 89.973792][ T7128] netlink: '+}[@': attribute type 13 has an invalid length. [ 90.036061][ T7128] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.043435][ T7128] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.105106][ T7128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.117801][ T7128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.156219][ T7128] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.165910][ T7128] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.175528][ T7128] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.185096][ T7128] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.229121][ T7138] futex_wake_op: syz.4.1389 tries to shift op by -1; fix this program [ 90.233130][ T7135] bridge0: entered promiscuous mode [ 90.243891][ T7138] net_ratelimit: 290 callbacks suppressed [ 90.243908][ T7138] netlink: zone id is out of range [ 90.252827][ T7135] macvlan2: entered promiscuous mode [ 90.254877][ T7138] netlink: zone id is out of range [ 90.254885][ T7138] netlink: zone id is out of range [ 90.254891][ T7138] netlink: zone id is out of range [ 90.254896][ T7138] netlink: zone id is out of range [ 90.254902][ T7138] netlink: zone id is out of range [ 90.254907][ T7138] netlink: zone id is out of range [ 90.254912][ T7138] netlink: zone id is out of range [ 90.254917][ T7138] netlink: zone id is out of range [ 90.254922][ T7138] netlink: zone id is out of range [ 90.301850][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1388'. [ 90.308720][ T7135] bridge0: port 1(macvlan2) entered blocking state [ 90.322736][ T7135] bridge0: port 1(macvlan2) entered disabled state [ 90.329521][ T7135] macvlan2: entered allmulticast mode [ 90.335002][ T7135] bridge0: entered allmulticast mode [ 90.346629][ T7135] macvlan2: left allmulticast mode [ 90.351946][ T7135] bridge0: left allmulticast mode [ 90.358620][ T7135] bridge0: left promiscuous mode [ 90.578363][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 90.578380][ T29] audit: type=1400 audit(1747373841.050:1686): avc: denied { create } for pid=7139 comm="syz.3.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.624081][ T29] audit: type=1400 audit(1747373841.070:1687): avc: denied { write } for pid=7139 comm="syz.3.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.335718][ T29] audit: type=1400 audit(1747373841.800:1688): avc: denied { mount } for pid=7154 comm="syz.4.1410" name="/" dev="configfs" ino=1432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 91.362336][ T7161] IPVS: stopping master sync thread 7163 ... [ 91.369321][ T7163] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 91.369334][ T29] audit: type=1400 audit(1747373841.800:1689): avc: denied { search } for pid=7154 comm="syz.4.1410" name="/" dev="configfs" ino=1432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.369423][ T29] audit: type=1400 audit(1747373841.800:1690): avc: denied { read } for pid=7154 comm="syz.4.1410" name="/" dev="configfs" ino=1432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.424899][ T29] audit: type=1400 audit(1747373841.800:1691): avc: denied { open } for pid=7154 comm="syz.4.1410" path="/" dev="configfs" ino=1432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.446975][ T29] audit: type=1400 audit(1747373841.830:1692): avc: denied { create } for pid=7158 comm="syz.5.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.516026][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1414'. [ 91.593396][ T7175] loop3: detected capacity change from 0 to 512 [ 91.593447][ T7177] ALSA: seq fatal error: cannot create timer (-22) [ 91.608286][ T29] audit: type=1400 audit(1747373842.070:1693): avc: denied { mounton } for pid=7174 comm="syz.3.1406" path="/267/file2" dev="tmpfs" ino=1397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.654984][ T7175] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 91.665302][ T29] audit: type=1400 audit(1747373842.130:1694): avc: denied { mount } for pid=7181 comm="syz.4.1408" name="/" dev="mqueue" ino=2211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 91.665891][ T29] audit: type=1400 audit(1747373842.130:1695): avc: denied { watch watch_reads } for pid=7181 comm="syz.4.1408" path="/" dev="mqueue" ino=2211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.724174][ T7175] EXT4-fs (loop3): 1 truncate cleaned up [ 91.732632][ T7175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.766422][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.795673][ T7194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7194 comm=syz.2.1416 [ 91.815554][ T7196] loop3: detected capacity change from 0 to 512 [ 91.824543][ T7196] EXT4-fs (loop3): orphan cleanup on readonly fs [ 91.833112][ T7196] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1417: bg 0: block 248: padding at end of block bitmap is not set [ 91.848783][ T7196] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1417: Failed to acquire dquot type 1 [ 91.860905][ T7196] EXT4-fs (loop3): 1 truncate cleaned up [ 91.867267][ T7196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.885421][ T7196] EXT4-fs error (device loop3): ext4_lookup:1793: inode #2: comm syz.3.1417: deleted inode referenced: 12 [ 91.909834][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.931924][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1418'. [ 91.975641][ T7205] loop3: detected capacity change from 0 to 1024 [ 91.982575][ T7205] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.989485][ T7205] EXT4-fs: Ignoring removed nobh option [ 91.995112][ T7205] EXT4-fs: Ignoring removed bh option [ 92.010832][ T7205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.029841][ T7205] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.1419: inode #327696: comm syz.3.1419: iget: illegal inode # [ 92.043833][ T7205] EXT4-fs (loop3): Remounting filesystem read-only [ 92.050637][ T7205] EXT4-fs warning (device loop3): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.3.1419: cleanup dec ref error -30 [ 92.064146][ T7205] EXT4-fs warning (device loop3): ext4_xattr_block_set:2190: inode #18: comm syz.3.1419: dec ref error=-30 [ 92.089603][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.356686][ T7220] loop6: detected capacity change from 0 to 512 [ 92.363861][ T7220] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.387636][ T7220] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.1425: invalid block [ 92.401034][ T7220] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1425: invalid indirect mapped block 4294967295 (level 1) [ 92.415299][ T7220] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1425: invalid indirect mapped block 4294967295 (level 1) [ 92.431313][ T7220] EXT4-fs (loop6): 2 truncates cleaned up [ 92.437687][ T7220] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.456549][ T7220] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.6.1425: path /128/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 92.500031][ T5283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.658587][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1430'. [ 92.699257][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1430'. [ 92.741015][ T7239] loop6: detected capacity change from 0 to 512 [ 92.777713][ T7239] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 92.792374][ T7239] EXT4-fs (loop6): 1 truncate cleaned up [ 92.802574][ T7239] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.855623][ T5283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.895549][ T7250] macvlan2: entered promiscuous mode [ 92.898186][ T7252] loop5: detected capacity change from 0 to 512 [ 92.900934][ T7250] bridge0: entered promiscuous mode [ 92.918131][ T7252] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 92.926559][ T7250] bridge0: port 4(macvlan2) entered blocking state [ 92.934612][ T7250] bridge0: port 4(macvlan2) entered disabled state [ 92.938957][ T7246] loop4: detected capacity change from 0 to 1024 [ 92.949808][ T7252] EXT4-fs (loop5): 1 truncate cleaned up [ 92.949851][ T7250] macvlan2: entered allmulticast mode [ 92.955971][ T7252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.962514][ T7250] bridge0: entered allmulticast mode [ 92.974501][ T7246] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.986908][ T7250] macvlan2: left allmulticast mode [ 92.993539][ T7250] bridge0: left allmulticast mode [ 93.013420][ T7246] EXT4-fs: Ignoring removed nobh option [ 93.020432][ T7246] EXT4-fs: Ignoring removed bh option [ 93.035624][ T7250] bridge0: left promiscuous mode [ 93.055491][ T4026] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.098368][ T7246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.142314][ T7246] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1433: inode #327696: comm syz.4.1433: iget: illegal inode # [ 93.157869][ T7246] EXT4-fs (loop4): Remounting filesystem read-only [ 93.176529][ T7246] EXT4-fs warning (device loop4): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.4.1433: cleanup dec ref error -30 [ 93.202105][ T7246] EXT4-fs warning (device loop4): ext4_xattr_block_set:2190: inode #18: comm syz.4.1433: dec ref error=-30 [ 93.282587][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.454191][ T7265] loop4: detected capacity change from 0 to 512 [ 93.490373][ T7265] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.538654][ T7265] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1439: invalid block [ 93.592882][ T7265] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1439: invalid indirect mapped block 4294967295 (level 1) [ 93.643252][ T7265] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1439: invalid indirect mapped block 4294967295 (level 1) [ 93.745546][ T7265] EXT4-fs (loop4): 2 truncates cleaned up [ 93.753237][ T7265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.958010][ T7265] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.4.1439: path /292/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 94.030517][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.122223][ T7283] loop4: detected capacity change from 0 to 512 [ 94.133538][ T7287] loop6: detected capacity change from 0 to 512 [ 94.142187][ T7287] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 94.170308][ T7283] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.200710][ T7287] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.213613][ T7287] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.239089][ T7283] EXT4-fs (loop4): 1 truncate cleaned up [ 94.249572][ T7283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.278970][ T5283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.388146][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.630417][ T7309] loop5: detected capacity change from 0 to 512 [ 94.637690][ T7309] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.656020][ T7309] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1465: invalid block [ 94.668366][ T7309] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1465: invalid indirect mapped block 4294967295 (level 1) [ 94.683319][ T7309] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1465: invalid indirect mapped block 4294967295 (level 1) [ 94.699332][ T7309] EXT4-fs (loop5): 2 truncates cleaned up [ 94.705897][ T7309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.731306][ T7309] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.5.1465: path /256/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 94.761107][ T7317] macvlan2: entered promiscuous mode [ 94.766512][ T7317] bridge0: entered promiscuous mode [ 94.772607][ T7317] bridge0: port 3(macvlan2) entered blocking state [ 94.773414][ T4026] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.779400][ T7317] bridge0: port 3(macvlan2) entered disabled state [ 94.779736][ T7317] macvlan2: entered allmulticast mode [ 94.779754][ T7317] bridge0: entered allmulticast mode [ 94.807180][ T7317] macvlan2: left allmulticast mode [ 94.812394][ T7317] bridge0: left allmulticast mode [ 94.825598][ T7317] bridge0: left promiscuous mode [ 94.898746][ T7326] loop3: detected capacity change from 0 to 512 [ 94.905946][ T7326] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.930883][ T7326] EXT4-fs (loop3): 1 truncate cleaned up [ 94.937091][ T7326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.996056][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.234031][ T7352] atomic_op ffff888143911928 conn xmit_atomic 0000000000000000 [ 95.332664][ T7360] net_ratelimit: 289 callbacks suppressed [ 95.332684][ T7360] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 95.346986][ T2968] IPVS: starting estimator thread 0... [ 95.437899][ T7362] IPVS: using max 2064 ests per chain, 103200 per kthread [ 95.612206][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 95.612291][ T29] audit: type=1326 audit(1747373846.080:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.2.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98c09e969 code=0x7ffc0000 [ 95.642172][ T29] audit: type=1326 audit(1747373846.080:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.2.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd98c09e969 code=0x7ffc0000 [ 95.667052][ T29] audit: type=1326 audit(1747373846.080:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98c09e969 code=0x7ffc0000 [ 95.691147][ T29] audit: type=1326 audit(1747373846.080:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98c09e969 code=0x7ffc0000 [ 95.715307][ T29] audit: type=1326 audit(1747373846.080:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd98c09e969 code=0x7ffc0000 [ 95.739668][ T29] audit: type=1326 audit(1747373846.080:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98c09e969 code=0x7ffc0000 [ 95.763758][ T29] audit: type=1326 audit(1747373846.080:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98c09e969 code=0x7ffc0000 [ 95.787900][ T29] audit: type=1326 audit(1747373846.080:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd98c09e969 code=0x7ffc0000 [ 95.811797][ T29] audit: type=1326 audit(1747373846.130:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98c09e969 code=0x7ffc0000 [ 95.834646][ T29] audit: type=1326 audit(1747373846.140:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98c09e969 code=0x7ffc0000 [ 96.088067][ T7412] xt_hashlimit: size too large, truncated to 1048576 [ 96.672878][ T7455] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 96.831817][ T7465] SELinux: failed to load policy [ 96.896337][ T7473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1526'. [ 96.962335][ T7485] loop4: detected capacity change from 0 to 512 [ 96.968896][ T7483] loop6: detected capacity change from 0 to 2048 [ 97.012441][ T7483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.027105][ T7485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.047681][ T7485] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.180704][ T7504] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1537'. [ 97.209461][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.240951][ T7507] loop3: detected capacity change from 0 to 256 [ 97.313998][ T5283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.456009][ T7529] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1548'. [ 97.609328][ T7550] bond1: entered promiscuous mode [ 97.614564][ T7550] bond1: entered allmulticast mode [ 97.624426][ T7550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.640407][ T7550] bond1 (unregistering): Released all slaves [ 97.662723][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1561'. [ 97.663922][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1559'. [ 97.831924][ T7574] loop5: detected capacity change from 0 to 128 [ 97.843099][ T7574] vfat: Unknown parameter 'õ³ò8' [ 97.891284][ T7585] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1567'. [ 98.223318][ T7625] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 98.255722][ T7629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.266110][ T7629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.387575][ T7648] vlan2: entered allmulticast mode [ 98.565989][ T7660] loop4: detected capacity change from 0 to 1024 [ 98.580987][ T7660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.597449][ T7660] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 98.628419][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.643685][ T7667] ref_ctr_offset mismatch. inode: 0x6ff offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 98.865519][ T7691] bridge0: port 1(gretap0) entered blocking state [ 98.870296][ T7695] loop4: detected capacity change from 0 to 512 [ 98.872131][ T7691] bridge0: port 1(gretap0) entered disabled state [ 98.887496][ T7691] gretap0: entered allmulticast mode [ 98.895374][ T7691] gretap0: entered promiscuous mode [ 98.904563][ T7691] bridge0: port 1(gretap0) entered blocking state [ 98.911113][ T7691] bridge0: port 1(gretap0) entered forwarding state [ 98.916651][ T7695] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.941005][ T7695] EXT4-fs (loop4): mount failed [ 98.947775][ T7693] syzkaller0: entered promiscuous mode [ 98.953438][ T7693] syzkaller0: entered allmulticast mode [ 99.005656][ T7707] bridge0: port 3(gretap0) entered blocking state [ 99.013633][ T7707] bridge0: port 3(gretap0) entered disabled state [ 99.014907][ T7703] SELinux: ebitmap start bit (1728054080) is beyond the end of the bitmap (1472) [ 99.021949][ T7707] gretap0: entered allmulticast mode [ 99.035332][ T7703] SELinux: failed to load policy [ 99.039350][ T7707] gretap0: entered promiscuous mode [ 99.046519][ T7707] bridge0: port 3(gretap0) entered blocking state [ 99.053106][ T7707] bridge0: port 3(gretap0) entered forwarding state [ 99.064212][ T7710] gretap0: left allmulticast mode [ 99.070800][ T7710] gretap0: left promiscuous mode [ 99.075959][ T7710] bridge0: port 3(gretap0) entered disabled state [ 99.164408][ T7716] SELinux: failed to load policy [ 99.323924][ T7742] loop6: detected capacity change from 0 to 1024 [ 99.339631][ T7742] EXT4-fs: Ignoring removed nobh option [ 99.345248][ T7742] EXT4-fs: Ignoring removed bh option [ 99.385898][ T7742] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.717339][ T5283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.088862][ T4215] bridge_slave_1: left allmulticast mode [ 100.094620][ T4215] bridge_slave_1: left promiscuous mode [ 100.100435][ T4215] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.119904][ T4215] bridge_slave_0: left promiscuous mode [ 100.125735][ T4215] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.224514][ T4215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.233386][ T4215] bond_slave_0: left allmulticast mode [ 100.239672][ T4215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.243838][ T7803] SELinux: ebitmap start bit (1728054080) is beyond the end of the bitmap (1472) [ 100.259159][ T4215] bond_slave_1: left allmulticast mode [ 100.259539][ T7803] SELinux: failed to load policy [ 100.266002][ T4215] bond0 (unregistering): Released all slaves [ 100.280040][ T7805] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1666'. [ 100.313534][ T4215] batadv_slave_0: left promiscuous mode [ 100.336437][ T4215] hsr_slave_0: left promiscuous mode [ 100.346409][ T4215] hsr_slave_1: left promiscuous mode [ 100.353631][ T4215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.362739][ T4215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.451269][ T4215] team0 (unregistering): Port device team_slave_1 removed [ 100.462961][ T4215] team0 (unregistering): Port device team_slave_0 removed [ 100.622532][ T7792] chnl_net:caif_netlink_parms(): no params data found [ 100.640028][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 100.640043][ T29] audit: type=1400 audit(1747373851.110:2117): avc: denied { unlink } for pid=3314 comm="syz-executor" name="file0" dev="tmpfs" ino=1817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.723742][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.730891][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.738745][ T7792] bridge_slave_0: entered allmulticast mode [ 100.745221][ T7792] bridge_slave_0: entered promiscuous mode [ 100.754974][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.763556][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.773241][ T7792] bridge_slave_1: entered allmulticast mode [ 100.781437][ T7792] bridge_slave_1: entered promiscuous mode [ 100.821341][ T7792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.831776][ T7848] ref_ctr_offset mismatch. inode: 0x3ef offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 100.861334][ T7792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.929349][ T7792] team0: Port device team_slave_0 added [ 100.937613][ T7792] team0: Port device team_slave_1 added [ 100.978971][ T7817] chnl_net:caif_netlink_parms(): no params data found [ 100.999758][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.006860][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.033418][ T7792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.048826][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.055893][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.081908][ T7792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.137502][ T7865] loop6: detected capacity change from 0 to 512 [ 101.146276][ T7865] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 101.160712][ T29] audit: type=1326 audit(1747373851.630:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7868 comm="syz.4.1688" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0cf49e969 code=0x0 [ 101.240035][ T7817] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.247158][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.259550][ T29] audit: type=1400 audit(1747373851.680:2119): avc: denied { lock } for pid=7868 comm="syz.4.1688" path="socket:[19691]" dev="sockfs" ino=19691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 101.288766][ T7817] bridge_slave_0: entered allmulticast mode [ 101.295624][ T7817] bridge_slave_0: entered promiscuous mode [ 101.305770][ T7792] hsr_slave_0: entered promiscuous mode [ 101.312334][ T7792] hsr_slave_1: entered promiscuous mode [ 101.321907][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.330482][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.337911][ T7817] bridge_slave_1: entered allmulticast mode [ 101.344797][ T7817] bridge_slave_1: entered promiscuous mode [ 101.387562][ T7817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.430068][ T7817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.470375][ T7883] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7883 comm=syz.6.1693 [ 101.540197][ T7817] team0: Port device team_slave_0 added [ 101.547028][ T7817] team0: Port device team_slave_1 added [ 101.568041][ T7792] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 101.610010][ T7792] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 101.631738][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.640233][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.667601][ T7817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.719805][ T7792] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 101.729247][ T7792] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 101.739780][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.746900][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.774484][ T7817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.919833][ T7792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.934892][ T7817] hsr_slave_0: entered promiscuous mode [ 101.944771][ T7817] hsr_slave_1: entered promiscuous mode [ 101.958205][ T7817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.997490][ T7817] Cannot create hsr debugfs directory [ 102.023438][ T7792] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.027710][ T7898] loop6: detected capacity change from 0 to 2048 [ 102.042678][ T4204] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.049806][ T4204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.073761][ T4204] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.080895][ T4204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.099109][ T7898] loop6: p1 < > p4 [ 102.103812][ T7898] loop6: p4 size 8388608 extends beyond EOD, truncated [ 102.166758][ T29] audit: type=1400 audit(1747373852.630:2120): avc: denied { unmount } for pid=5283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 102.276916][ T7817] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 102.290890][ T7817] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 102.301364][ T7817] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 102.320239][ T7817] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 102.341149][ T7792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.366471][ T29] audit: type=1400 audit(1747373852.830:2121): avc: denied { write } for pid=7913 comm="syz.6.1704" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 102.441367][ T7914] hub 9-0:1.0: USB hub found [ 102.447340][ T7914] hub 9-0:1.0: 8 ports detected [ 102.465710][ T7817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.496832][ T7817] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.513615][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.520867][ T4183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.555306][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.562469][ T4183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.699392][ T7817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.725804][ T7792] veth0_vlan: entered promiscuous mode [ 102.750088][ T29] audit: type=1400 audit(1747373853.210:2122): avc: denied { read } for pid=7943 comm="syz.4.1710" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 102.758617][ T7792] veth1_vlan: entered promiscuous mode [ 102.845271][ T29] audit: type=1400 audit(1747373853.260:2123): avc: denied { open } for pid=7943 comm="syz.4.1710" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 102.870328][ T29] audit: type=1400 audit(1747373853.270:2124): avc: denied { ioctl } for pid=7943 comm="syz.4.1710" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 102.870484][ T7792] veth0_macvtap: entered promiscuous mode [ 102.871888][ T7792] veth1_macvtap: entered promiscuous mode [ 102.931768][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.940699][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.956991][ T7792] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.966014][ T7792] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.974987][ T7792] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.975320][ T29] audit: type=1400 audit(1747373853.390:2125): avc: denied { read } for pid=7954 comm="syz.4.1714" path="socket:[19425]" dev="sockfs" ino=19425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.983936][ T7792] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.019976][ T29] audit: type=1400 audit(1747373853.390:2126): avc: denied { bind } for pid=7954 comm="syz.4.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.214189][ T7817] veth0_vlan: entered promiscuous mode [ 103.233766][ T7817] veth1_vlan: entered promiscuous mode [ 103.295057][ T7817] veth0_macvtap: entered promiscuous mode [ 103.313888][ T7817] veth1_macvtap: entered promiscuous mode [ 103.363536][ T7817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.374070][ T7817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.389583][ T7817] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.398598][ T7817] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.407425][ T7817] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.416304][ T7817] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.609687][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1731'. [ 103.634318][ T8010] pim6reg: entered allmulticast mode [ 103.646583][ T8010] pim6reg: left allmulticast mode [ 103.788256][ T8015] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1734'. [ 103.922396][ T8028] loop6: detected capacity change from 0 to 512 [ 103.954967][ T8028] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 103.992158][ T8028] EXT4-fs (loop6): 1 truncate cleaned up [ 104.003561][ T8028] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.250647][ T5283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.272290][ T8064] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1756'. [ 104.325835][ T8072] loop7: detected capacity change from 0 to 512 [ 104.360406][ T8072] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 104.398036][ T8076] bridge0: port 3(gretap0) entered blocking state [ 104.404643][ T8076] bridge0: port 3(gretap0) entered disabled state [ 104.411510][ T8076] gretap0: entered allmulticast mode [ 104.412256][ T8072] EXT4-fs (loop7): 1 truncate cleaned up [ 104.417689][ T8076] gretap0: entered promiscuous mode [ 104.428692][ T8076] bridge0: port 3(gretap0) entered blocking state [ 104.435247][ T8076] bridge0: port 3(gretap0) entered forwarding state [ 104.441803][ T8072] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.460412][ T8076] gretap0: left allmulticast mode [ 104.465516][ T8076] gretap0: left promiscuous mode [ 104.470723][ T8076] bridge0: port 3(gretap0) entered disabled state [ 104.483006][ T8082] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 104.492391][ T7792] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.514524][ T8084] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1766'. [ 104.585408][ T8095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8095 comm=syz.4.1769 [ 104.603475][ T8096] loop6: detected capacity change from 0 to 1024 [ 104.641515][ T8103] netlink: '+}[@': attribute type 13 has an invalid length. [ 104.653182][ T8096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.676621][ T8096] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 15 with error 28 [ 104.689120][ T8096] EXT4-fs (loop6): This should not happen!! Data will be lost [ 104.689120][ T8096] [ 104.698957][ T8096] EXT4-fs (loop6): Total free blocks count 0 [ 104.705021][ T8096] EXT4-fs (loop6): Free/Dirty block details [ 104.711023][ T8096] EXT4-fs (loop6): free_blocks=0 [ 104.715956][ T8096] EXT4-fs (loop6): dirty_blocks=0 [ 104.721138][ T8096] EXT4-fs (loop6): Block reservation details [ 104.727197][ T8096] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 104.784713][ T8110] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1773'. [ 104.837604][ T5283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.867835][ T8103] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.875142][ T8103] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.886307][ T8121] netlink: 'syz.2.1774': attribute type 10 has an invalid length. [ 104.983131][ T8133] netlink: 'syz.2.1774': attribute type 10 has an invalid length. [ 104.986219][ T8103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.991209][ T8133] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1774'. [ 105.004630][ T8103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.050900][ T8103] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.059541][ T8103] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.068121][ T8103] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.076503][ T8103] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.157125][ T8121] team0: left promiscuous mode [ 105.186590][ T8121] batman_adv: batadv0: Adding interface: team0 [ 105.192886][ T8121] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.218309][ T8121] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 105.238021][ T8133] team0: entered promiscuous mode [ 105.265959][ T8133] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.273181][ T8133] batman_adv: batadv0: Interface activated: team0 [ 105.281690][ T8133] batman_adv: batadv0: Interface deactivated: team0 [ 105.290194][ T8133] batman_adv: batadv0: Removing interface: team0 [ 105.299925][ T8133] bridge0: port 1(team0) entered blocking state [ 105.306469][ T8133] bridge0: port 1(team0) entered disabled state [ 105.315112][ T8133] team0: entered allmulticast mode [ 105.350958][ T8145] loop6: detected capacity change from 0 to 512 [ 105.378694][ T8145] EXT4-fs: Ignoring removed bh option [ 105.384321][ T8145] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.392403][ T8145] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 105.429703][ T8145] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 105.437778][ T8145] EXT4-fs (loop6): orphan cleanup on readonly fs [ 105.456970][ T8145] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1780: Failed to acquire dquot type 1 [ 105.487476][ T8145] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1780: Invalid block bitmap block 0 in block_group 0 [ 105.504834][ T8145] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1780: Invalid block bitmap block 0 in block_group 0 [ 105.519097][ T8160] loop4: detected capacity change from 0 to 1024 [ 105.526421][ T8160] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.533307][ T8160] EXT4-fs: Ignoring removed nobh option [ 105.538994][ T8160] EXT4-fs: Ignoring removed bh option [ 105.544997][ T8145] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1780: Invalid block bitmap block 0 in block_group 0 [ 105.581512][ T8145] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1780: Failed to acquire dquot type 1 [ 105.596667][ T8145] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1780: Failed to acquire dquot type 1 [ 105.598280][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1787'. [ 105.621438][ T8160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.635734][ T8145] EXT4-fs (loop6): 1 orphan inode deleted [ 105.644880][ T8145] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.677495][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.696035][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 105.696112][ T29] audit: type=1326 audit(2000000001.590:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.6.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83f0d5e969 code=0x7ffc0000 [ 105.730836][ T8171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1789'. [ 105.745093][ T29] audit: type=1326 audit(2000000001.640:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.6.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f83f0d5e969 code=0x7ffc0000 [ 105.768694][ T29] audit: type=1326 audit(2000000001.640:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.6.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83f0d5e969 code=0x7ffc0000 [ 105.787452][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1790'. [ 105.792142][ T29] audit: type=1326 audit(2000000001.640:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.6.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83f0d5e969 code=0x7ffc0000 [ 105.798008][ T29] audit: type=1326 audit(2000000001.700:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.6.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f83f0d5e969 code=0x7ffc0000 [ 105.850359][ T29] audit: type=1326 audit(2000000001.700:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.6.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83f0d5e969 code=0x7ffc0000 [ 105.873873][ T29] audit: type=1326 audit(2000000001.700:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.6.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83f0d5e969 code=0x7ffc0000 [ 105.899226][ T5283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.953304][ T8177] loop4: detected capacity change from 0 to 512 [ 105.962530][ T8177] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.975843][ T8175] ================================================================== [ 105.979648][ T8177] EXT4-fs (loop4): 1 truncate cleaned up [ 105.983963][ T8175] BUG: KCSAN: data-race in n_tty_poll / tty_set_termios [ 105.990247][ T8177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.996508][ T8175] [ 105.996517][ T8175] write to 0xffff888117895508 of 44 bytes by task 8178 on cpu 1: [ 105.996538][ T8175] tty_set_termios+0xc0/0x8c0 [ 106.023303][ T8175] set_termios+0x496/0x4e0 [ 106.027746][ T8175] tty_mode_ioctl+0x379/0x5c0 [ 106.032537][ T8175] n_tty_ioctl_helper+0x91/0x210 [ 106.037502][ T8175] n_tty_ioctl+0x101/0x200 [ 106.041959][ T8175] tty_ioctl+0x842/0xb80 [ 106.046232][ T8175] __se_sys_ioctl+0xcb/0x140 [ 106.050931][ T8175] __x64_sys_ioctl+0x43/0x50 [ 106.055545][ T8175] x64_sys_call+0x19a8/0x2fb0 [ 106.060251][ T8175] do_syscall_64+0xd0/0x1a0 [ 106.064783][ T8175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.070701][ T8175] [ 106.073034][ T8175] read to 0xffff88811789551f of 1 bytes by task 8175 on cpu 0: [ 106.080589][ T8175] n_tty_poll+0xec/0x450 [ 106.084860][ T8175] tty_poll+0x79/0xf0 [ 106.088946][ T8175] __io_read+0x2e7/0xc10 [ 106.093210][ T8175] io_read+0x1c/0x60 [ 106.097129][ T8175] __io_issue_sqe+0xfb/0x2e0 [ 106.101740][ T8175] io_issue_sqe+0x53/0x970 [ 106.106194][ T8175] io_submit_sqes+0x64c/0x1000 [ 106.110992][ T8175] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 106.116575][ T8175] __x64_sys_io_uring_enter+0x78/0x90 [ 106.122080][ T8175] x64_sys_call+0x28c8/0x2fb0 [ 106.126791][ T8175] do_syscall_64+0xd0/0x1a0 [ 106.131327][ T8175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.137258][ T8175] [ 106.139588][ T8175] value changed: 0x01 -> 0xb7 [ 106.144273][ T8175] [ 106.146606][ T8175] Reported by Kernel Concurrency Sanitizer on: [ 106.152774][ T8175] CPU: 0 UID: 0 PID: 8175 Comm: syz.6.1791 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 106.165212][ T8175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 106.175294][ T8175] ================================================================== [ 106.292456][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.892486][ T4183] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.940235][ T4183] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.979560][ T4183] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.060862][ T4183] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.122846][ T4183] gretap0: left allmulticast mode [ 108.128110][ T4183] gretap0: left promiscuous mode [ 108.133170][ T4183] bridge0: port 1(gretap0) entered disabled state [ 108.259777][ T4183] bond0 (unregistering): Released all slaves [ 108.299039][ T4183] tipc: Disabling bearer [ 108.304321][ T4183] tipc: Left network mode [ 108.350286][ T4183] hsr_slave_0: left promiscuous mode [ 108.355939][ T4183] hsr_slave_1: left promiscuous mode [ 108.363975][ T4183] veth1_macvtap: left promiscuous mode [ 108.369786][ T4183] veth0_macvtap: left promiscuous mode [ 108.375406][ T4183] veth1_vlan: left promiscuous mode [ 108.380841][ T4183] veth0_vlan: left promiscuous mode