last executing test programs: 3m23.949136182s ago: executing program 32 (id=3897): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3m18.961191809s ago: executing program 1 (id=4083): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='T'], 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x40000) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3m18.935859469s ago: executing program 1 (id=4085): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x4) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r0) 3m18.650502573s ago: executing program 1 (id=4090): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f0000000680)={[{@rodir}, {@shortname_win95}, {@utf8}, {@fat=@dmask={'dmask', 0x3d, 0x1ec}}, {@numtail}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_mixed}, {@uni_xlateno}]}, 0x0, 0x27c, &(0x7f00000002c0)="$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") mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x88800, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) 3m18.508787084s ago: executing program 1 (id=4095): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x191, 0x4) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1, @remote}, 0x1c, 0x0}}], 0x1, 0x400c080) 3m18.486816245s ago: executing program 1 (id=4098): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$eJzs3M9vFFUcAPDv7G5BfnZF/AGiomgk/mhpQeXgRRMTD5qY6AGPtRSCLNTQmghpbDEELyZKwt2YeDHxL/DkiagnE694NyTEcAE9rRl2dtlud8u2u91t3c8nGfpe9+2+73dm3s6bGaYBDKz96T9JxPaIuB4RwxGRq2+wpbKk7e7cmpv859bcZBLl8vt/J+nb4vatuclq0yT7ua1SKaQflLuURLFJvzPnL5yeKJWmzmX10dkzn4zOnL/w8qkzEyenTk6dHT969MjhsddeHX+lK3mmMd3e+/n0vj1vf3jl3cljVz769cdKvOXy1WuHFuXRHUMRMVdbJ42e625nfbejrpwU+hgIK7I5IgrZ3no9hiN/aWftteF464u+BgesqXK5XB5v/fJCGfgfS6LfEQD9UT3Qp+e/1aVHU4914eYblROgNO872VJ5pRAXszZDDee33bQ/Io4t/PttukTD9RQAgLXwczr/eanJ/K8Y8Uhdu53ZvaFiRDwYEbsi4qGI2B0RD0el7aMR8dgK+9/fUF86/8ndWF1m7Unnf69n97YWz/9qd8GK+ay2427+Q8mJU6WpQ9k6ORhDm9P6WNNPTyIW0p9/fN2q//r5X7qk/VfnglkcNwqbF7/n+MTsRMeJZ25ejNhbaJZ/EoV7WcSeiNi7yj5OvfDDvsW/yddK989/GV24z1T+LuL5yvZfiIb8q5Ll70+OPhClqUOj1b1iqd9+v/xeq/47yr8L0u2/ten+X8u/mNTfr51Z8hGb7tfH5T+/bHlOs9r9f1PywaLOP5uYnT03FrEpeWfp7+sucFfr1fZp/gcPNB//u+Lemng8ItKd+ImIeDIinspifzoinomIA8vk/8ubz368+vzXVpr//Iq2/8oL+dPXfmrVf3vb/0i1cjeodr7/2g2wk3UHAAAAG0UuIrZHkhuplXO5kZHK/5ffHVtzpemZ2RdPTH969njlGYFiDOWqV7qG666HjmXXhqv18aw+n9UPZ9eNr+a33K2PTE6Xjvc7eRhw21qM/9Rf+X5HB6w5z2vB4DL+YXCtfvz75oCN7j6jONerOIDecxSHwdVs/M/3IQ6g9xz/YXDVxv83bTSue9yr8eFNYONx/IfBZfzDQOrkuf51UYjvI5Zvk6yXUFdU+KqTtxd6EGHk1seK6mFhPB/RxzAK7f5Vizhfnu+4035/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTHfwEAAP//qO7n/A==") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="83", 0x1}], 0x1, 0x405412, 0x0, 0x0) 3m18.157561409s ago: executing program 1 (id=4116): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 3m2.708456145s ago: executing program 33 (id=4116): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 2m21.561222763s ago: executing program 3 (id=5870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a100000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 2m21.462631395s ago: executing program 3 (id=5875): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5aa, &(0x7f0000001940)="$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") 2m21.289463007s ago: executing program 3 (id=5883): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0}}], 0x1, 0x24040890) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000000)=0x3) 2m20.837100083s ago: executing program 5 (id=5903): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000006040)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x30, r2, 0x505, 0x0, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}}, 0x10) 2m20.835343833s ago: executing program 5 (id=5905): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x8000000000000000}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 2m20.728393225s ago: executing program 5 (id=5912): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x10000, 0x3, 0x671, 0x2, 0x6}, {0x800, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x2b}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2m20.498375617s ago: executing program 3 (id=5922): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000180), &(0x7f0000000280)='%pK \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x8441, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m20.224556021s ago: executing program 5 (id=5929): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) 2m20.163455882s ago: executing program 5 (id=5931): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x9], 0x0, 0x900000000000000, 0x1}}, 0x40) 2m20.053192003s ago: executing program 3 (id=5932): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x3b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@errors_remount}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") 2m19.701371798s ago: executing program 3 (id=5933): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0x0, 0x8}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 2m19.701247038s ago: executing program 34 (id=5933): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0x0, 0x8}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 2m16.160420986s ago: executing program 5 (id=5991): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc, 0xc3072, 0xffffffffffffffff, 0xe7ee0000) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 2m16.153386166s ago: executing program 35 (id=5991): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc, 0xc3072, 0xffffffffffffffff, 0xe7ee0000) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 1m50.493065057s ago: executing program 7 (id=6914): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1m50.460294618s ago: executing program 7 (id=6915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x14, 0x15, 0xa, 0x903, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24008819}, 0x0) recvfrom(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 1m50.459761888s ago: executing program 7 (id=6916): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYBLOB="b5"], 0x6c}}, 0x0) 1m50.34800809s ago: executing program 7 (id=6923): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800418, &(0x7f0000000280), 0xfe, 0x278, &(0x7f00000006c0)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x201000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xa) 1m50.266919981s ago: executing program 7 (id=6925): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x9}}]}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000050005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e"], 0x44}}, 0x0) 1m49.013414957s ago: executing program 7 (id=6938): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 1:23'], 0xa) 1m49.003919037s ago: executing program 36 (id=6938): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 1:23'], 0xa) 1m45.984628448s ago: executing program 9 (id=7060): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="5802009400140091d491323b478925458db45602117fffefd7ff81000e226c1add024bf752e31ad096339c5e74a48d52a42b3ecbad9c50ff11025395f49d6b51602f4da57b8c63e261d39a587443ea5717", 0x51}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 1m45.866855809s ago: executing program 9 (id=7062): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x6, 0x7, 0x204, 0x6, 0xc00, 0x0, 0xfffff65c, 0xa, r2}, &(0x7f00000001c0)=0x20) 1m45.83508633s ago: executing program 9 (id=7063): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) dup(r0) 1m45.816012s ago: executing program 9 (id=7064): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000080)={[{@discard}, {@noload}]}, 0x64, 0x526, &(0x7f0000000a40)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1m45.587204763s ago: executing program 9 (id=7070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000190"], 0xfdef) 1m43.288383984s ago: executing program 9 (id=7138): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) lchown(0x0, 0x0, 0x0) 1m43.239531274s ago: executing program 37 (id=7138): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) lchown(0x0, 0x0, 0x0) 1.057940755s ago: executing program 2 (id=11084): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) 1.026790086s ago: executing program 2 (id=11086): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xfff) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x5}, 0x8) 751.19169ms ago: executing program 0 (id=11101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200e2f7ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) alarm(0x3) 729.59873ms ago: executing program 0 (id=11103): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000020000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 714.590351ms ago: executing program 0 (id=11104): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_tables_matches\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xe}, 0x18) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000600)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 453.975074ms ago: executing program 6 (id=11118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)={@val={0x2000, 0x15}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x64, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100}, {0x600, 0x0, 0x28, 0x0, @opaque="82773436e0f7f42619c2eb47076a793d6e11bbb4f92dedae0129f318fe154ebf"}}}}}}, 0x4e) 375.376015ms ago: executing program 8 (id=11123): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000640)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES16], 0x86, 0x2a9, &(0x7f0000000c00)="$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") statfs(&(0x7f0000000180)='./file1\x00', &(0x7f0000000340)=""/142) 347.325255ms ago: executing program 8 (id=11124): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) 331.476786ms ago: executing program 8 (id=11125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x3}}, 0x10, 0x0}, 0x0) 317.360406ms ago: executing program 4 (id=11126): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x7, 0x0, 0xee01}, {0x0, 0x20000000, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffff9}, {0x2, 0x800000000008}, 0x4, 0x1000000, 0x0, 0x0, 0x3}}, 0xb8}}, 0x40) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000"], 0xb8}}, 0x0) 308.277346ms ago: executing program 8 (id=11127): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) 299.038386ms ago: executing program 4 (id=11128): r0 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xeb9e, 0x400, 0x20001, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r1 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000600)={0x1, 0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x0}, 0x20) 298.101826ms ago: executing program 6 (id=11129): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="826d876c70f0", 0x6}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x48000}, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 275.683976ms ago: executing program 8 (id=11130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) 268.703246ms ago: executing program 6 (id=11131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000020301010000000000000000000000000800010001"], 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) dup3(r0, r1, 0x80000) 258.653296ms ago: executing program 4 (id=11132): r0 = socket(0x1e, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x403, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0179e12}) epoll_wait(r1, 0x0, 0x0, 0x0) 224.480957ms ago: executing program 6 (id=11133): r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000480)=[{}], 0x1, 0x10000200) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xea5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x9d32f4b220c65367}) 215.803807ms ago: executing program 8 (id=11134): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) time(0x0) 215.582687ms ago: executing program 4 (id=11135): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) 182.333728ms ago: executing program 0 (id=11136): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_vs_stats\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = syz_io_uring_setup(0x2e3b, &(0x7f0000000080)={0x0, 0x482b, 0x10100, 0x1}, &(0x7f0000000140)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000200)=""/9, 0x9}, {0x0, 0x44}], 0x2}) io_uring_enter(r1, 0x567, 0xa1ff, 0x0, 0x0, 0x0) 177.229168ms ago: executing program 4 (id=11137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 145.714948ms ago: executing program 2 (id=11138): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x20, 0x2, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xaf5939af7add8958}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048000}, 0xc000) 108.062958ms ago: executing program 0 (id=11139): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) 99.686959ms ago: executing program 4 (id=11140): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x0) 98.981458ms ago: executing program 2 (id=11141): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) statx(0xffffffffffffff9c, 0x0, 0x4000, 0x7ff, 0x0) 70.487319ms ago: executing program 6 (id=11142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5}]}}}]}, 0x3c}}, 0x0) 41.521459ms ago: executing program 2 (id=11143): r0 = timerfd_create(0x7, 0x80800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) timerfd_gettime(r0, &(0x7f0000000000)) 19.66593ms ago: executing program 0 (id=11144): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x2000224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000009c0)=[{&(0x7f00000001c0)}, {&(0x7f0000001500)="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", 0x142}], 0x2, 0x0, 0x1, {0x1}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x80000, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 10.42036ms ago: executing program 6 (id=11145): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x6f, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x11008, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xffff00, 0xff, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff000000], 'syzkaller1\x00', 'macvtap0\x00', {}, {}, 0x1, 0x9, 0x1, 0x8}, 0x0, 0xd0, 0x138, 0x0, {0x700}, [@common=@inet=@socket2={{0x28}, 0x2}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) 0s ago: executing program 2 (id=11146): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): m 0 to 256 [ 264.075288][T24654] IPVS: using max 2064 ests per chain, 103200 per kthread [ 264.231190][T24678] team_slave_0: entered promiscuous mode [ 264.237037][T24678] team_slave_1: entered promiscuous mode [ 264.257284][T24678] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 264.275266][T24678] macvlan3: entered promiscuous mode [ 264.280694][T24678] team0: entered promiscuous mode [ 264.293620][T24678] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 264.392394][T24685] vlan0: entered promiscuous mode [ 264.796787][T24718] sctp: [Deprecated]: syz.2.8868 (pid 24718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.796787][T24718] Use struct sctp_sack_info instead [ 265.116194][T24744] bond1: entered promiscuous mode [ 265.121524][T24744] bond1: entered allmulticast mode [ 265.131477][T24744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.141501][T24744] bond1 (unregistering): Released all slaves [ 265.211853][T24757] loop8: detected capacity change from 0 to 4096 [ 265.229275][T24757] EXT4-fs mount: 8 callbacks suppressed [ 265.229294][T24757] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.281001][T16940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.367181][T24779] sctp: [Deprecated]: syz.6.8895 (pid 24779) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.367181][T24779] Use struct sctp_sack_info instead [ 265.477735][T24799] vcan0: tx address claim with different name [ 265.543765][T24795] loop2: detected capacity change from 0 to 4096 [ 265.573054][T24795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.596639][T24806] loop6: detected capacity change from 0 to 512 [ 265.616626][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.663949][T24806] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.8910: Failed to acquire dquot type 0 [ 265.664960][T24814] loop8: detected capacity change from 0 to 256 [ 265.697394][T24806] EXT4-fs (loop6): Remounting filesystem read-only [ 265.715046][T24806] EXT4-fs (loop6): 1 orphan inode deleted [ 265.725542][T24806] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.738269][T24806] ext4 filesystem being mounted at /930/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.780445][T13049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.817669][T24826] xt_hashlimit: max too large, truncated to 1048576 [ 265.941924][T24850] block device autoloading is deprecated and will be removed. [ 265.949753][T24850] syz.6.8930: attempt to access beyond end of device [ 265.949753][T24850] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 266.107526][T24867] vcan0: tx address claim with different name [ 266.168757][T24875] loop0: detected capacity change from 0 to 256 [ 266.270914][T24888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8947'. [ 266.284952][T24888] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 266.297974][T24891] loop0: detected capacity change from 0 to 512 [ 266.318608][T24891] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.8949: Failed to acquire dquot type 1 [ 266.334435][T24891] EXT4-fs (loop0): 1 truncate cleaned up [ 266.347569][T24891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.360323][T24891] ext4 filesystem being mounted at /1841/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.387116][T24891] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 266.415822][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.600024][T24921] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8963'. [ 266.942553][T24953] loop6: detected capacity change from 0 to 512 [ 266.975696][T24953] EXT4-fs (loop6): 1 orphan inode deleted [ 266.988088][T24500] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:18: Failed to release dquot type 1 [ 267.016609][T24957] loop8: detected capacity change from 0 to 512 [ 267.027227][T24953] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.065106][T24953] ext4 filesystem being mounted at /950/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.080569][T24957] EXT4-fs (loop8): failed to initialize system zone (-117) [ 267.097274][T24957] EXT4-fs (loop8): mount failed [ 267.153992][T24953] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 267.196209][T24953] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 267.274806][T13049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.429946][T24989] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 267.439790][T24991] sd 0:0:1:0: device reset [ 267.532481][T25008] netlink: 'syz.0.9003': attribute type 10 has an invalid length. [ 267.544057][T25008] team0: Device hsr_slave_0 failed to register rx_handler [ 267.589496][T25017] loop6: detected capacity change from 0 to 256 [ 267.602576][T25018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9008'. [ 268.129870][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 268.129887][ T29] audit: type=1400 audit(1746204674.250:6724): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 268.169971][T25031] loop0: detected capacity change from 0 to 512 [ 268.203766][T25031] EXT4-fs (loop0): 1 orphan inode deleted [ 268.215085][T25031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.230878][T24564] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 268.240778][T24564] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:61: Failed to release dquot type 1 [ 268.267322][T25031] ext4 filesystem being mounted at /1855/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.293025][T25031] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 268.306864][T25031] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 268.351603][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.429682][T25053] syz.8.9019: attempt to access beyond end of device [ 268.429682][T25053] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 268.462748][ T29] audit: type=1326 audit(1746204674.580:6725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25055 comm="syz.4.9020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade749e969 code=0x7ffc0000 [ 268.486483][ T29] audit: type=1326 audit(1746204674.580:6726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25055 comm="syz.4.9020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade749e969 code=0x7ffc0000 [ 268.510291][ T29] audit: type=1326 audit(1746204674.580:6727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25055 comm="syz.4.9020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fade749e969 code=0x7ffc0000 [ 268.533770][ T29] audit: type=1326 audit(1746204674.580:6728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25055 comm="syz.4.9020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade749e969 code=0x7ffc0000 [ 268.562935][ T29] audit: type=1326 audit(1746204674.580:6729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25055 comm="syz.4.9020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade749e969 code=0x7ffc0000 [ 268.675809][ T29] audit: type=1326 audit(1746204674.730:6730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25063 comm="syz.4.9027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade749e969 code=0x7ffc0000 [ 268.699463][ T29] audit: type=1326 audit(1746204674.730:6731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25063 comm="syz.4.9027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade749e969 code=0x7ffc0000 [ 268.723001][ T29] audit: type=1326 audit(1746204674.730:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25063 comm="syz.4.9027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fade749e969 code=0x7ffc0000 [ 269.649992][T25084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9034'. [ 269.732617][T25092] loop6: detected capacity change from 0 to 1024 [ 269.747354][T25092] EXT4-fs: Ignoring removed oldalloc option [ 269.757255][T25092] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 269.783930][T25094] bridge_slave_0: left allmulticast mode [ 269.789747][T25094] bridge_slave_0: left promiscuous mode [ 269.795432][T25094] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.804916][T25094] bridge_slave_1: left allmulticast mode [ 269.804931][T25092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.810709][T25094] bridge_slave_1: left promiscuous mode [ 269.810822][T25094] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.851103][T25094] bond0: (slave bond_slave_0): Releasing backup interface [ 269.869571][T25094] bond_slave_0: left promiscuous mode [ 269.879004][T13049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.888561][T25094] bond0: (slave bond_slave_1): Releasing backup interface [ 269.913153][T25094] bond_slave_1: left promiscuous mode [ 269.959547][T25094] team0: Port device team_slave_0 removed [ 269.972811][T25094] team0: Port device team_slave_1 removed [ 269.980455][T25094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.988028][T25094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.999086][T25094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.006565][T25094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.175055][ T3379] Process accounting resumed [ 270.209030][T25137] loop8: detected capacity change from 0 to 128 [ 270.353961][T25154] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9068'. [ 270.430113][T25162] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 270.564771][T25184] SELinux: Context unconfined is not valid (left unmapped). [ 270.649162][ T3379] Process accounting resumed [ 270.750559][T25204] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 270.909027][T25226] loop0: detected capacity change from 0 to 1024 [ 270.927857][T25226] EXT4-fs: Ignoring removed oldalloc option [ 270.941461][T25226] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 270.981090][T25226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.001610][T25238] netlink: 'syz.6.9103': attribute type 1 has an invalid length. [ 271.009614][T25238] netlink: 'syz.6.9103': attribute type 2 has an invalid length. [ 271.050721][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.063744][T25238] netlink: 'syz.6.9103': attribute type 1 has an invalid length. [ 271.071629][T25238] netlink: 'syz.6.9103': attribute type 2 has an invalid length. [ 271.083206][T25248] bridge_slave_0: left allmulticast mode [ 271.089010][T25248] bridge_slave_0: left promiscuous mode [ 271.094836][T25248] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.104138][T25248] bridge_slave_1: left allmulticast mode [ 271.109973][T25248] bridge_slave_1: left promiscuous mode [ 271.115679][T25248] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.115952][T25250] loop8: detected capacity change from 0 to 527 [ 271.130147][T25250] EXT4-fs (loop8): failed to parse options in superblock:  [ 271.143178][T25250] EXT4-fs (loop8): Unsupported encryption level 27 [ 271.158768][T25248] bond0: (slave bond_slave_0): Releasing backup interface [ 271.169772][T25248] bond0: (slave bond_slave_1): Releasing backup interface [ 271.192902][T25248] team0: Port device team_slave_0 removed [ 271.200852][T25248] team0: Port device team_slave_1 removed [ 271.208861][T25248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.216809][T25248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.228268][T25248] bond0: (slave macvlan2): Releasing backup interface [ 271.262448][T25250] vxcan1 speed is unknown, defaulting to 1000 [ 271.459541][T25276] loop4: detected capacity change from 0 to 1024 [ 271.466526][T25276] EXT4-fs: Ignoring removed oldalloc option [ 271.476650][T25276] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 271.502282][T25276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.553898][T25288] dvmrp5: entered allmulticast mode [ 271.561896][T25288] dvmrp5: left allmulticast mode [ 271.587619][T20042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.606213][T25290] loop6: detected capacity change from 0 to 512 [ 271.613276][T25290] EXT4-fs: Ignoring removed mblk_io_submit option [ 271.620704][T25290] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 271.633266][T25292] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9124'. [ 271.653966][T25290] EXT4-fs (loop6): 1 truncate cleaned up [ 271.660052][T25290] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.675096][T25290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.689455][T25297] netlink: 'syz.4.9128': attribute type 3 has an invalid length. [ 271.713951][T25299] loop8: detected capacity change from 0 to 764 [ 271.730810][T25301] netem: incorrect gi model size [ 271.735955][T25301] netem: change failed [ 271.736661][T25303] loop4: detected capacity change from 0 to 512 [ 271.747087][T25299] Symlink component flag not implemented [ 271.753105][T25299] Symlink component flag not implemented (7) [ 271.769622][T25303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.782491][T25303] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.805368][T25309] SELinux: syz.6.9133 (25309) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 271.826244][T20042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.827774][T25311] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9134'. [ 271.844326][T25311] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9134'. [ 271.853528][T25311] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9134'. [ 271.876765][T25313] loop6: detected capacity change from 0 to 512 [ 271.883885][T25313] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 271.897317][T25313] EXT4-fs (loop6): 1 truncate cleaned up [ 271.903471][T25313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.934165][T13049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.956245][T25324] netlink: 100 bytes leftover after parsing attributes in process `syz.8.9141'. [ 271.978800][T25326] bridge_slave_0: left allmulticast mode [ 271.984521][T25326] bridge_slave_0: left promiscuous mode [ 271.990539][T25326] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.013998][T25326] bridge_slave_1: left allmulticast mode [ 272.019774][T25326] bridge_slave_1: left promiscuous mode [ 272.025517][T25326] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.038304][T25326] bond0: (slave bond_slave_0): Releasing backup interface [ 272.054479][T25326] bond_slave_0: left promiscuous mode [ 272.069449][T25326] bond0: (slave bond_slave_1): Releasing backup interface [ 272.077025][T25326] bond_slave_1: left promiscuous mode [ 272.100989][T25326] team_slave_0: left promiscuous mode [ 272.129174][T25326] team0: Port device team_slave_0 removed [ 272.148242][T25326] team_slave_1: left promiscuous mode [ 272.166244][T25326] team0: Port device team_slave_1 removed [ 272.185668][T25326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.193344][T25326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.209853][T25326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.217392][T25326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.232778][T25350] loop4: detected capacity change from 0 to 512 [ 272.240660][T25350] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 272.253017][T25350] EXT4-fs (loop4): 1 truncate cleaned up [ 272.259271][T25350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.259999][T25326] bond0: (slave macvlan2): Releasing backup interface [ 272.283368][T25326] macvlan2: left promiscuous mode [ 272.288722][T25326] team0: left promiscuous mode [ 272.295188][T20042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.372821][T25360] loop0: detected capacity change from 0 to 128 [ 272.398617][T25362] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9155'. [ 272.623110][T25377] loop0: detected capacity change from 0 to 512 [ 272.629850][T25377] ext2: Unknown parameter 'euid' [ 272.652072][T25379] netem: incorrect gi model size [ 272.657114][T25379] netem: change failed [ 272.692954][T25383] tipc: Enabling of bearer rejected, failed to enable media [ 272.945084][T25400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.954003][T25400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.978441][T25402] netlink: 'syz.0.9172': attribute type 3 has an invalid length. [ 273.006422][T25404] loop0: detected capacity change from 0 to 527 [ 273.013916][T25404] EXT4-fs (loop0): failed to parse options in superblock:  [ 273.026830][T25404] EXT4-fs (loop0): Unsupported encryption level 27 [ 273.046575][T25404] vxcan1 speed is unknown, defaulting to 1000 [ 273.086840][T25406] loop2: detected capacity change from 0 to 764 [ 273.097506][T25406] Symlink component flag not implemented [ 273.103413][T25406] Symlink component flag not implemented (7) [ 273.224181][T25415] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9180'. [ 273.233269][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 273.233284][ T29] audit: type=1400 audit(1746204679.340:6995): avc: denied { create } for pid=25414 comm="syz.4.9179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 273.248836][T25415] vlan2: entered allmulticast mode [ 273.264516][T25415] bond0: entered allmulticast mode [ 273.272514][ T29] audit: type=1400 audit(1746204679.360:6996): avc: denied { connect } for pid=25414 comm="syz.4.9179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 273.292708][ T29] audit: type=1400 audit(1746204679.360:6997): avc: denied { bind } for pid=25414 comm="syz.4.9179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 273.372935][T25425] loop4: detected capacity change from 0 to 512 [ 273.379886][T25425] ext2: Unknown parameter 'euid' [ 273.412724][T25427] loop2: detected capacity change from 0 to 512 [ 273.429450][T25427] EXT4-fs: Ignoring removed mblk_io_submit option [ 273.457662][T25427] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 273.469322][T25427] EXT4-fs (loop2): 1 truncate cleaned up [ 273.475866][T25427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.499125][T25427] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.532179][T25440] loop2: detected capacity change from 0 to 128 [ 273.541182][T25440] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 273.554454][T25440] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 273.567928][T25443] lo speed is unknown, defaulting to 1000 [ 273.573788][T25443] lo speed is unknown, defaulting to 1000 [ 273.579767][ T29] audit: type=1400 audit(1746204679.690:6998): avc: denied { write } for pid=25442 comm="syz.4.9192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 273.600744][T25443] lo speed is unknown, defaulting to 1000 [ 273.608095][T25443] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 273.611437][T24564] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 273.615436][T25444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9190'. [ 273.636919][T25443] lo speed is unknown, defaulting to 1000 [ 273.643146][T25443] lo speed is unknown, defaulting to 1000 [ 273.664995][ T29] audit: type=1400 audit(1746204679.780:6999): avc: denied { write } for pid=25449 comm="syz.2.9194" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 273.690313][T25450] program syz.2.9194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.715220][T25443] lo speed is unknown, defaulting to 1000 [ 273.724554][T25443] lo speed is unknown, defaulting to 1000 [ 273.730969][T25443] lo speed is unknown, defaulting to 1000 [ 273.743620][ T29] audit: type=1400 audit(1746204679.860:7000): avc: denied { mounton } for pid=25451 comm="syz.2.9195" path="/1813/bus" dev="tmpfs" ino=9276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 273.820897][ T29] audit: type=1400 audit(1746204679.940:7001): avc: denied { bind } for pid=25455 comm="syz.0.9197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 273.840647][ T29] audit: type=1400 audit(1746204679.940:7002): avc: denied { node_bind } for pid=25455 comm="syz.0.9197" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 273.879773][ T29] audit: type=1400 audit(1746204679.960:7003): avc: denied { mounton } for pid=25457 comm="syz.8.9198" path="/syzcgroup/cpu/syz8/cgroup.procs" dev="cgroup" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 273.952657][ T29] audit: type=1326 audit(1746204680.070:7004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25462 comm="syz.8.9201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c9646e969 code=0x0 [ 273.992057][T25465] loop4: detected capacity change from 0 to 527 [ 274.000493][T25465] EXT4-fs (loop4): failed to parse options in superblock:  [ 274.013538][T25465] EXT4-fs (loop4): Unsupported encryption level 4 [ 274.066561][T25470] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 274.083240][T25470] veth3: entered allmulticast mode [ 274.150377][T25479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9207'. [ 274.162970][T25479] vlan2: entered allmulticast mode [ 274.168181][T25479] bond0: entered allmulticast mode [ 274.520755][T25512] loop6: detected capacity change from 0 to 527 [ 274.528365][T25512] EXT4-fs (loop6): failed to parse options in superblock:  [ 274.541277][T25512] EXT4-fs (loop6): Unsupported encryption level 27 [ 274.575502][T25512] vxcan1 speed is unknown, defaulting to 1000 [ 274.595110][T25517] sd 0:0:1:0: device reset [ 274.738077][T25512] lo speed is unknown, defaulting to 1000 [ 274.806810][T25530] loop0: detected capacity change from 0 to 128 [ 274.827400][T25530] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 274.866209][T25530] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 274.899818][T25541] rdma_op ffff888109220980 conn xmit_rdma 0000000000000000 [ 274.920063][T24512] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 274.950282][T25547] loop0: detected capacity change from 0 to 512 [ 274.963168][T25547] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 274.998489][T25547] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 275.011450][T25553] loop8: detected capacity change from 0 to 1024 [ 275.018445][T25553] EXT4-fs: Ignoring removed nobh option [ 275.022049][T25547] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 275.024038][T25553] EXT4-fs: Ignoring removed bh option [ 275.049129][T25547] System zones: 0-2, 18-18, 34-34 [ 275.056523][T25547] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 275.075022][T25553] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.087555][T25558] loop2: detected capacity change from 0 to 8192 [ 275.090061][T25547] EXT4-fs (loop0): 1 truncate cleaned up [ 275.120656][T25547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.151267][T16940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.152350][T25547] EXT4-fs error (device loop0): ext4_find_dest_de:2054: inode #2: block 3: comm syz.0.9239: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 275.215777][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.275907][T25579] loop2: detected capacity change from 0 to 527 [ 275.302223][T25579] EXT4-fs (loop2): failed to parse options in superblock:  [ 275.315118][T25579] EXT4-fs (loop2): Unsupported encryption level 27 [ 275.359865][T25579] vxcan1 speed is unknown, defaulting to 1000 [ 275.699298][T25608] loop4: detected capacity change from 0 to 128 [ 275.875966][T25579] lo speed is unknown, defaulting to 1000 [ 276.058130][T25632] loop4: detected capacity change from 0 to 512 [ 276.074463][T25632] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 276.121895][T25632] EXT4-fs (loop4): 1 truncate cleaned up [ 276.147359][T25632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.222344][T20042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.317021][T25658] sd 0:0:1:0: device reset [ 276.322486][T25659] IPv6: Can't replace route, no match found [ 276.378986][T25665] netlink: 'syz.0.9293': attribute type 1 has an invalid length. [ 276.552194][T25696] loop8: detected capacity change from 0 to 512 [ 276.560259][T25696] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 276.570397][T25696] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 276.578999][T25696] EXT4-fs error (device loop8): ext4_iget_extra_inode:4693: inode #15: comm syz.8.9308: corrupted in-inode xattr: e_value size too large [ 276.593527][T25696] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.9308: couldn't read orphan inode 15 (err -117) [ 276.606309][T25696] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.635384][T16940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.688086][T25708] SELinux: syz.8.9313 (25708) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 276.691283][T25710] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (15) [ 276.801925][T25722] __nla_validate_parse: 3 callbacks suppressed [ 276.801944][T25722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9320'. [ 276.817380][T25722] netlink: 'syz.2.9320': attribute type 7 has an invalid length. [ 276.825137][T25722] netlink: 'syz.2.9320': attribute type 8 has an invalid length. [ 276.832963][T25722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9320'. [ 277.123745][T25743] loop6: detected capacity change from 0 to 2048 [ 277.160816][T25747] Invalid ELF header magic: != ELF [ 277.198078][T25749] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 277.241193][T25754] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 277.438825][T25775] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9345'. [ 277.447836][T25775] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9345'. [ 277.458533][T25775] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9345'. [ 277.476180][T25775] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9345'. [ 277.485212][T25775] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9345'. [ 277.494600][T25775] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9345'. [ 277.530025][T25775] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9345'. [ 277.625529][T25786] loop0: detected capacity change from 0 to 8192 [ 277.781553][T25818] loop2: detected capacity change from 0 to 512 [ 277.808436][T25818] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 277.823613][T25818] EXT4-fs (loop2): 1 truncate cleaned up [ 277.830587][T25818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.853584][T25818] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 277.909811][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.217294][T25885] sctp: [Deprecated]: syz.8.9388 (pid 25885) Use of struct sctp_assoc_value in delayed_ack socket option. [ 278.217294][T25885] Use struct sctp_sack_info instead [ 278.261439][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 278.261455][ T29] audit: type=1326 audit(1746204684.380:7308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25890 comm="syz.4.9395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade749e969 code=0x7ffc0000 [ 278.368913][ T29] audit: type=1326 audit(1746204684.420:7309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25890 comm="syz.4.9395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fade749e969 code=0x7ffc0000 [ 278.392714][ T29] audit: type=1326 audit(1746204684.420:7310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25890 comm="syz.4.9395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade749e969 code=0x7ffc0000 [ 278.416274][ T29] audit: type=1326 audit(1746204684.420:7311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25890 comm="syz.4.9395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade749e969 code=0x7ffc0000 [ 278.439945][ T29] audit: type=1326 audit(1746204684.450:7312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25894 comm="syz.0.9397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37104e969 code=0x7ffc0000 [ 278.463645][ T29] audit: type=1326 audit(1746204684.450:7313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25894 comm="syz.0.9397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37104e969 code=0x7ffc0000 [ 278.487160][ T29] audit: type=1326 audit(1746204684.460:7314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25894 comm="syz.0.9397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa37104e969 code=0x7ffc0000 [ 278.510718][ T29] audit: type=1326 audit(1746204684.460:7315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25894 comm="syz.0.9397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37104e969 code=0x7ffc0000 [ 278.534405][ T29] audit: type=1326 audit(1746204684.460:7316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25894 comm="syz.0.9397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37104e969 code=0x7ffc0000 [ 278.557936][ T29] audit: type=1326 audit(1746204684.460:7317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25894 comm="syz.0.9397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa37104e969 code=0x7ffc0000 [ 278.584270][T25909] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 278.666555][T25920] loop8: detected capacity change from 0 to 2048 [ 278.673599][T25917] syzkaller1: entered promiscuous mode [ 278.679165][T25917] syzkaller1: entered allmulticast mode [ 278.685108][T25921] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 278.709596][T25920] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.726725][T25920] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 278.743049][T25920] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 278.755368][T25920] EXT4-fs (loop8): This should not happen!! Data will be lost [ 278.755368][T25920] [ 278.765280][T25920] EXT4-fs (loop8): Total free blocks count 0 [ 278.771379][T25920] EXT4-fs (loop8): Free/Dirty block details [ 278.777400][T25920] EXT4-fs (loop8): free_blocks=2415919104 [ 278.783152][T25920] EXT4-fs (loop8): dirty_blocks=16 [ 278.788373][T25920] EXT4-fs (loop8): Block reservation details [ 278.794425][T25920] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 278.809074][T25935] loop6: detected capacity change from 0 to 512 [ 278.826195][T25935] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 278.834241][T25935] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 278.850669][T25935] System zones: 0-1, 15-15, 18-18, 34-34 [ 278.873401][T25935] EXT4-fs (loop6): orphan cleanup on readonly fs [ 278.898095][T25935] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 278.912891][T25935] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 278.952477][T25945] SELinux: failed to load policy [ 278.966664][T25935] EXT4-fs (loop6): 1 truncate cleaned up [ 278.985714][T25935] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 279.061232][T13049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.119337][T25958] loop4: detected capacity change from 0 to 527 [ 279.127668][T25958] EXT4-fs (loop4): failed to parse options in superblock:  [ 279.140606][T25958] EXT4-fs (loop4): Unsupported encryption level 27 [ 279.182186][T25958] vxcan1 speed is unknown, defaulting to 1000 [ 279.196681][T25920] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 279.270840][T25972] loop6: detected capacity change from 0 to 1024 [ 279.293732][T25972] EXT4-fs: Ignoring removed orlov option [ 279.299552][T25972] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.315859][T25958] lo speed is unknown, defaulting to 1000 [ 279.329591][T25972] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.375887][T13049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.411574][T25981] loop8: detected capacity change from 0 to 512 [ 279.435733][T25981] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 279.448558][T25981] EXT4-fs (loop8): 1 truncate cleaned up [ 279.471555][T25981] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.491101][T25981] EXT4-fs error (device loop8): ext4_ext_precache:631: inode #15: comm syz.8.9430: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 279.529534][T16940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.574598][T25997] loop6: detected capacity change from 0 to 2048 [ 279.593105][T26000] loop8: detected capacity change from 0 to 2048 [ 279.624255][T26006] loop2: detected capacity change from 0 to 2048 [ 279.629786][T26000] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.654887][T25997] Alternate GPT is invalid, using primary GPT. [ 279.661347][T25997] loop6: p2 p3 p7 [ 279.666565][T16940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.715367][T26006] Alternate GPT is invalid, using primary GPT. [ 279.721776][T26006] loop2: p1 p2 p3 [ 279.774328][T26016] binfmt_misc: register: failed to install interpreter file ./file2 [ 279.805683][T26023] loop6: detected capacity change from 0 to 512 [ 279.857870][T26023] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.898431][T26023] ext4 filesystem being mounted at /1051/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.954413][T13049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.040194][T26055] loop6: detected capacity change from 0 to 512 [ 280.048694][T26055] EXT4-fs: Ignoring removed nobh option [ 280.066029][T26061] loop8: detected capacity change from 0 to 1024 [ 280.075516][T26061] ext4: Unknown parameter 'fowner<00000000000000000000' [ 280.100485][T26055] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.9466: corrupted inode contents [ 280.140215][T26067] macvlan4: entered promiscuous mode [ 280.145554][T26067] bridge0: entered promiscuous mode [ 280.151494][T26055] EXT4-fs (loop6): Remounting filesystem read-only [ 280.153502][T26067] bridge0: port 4(macvlan4) entered blocking state [ 280.164960][T26067] bridge0: port 4(macvlan4) entered disabled state [ 280.172599][T26055] EXT4-fs (loop6): 1 truncate cleaned up [ 280.184716][T26055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.197574][T24523] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 280.209078][T24523] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 280.210231][T26067] macvlan4: entered allmulticast mode [ 280.220130][T24523] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 280.225068][T26067] bridge0: entered allmulticast mode [ 280.225314][T26055] ext4 filesystem being mounted at /1053/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.255909][T26067] macvlan4: left allmulticast mode [ 280.261218][T26067] bridge0: left allmulticast mode [ 280.277391][T26067] bridge0: left promiscuous mode [ 280.322940][T26084] loop4: detected capacity change from 0 to 256 [ 280.338138][T26084] FAT-fs (loop4): codepage cp866 not found [ 280.348951][T13049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.359492][T26084] loop4: detected capacity change from 0 to 256 [ 280.450943][T26100] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 280.472591][T26104] loop0: detected capacity change from 0 to 527 [ 280.499522][T26104] EXT4-fs (loop0): failed to parse options in superblock:  [ 280.512538][T26104] EXT4-fs (loop0): Unsupported encryption level 27 [ 280.583402][T26120] ip6gretap0: entered promiscuous mode [ 280.589220][T26120] ip6gretap0: entered allmulticast mode [ 280.604033][T26104] vxcan1 speed is unknown, defaulting to 1000 [ 280.963713][T26104] lo speed is unknown, defaulting to 1000 [ 281.036206][T26158] rdma_op ffff88813b673180 conn xmit_rdma 0000000000000000 [ 281.303081][T26181] SELinux: Context !²Ô is not valid (left unmapped). [ 281.356012][T26185] loop0: detected capacity change from 0 to 764 [ 281.408169][ T3452] Process accounting resumed [ 281.546715][T26197] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.698960][T26222] loop0: detected capacity change from 0 to 512 [ 281.725041][T26222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.742476][T26222] ext4 filesystem being mounted at /1949/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.754394][T26224] bond1: entered promiscuous mode [ 281.756106][T26222] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.9543: corrupted inode contents [ 281.759488][T26224] bond1: entered allmulticast mode [ 281.777151][T26224] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.786628][T26222] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.9543: mark_inode_dirty error [ 281.799459][T26222] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.9543: corrupted inode contents [ 281.812418][T26224] bond1 (unregistering): Released all slaves [ 281.817479][T26230] loop2: detected capacity change from 0 to 512 [ 281.825858][T26230] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 281.837402][T26230] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 281.845467][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.849461][T26230] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.9545: inode #15: comm syz.2.9545: iget: illegal inode # [ 281.869816][T26236] loop4: detected capacity change from 0 to 128 [ 281.881003][T26236] FAT-fs (loop4): bogus number of reserved sectors [ 281.887792][T26236] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 281.897191][T26236] FAT-fs (loop4): Can't find a valid FAT filesystem [ 281.905473][T26230] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.9545: couldn't read orphan inode 15 (err -117) [ 281.919729][T26230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.961576][T26242] __nla_validate_parse: 21 callbacks suppressed [ 281.961594][T26242] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9550'. [ 281.977131][T26242] netlink: 'syz.8.9550': attribute type 21 has an invalid length. [ 281.989496][T26244] netlink: 'syz.4.9551': attribute type 11 has an invalid length. [ 282.002289][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.087863][T26262] xt_hashlimit: max too large, truncated to 1048576 [ 282.105979][T26261] 9pnet_fd: Insufficient options for proto=fd [ 282.188718][T26277] SELinux: Context system_u:object_r:power_device_t:s0 is not valid (left unmapped). [ 282.207572][T26279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9568'. [ 282.253959][T26282] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9567'. [ 282.275726][T26282] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9567'. [ 282.294651][T26288] vxcan1 speed is unknown, defaulting to 1000 [ 282.298765][T26292] netlink: 'syz.4.9573': attribute type 2 has an invalid length. [ 282.308591][T26292] netlink: 'syz.4.9573': attribute type 1 has an invalid length. [ 282.353776][T26293] loop0: detected capacity change from 0 to 527 [ 282.371021][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 282.378803][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 282.389842][T26293] EXT4-fs (loop0): failed to parse options in superblock:  [ 282.400423][T26303] loop8: detected capacity change from 0 to 512 [ 282.402708][T26293] EXT4-fs (loop0): Unsupported encryption level 27 [ 282.415685][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 282.423595][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 282.431331][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 282.439067][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 282.447104][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 282.454852][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 282.462741][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 282.470515][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 282.478383][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 282.486058][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 282.493867][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 282.501567][T26288] lo speed is unknown, defaulting to 1000 [ 282.501582][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 282.515006][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 282.522794][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 282.537045][T26303] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 282.546815][ T36] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 282.563085][T26293] vxcan1 speed is unknown, defaulting to 1000 [ 282.601013][T26303] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.9579: Failed to acquire dquot type 0 [ 282.629019][T26303] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 282.660358][T26303] EXT4-fs (loop8): 1 truncate cleaned up [ 282.679720][T26315] netlink: 'syz.2.9584': attribute type 10 has an invalid length. [ 282.686799][T26303] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.811906][T16940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.817827][T26293] lo speed is unknown, defaulting to 1000 [ 282.987579][T26330] loop4: detected capacity change from 0 to 8192 [ 282.999707][T26330] syz.4.9591: attempt to access beyond end of device [ 282.999707][T26330] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 283.019902][T26343] netlink: 'syz.2.9597': attribute type 13 has an invalid length. [ 283.028189][T26330] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 283.036218][T26330] FAT-fs (loop4): Filesystem has been set read-only [ 283.047620][T26330] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 283.065731][T26330] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 283.080769][T26343] bridge0: port 3(dummy0) entered blocking state [ 283.087213][T26343] bridge0: port 3(dummy0) entered forwarding state [ 283.093849][T26343] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.101042][T26343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.108430][T26343] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.115543][T26343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.157882][T26343] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 283.210154][T26356] loop4: detected capacity change from 0 to 1024 [ 283.229894][T26356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.245322][T26356] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 283.260719][T26356] EXT4-fs (loop4): Remounting filesystem read-only [ 283.269047][T26356] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 283.282422][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 283.282439][ T29] audit: type=1326 audit(1746204689.400:7527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26365 comm="syz.6.9607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ac18e969 code=0x7ffc0000 [ 283.319270][T20042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.332279][ T29] audit: type=1326 audit(1746204689.450:7528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26365 comm="syz.6.9607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f66ac18e969 code=0x7ffc0000 [ 283.356042][ T29] audit: type=1326 audit(1746204689.450:7529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26365 comm="syz.6.9607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ac18e969 code=0x7ffc0000 [ 283.379576][ T29] audit: type=1326 audit(1746204689.450:7530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26365 comm="syz.6.9607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ac18e969 code=0x7ffc0000 [ 283.469495][ T29] audit: type=1400 audit(1746204689.570:7531): avc: denied { mount } for pid=26378 comm="syz.0.9612" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 283.523007][ T29] audit: type=1400 audit(1746204689.640:7532): avc: denied { read write } for pid=26386 comm="syz.6.9616" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 283.547386][ T29] audit: type=1400 audit(1746204689.640:7533): avc: denied { open } for pid=26386 comm="syz.6.9616" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 283.549986][T26387] program syz.6.9616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.599616][ T29] audit: type=1400 audit(1746204689.710:7534): avc: denied { ioctl } for pid=26390 comm="syz.2.9618" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 283.644857][T26394] loop4: detected capacity change from 0 to 2048 [ 283.661276][ T29] audit: type=1400 audit(1746204689.760:7535): avc: denied { connect } for pid=26393 comm="syz.2.9620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 283.688908][ T29] audit: type=1400 audit(1746204689.810:7536): avc: denied { create } for pid=26393 comm="syz.2.9620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 283.712045][T26403] loop0: detected capacity change from 0 to 512 [ 283.725702][T26394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.725964][T26403] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 283.738359][T26394] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.774722][T26403] EXT4-fs (loop0): 1 truncate cleaned up [ 283.780972][T26403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.796810][T26394] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9619: bg 0: block 345: padding at end of block bitmap is not set [ 283.816515][T26394] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 283.829116][T26394] EXT4-fs (loop4): This should not happen!! Data will be lost [ 283.829116][T26394] [ 283.840267][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.868577][T20042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.180463][T26454] loop8: detected capacity change from 0 to 8192 [ 284.253713][T26460] siw: device registration error -23 [ 284.265300][T26464] loop4: detected capacity change from 0 to 512 [ 284.282663][T26464] ext4 filesystem being mounted at /485/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.366343][T26482] syzkaller1: entered promiscuous mode [ 284.372180][T26482] syzkaller1: entered allmulticast mode [ 284.428401][T26495] loop4: detected capacity change from 0 to 256 [ 284.486106][T26499] loop4: detected capacity change from 0 to 2048 [ 284.517636][T26499] loop4: p1 < > p4 [ 284.522374][T26499] loop4: p4 size 8388608 extends beyond EOD, truncated [ 284.708006][T26531] rdma_op ffff88814c418180 conn xmit_rdma 0000000000000000 [ 284.760756][T26539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9687'. [ 284.769936][T26539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9687'. [ 284.779136][T26539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9687'. [ 284.841129][T26547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9691'. [ 284.850317][T26547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9691'. [ 284.863465][T26547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9691'. [ 284.955389][T26551] vxcan1 speed is unknown, defaulting to 1000 [ 285.116359][T26577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=26577 comm=syz.2.9703 [ 285.130750][T26579] loop4: detected capacity change from 0 to 256 [ 285.208294][T26551] lo speed is unknown, defaulting to 1000 [ 285.339914][T26607] sd 0:0:1:0: device reset [ 285.663378][T26626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=26626 comm=syz.8.9726 [ 285.741319][T26637] rdma_op ffff88814c41bd80 conn xmit_rdma 0000000000000000 [ 286.048897][T26671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=26671 comm=syz.4.9743 [ 286.221885][T26677] rdma_op ffff88814c419d80 conn xmit_rdma 0000000000000000 [ 286.553514][T26707] loop6: detected capacity change from 0 to 8192 [ 286.834688][T26735] loop6: detected capacity change from 0 to 1024 [ 286.860171][T26735] EXT4-fs: Ignoring removed nobh option [ 286.865873][T26735] EXT4-fs: Ignoring removed bh option [ 286.904463][T26743] loop8: detected capacity change from 0 to 512 [ 286.912679][T26743] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 286.924161][T26743] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 286.934848][T26743] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 286.943913][T26743] System zones: 0-2, 18-18, 34-34 [ 286.950848][T26743] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 286.966103][T26743] EXT4-fs (loop8): 1 truncate cleaned up [ 286.977607][T26743] EXT4-fs error (device loop8): ext4_find_dest_de:2054: inode #2: block 3: comm syz.8.9778: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 287.389737][T26778] loop6: detected capacity change from 0 to 128 [ 287.398524][T26775] sd 0:0:1:0: device reset [ 287.486731][T26791] netlink: 'syz.8.9795': attribute type 1 has an invalid length. [ 287.533028][T26799] SELinux: syz.6.9801 (26799) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 287.536737][T26801] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (15) [ 287.593466][T26811] loop8: detected capacity change from 0 to 128 [ 287.694135][T26831] Invalid ELF header magic: != ELF [ 287.719879][T26835] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 287.864272][T26845] SELinux: syz.4.9822 (26845) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 287.930841][T26851] sd 0:0:1:0: device reset [ 287.941963][T26850] IPv6: Can't replace route, no match found [ 288.023401][T26855] loop4: detected capacity change from 0 to 512 [ 288.049801][T26855] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 288.099606][T26855] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 288.108525][T26864] loop8: detected capacity change from 0 to 512 [ 288.125837][T26855] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.9829: corrupted in-inode xattr: e_value size too large [ 288.143480][T26864] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 288.158161][T26855] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.9829: couldn't read orphan inode 15 (err -117) [ 288.172965][T26864] EXT4-fs (loop8): 1 truncate cleaned up [ 288.283089][T26873] __nla_validate_parse: 1 callbacks suppressed [ 288.283109][T26873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9837'. [ 288.298398][T26873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9837'. [ 288.345537][T26873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9837'. [ 288.365779][T26873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9837'. [ 288.374895][T26873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9837'. [ 288.387257][T26873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9837'. [ 288.410577][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 288.410593][ T29] audit: type=1326 audit(1746204923.533:7729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26879 comm="syz.8.9850" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f6c96465927 code=0x0 [ 288.443489][T26873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9837'. [ 288.452540][T26873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9837'. [ 288.473043][ T29] audit: type=1326 audit(1746204923.533:7730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26880 comm="syz.0.9840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa371045927 code=0x7ffc0000 [ 288.474978][T26873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9837'. [ 288.496830][ T29] audit: type=1326 audit(1746204923.533:7731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26880 comm="syz.0.9840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa370feab39 code=0x7ffc0000 [ 288.529423][ T29] audit: type=1326 audit(1746204923.533:7732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26880 comm="syz.0.9840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa371045927 code=0x7ffc0000 [ 288.552929][ T29] audit: type=1326 audit(1746204923.533:7733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26880 comm="syz.0.9840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa370feab39 code=0x7ffc0000 [ 288.576490][ T29] audit: type=1326 audit(1746204923.533:7734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26880 comm="syz.0.9840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37104e969 code=0x7ffc0000 [ 288.600155][ T29] audit: type=1326 audit(1746204923.533:7735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26880 comm="syz.0.9840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37104e969 code=0x7ffc0000 [ 288.623874][ T29] audit: type=1326 audit(1746204923.533:7736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26880 comm="syz.0.9840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa37104e969 code=0x7ffc0000 [ 288.647534][ T29] audit: type=1326 audit(1746204923.533:7737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26880 comm="syz.0.9840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37104e969 code=0x7ffc0000 [ 288.671155][ T29] audit: type=1326 audit(1746204923.533:7738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26880 comm="syz.0.9840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37104e969 code=0x7ffc0000 [ 289.270298][T26895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9855'. [ 289.328554][T26908] loop8: detected capacity change from 0 to 512 [ 289.341167][T26908] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.9849: invalid indirect mapped block 256 (level 2) [ 289.373046][T26908] EXT4-fs (loop8): Remounting filesystem read-only [ 289.387449][T26908] EXT4-fs (loop8): 2 truncates cleaned up [ 289.468177][T26927] loop8: detected capacity change from 0 to 512 [ 289.477541][T26927] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 289.488746][T26927] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 289.497544][T26927] EXT4-fs error (device loop8): ext4_iget_extra_inode:4693: inode #15: comm syz.8.9860: corrupted in-inode xattr: e_value size too large [ 289.512253][T26927] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.9860: couldn't read orphan inode 15 (err -117) [ 289.571289][T26940] loop4: detected capacity change from 0 to 512 [ 289.579853][T26940] EXT4-fs (loop4): unable to read superblock [ 289.638686][T26950] netlink: 'syz.2.9870': attribute type 6 has an invalid length. [ 289.748057][T26965] loop8: detected capacity change from 0 to 512 [ 289.769369][T26965] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 289.777392][T26965] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 289.787820][T26965] System zones: 0-1, 15-15, 18-18, 34-34 [ 289.793887][T26965] EXT4-fs (loop8): orphan cleanup on readonly fs [ 289.800559][T26965] EXT4-fs warning (device loop8): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 289.815349][T26965] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 289.824465][T26965] EXT4-fs (loop8): 1 truncate cleaned up [ 289.875785][T26980] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 290.152002][T26986] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 290.222352][T26996] futex_wake_op: syz.8.9892 tries to shift op by -1; fix this program [ 290.262011][T27004] netlink: 'syz.0.9895': attribute type 1 has an invalid length. [ 290.322180][T27012] netlink: 'syz.0.9899': attribute type 10 has an invalid length. [ 290.330732][T27012] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.339860][T27012] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.348900][T27012] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.358210][T27012] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.375926][T27012] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.384893][T27012] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.393938][T27012] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.402899][T27012] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.414630][T27012] team0: Port device geneve1 added [ 290.493569][T27024] binfmt_misc: register: failed to install interpreter file ./file2 [ 290.653513][T27050] openvswitch: netlink: Message has 6 unknown bytes. [ 290.677940][T27052] loop6: detected capacity change from 0 to 2048 [ 290.723965][T27052] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 290.739847][T27052] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 290.752374][T27052] EXT4-fs (loop6): This should not happen!! Data will be lost [ 290.752374][T27052] [ 290.762606][T27052] EXT4-fs (loop6): Total free blocks count 0 [ 290.769029][T27052] EXT4-fs (loop6): Free/Dirty block details [ 290.775228][T27052] EXT4-fs (loop6): free_blocks=2415919104 [ 290.781178][T27052] EXT4-fs (loop6): dirty_blocks=16 [ 290.786562][T27052] EXT4-fs (loop6): Block reservation details [ 290.792633][T27052] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 291.094171][T27104] atomic_op ffff888146a01128 conn xmit_atomic 0000000000000000 [ 291.159303][T27112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.168296][T27112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.217212][T27116] loop8: detected capacity change from 0 to 1024 [ 291.278038][T27069] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 291.290643][T27069] EXT4-fs (loop6): This should not happen!! Data will be lost [ 291.290643][T27069] [ 291.386638][T27122] loop8: detected capacity change from 0 to 2048 [ 291.408429][T27122] ext4 filesystem being mounted at /832/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.640929][T27158] program syz.2.9965 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.785049][ T3359] Process accounting resumed [ 291.810628][T27187] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 291.827457][T27187] SELinux: failed to load policy [ 291.906472][T27203] loop8: detected capacity change from 0 to 2048 [ 291.949538][T27203] Alternate GPT is invalid, using primary GPT. [ 291.955998][T27203] loop8: p2 p3 p7 [ 291.982391][T27179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.010200][T27179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.033865][T27223] atomic_op ffff888146a01928 conn xmit_atomic 0000000000000000 [ 292.096544][T27233] loop8: detected capacity change from 0 to 512 [ 292.112941][T27233] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 292.125112][T27233] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 292.146416][T27233] EXT4-fs error (device loop8): ext4_orphan_get:1391: comm syz.8.10002: inode #15: comm syz.8.10002: iget: illegal inode # [ 292.157087][T27239] netlink: 'syz.6.10004': attribute type 21 has an invalid length. [ 292.177084][T27233] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.10002: couldn't read orphan inode 15 (err -117) [ 292.191249][T27242] netlink: 'syz.2.10005': attribute type 11 has an invalid length. [ 292.505812][T27286] netlink: 'syz.6.10027': attribute type 2 has an invalid length. [ 292.513871][T27286] netlink: 'syz.6.10027': attribute type 1 has an invalid length. [ 292.555513][T27292] ALSA: seq fatal error: cannot create timer (-19) [ 292.640787][T27303] loop2: detected capacity change from 0 to 512 [ 292.657636][T27303] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 292.683831][T27303] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.10035: Failed to acquire dquot type 0 [ 292.702611][T27303] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 292.724257][T27303] EXT4-fs (loop2): 1 truncate cleaned up [ 292.764997][ T3379] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4 [ 292.772893][ T3379] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2 [ 292.785200][ T3379] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 292.793082][ T3379] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 292.800926][ T3379] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 292.808867][ T3379] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 292.816617][ T3379] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 292.824460][ T3379] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 292.832239][ T3379] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 292.840156][ T3379] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 292.848009][ T3379] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 292.855832][ T3379] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 292.863539][ T3379] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 292.871440][ T3379] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 292.879136][ T3379] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 292.886849][ T3379] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 292.904465][ T3379] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 293.020300][T27333] loop2: detected capacity change from 0 to 8192 [ 293.035974][T27333] syz.2.10047: attempt to access beyond end of device [ 293.035974][T27333] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 293.050378][T27333] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 293.058339][T27333] FAT-fs (loop2): Filesystem has been set read-only [ 293.069311][T27333] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 293.086946][T27333] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 293.099769][T27342] netlink: 'syz.6.10052': attribute type 13 has an invalid length. [ 293.147997][T27342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.164769][T27342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.257977][T27364] program syz.0.10062 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.367385][T27383] loop8: detected capacity change from 0 to 128 [ 293.378917][T27383] FAT-fs (loop8): bogus number of reserved sectors [ 293.385580][T27383] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 293.395007][T27383] FAT-fs (loop8): Can't find a valid FAT filesystem [ 293.475354][T27396] __nla_validate_parse: 12 callbacks suppressed [ 293.475373][T27396] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10078'. [ 293.504085][T27396] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10078'. [ 293.713998][T27423] loop8: detected capacity change from 0 to 256 [ 293.804337][T27433] loop8: detected capacity change from 0 to 2048 [ 293.858271][T27433] loop8: p1 < > p4 [ 293.864471][T27441] rdma_op ffff88814c418580 conn xmit_rdma 0000000000000000 [ 293.865545][T27433] loop8: p4 size 8388608 extends beyond EOD, truncated [ 293.937646][T27450] loop2: detected capacity change from 0 to 128 [ 293.945673][T27450] FAT-fs (loop2): bogus number of reserved sectors [ 293.952312][T27450] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 293.961849][T27450] FAT-fs (loop2): Can't find a valid FAT filesystem [ 294.029790][T27455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10105'. [ 294.038936][T27455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10105'. [ 294.049300][T27455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10105'. [ 294.110740][T27466] netlink: 'syz.8.10108': attribute type 13 has an invalid length. [ 294.136122][T27465] loop2: detected capacity change from 0 to 764 [ 294.157990][T27466] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 294.238816][T27477] atomic_op ffff888146a02528 conn xmit_atomic 0000000000000000 [ 294.254632][T27476] loop4: detected capacity change from 0 to 512 [ 294.277669][T27476] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 294.281907][T27483] syzkaller1: entered promiscuous mode [ 294.291194][T27483] syzkaller1: entered allmulticast mode [ 294.317992][T27476] EXT4-fs (loop4): orphan cleanup on readonly fs [ 294.328838][T27476] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.10128: invalid indirect mapped block 256 (level 2) [ 294.343083][T27476] EXT4-fs (loop4): 2 truncates cleaned up [ 294.366190][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 294.366205][ T29] audit: type=1326 audit(1746204929.483:7890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27492 comm="syz.0.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37104e969 code=0x7ffc0000 [ 294.405867][ T29] audit: type=1326 audit(1746204929.523:7891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27492 comm="syz.0.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37104e969 code=0x7ffc0000 [ 294.430007][ T29] audit: type=1326 audit(1746204929.523:7892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27492 comm="syz.0.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa37104e969 code=0x7ffc0000 [ 294.453806][ T29] audit: type=1326 audit(1746204929.523:7893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27492 comm="syz.0.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37104e969 code=0x7ffc0000 [ 294.477599][ T29] audit: type=1326 audit(1746204929.523:7894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27492 comm="syz.0.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37104e969 code=0x7ffc0000 [ 294.501627][ T29] audit: type=1326 audit(1746204929.523:7895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27492 comm="syz.0.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa37104e969 code=0x7ffc0000 [ 294.525302][ T29] audit: type=1326 audit(1746204929.523:7896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27492 comm="syz.0.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37104e969 code=0x7ffc0000 [ 294.549115][ T29] audit: type=1326 audit(1746204929.523:7897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27492 comm="syz.0.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37104e969 code=0x7ffc0000 [ 294.567443][T27498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10124'. [ 294.572807][ T29] audit: type=1326 audit(1746204929.523:7898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27492 comm="syz.0.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa37104e969 code=0x7ffc0000 [ 294.581804][T27498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10124'. [ 294.605267][ T29] audit: type=1326 audit(1746204929.523:7899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27492 comm="syz.0.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa37104e9a3 code=0x7ffc0000 [ 294.645784][T27501] netlink: 'syz.0.10126': attribute type 13 has an invalid length. [ 294.665975][T27503] loop2: detected capacity change from 0 to 2048 [ 294.676048][T27498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10124'. [ 294.711135][T27510] atomic_op ffff888146a02528 conn xmit_atomic 0000000000000000 [ 294.717517][T27503] loop2: p1 < > p4 [ 294.725460][T27503] loop2: p4 size 8388608 extends beyond EOD, truncated [ 294.746173][T27501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.767424][T27501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.803202][T27514] vxcan1 speed is unknown, defaulting to 1000 [ 294.825671][T27516] syzkaller1: entered promiscuous mode [ 294.831335][T27516] syzkaller1: entered allmulticast mode [ 295.001446][T27514] lo speed is unknown, defaulting to 1000 [ 295.485034][T27559] netlink: 'syz.4.10154': attribute type 13 has an invalid length. [ 295.540057][T27559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.548903][T27568] siw: device registration error -23 [ 295.569842][T27559] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.585561][T27559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.601106][ T36] lo speed is unknown, defaulting to 1000 [ 295.606957][ T36] syz0: Port: 1 Link ACTIVE [ 295.638277][T27566] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.10155'. [ 295.680026][T27560] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.10155'. [ 295.680642][T27577] vhci_hcd: invalid port number 15 [ 295.694607][T27577] vhci_hcd: invalid port number 15 [ 295.830048][T27599] loop6: detected capacity change from 0 to 512 [ 295.852395][T27599] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 295.873852][T27599] EXT4-fs (loop6): 1 truncate cleaned up [ 295.880507][T27599] EXT4-fs mount: 28 callbacks suppressed [ 295.880528][T27599] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.937112][T27612] vhci_hcd: invalid port number 15 [ 295.942294][T27612] vhci_hcd: invalid port number 15 [ 296.106400][T13049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.264178][T27647] loop8: detected capacity change from 0 to 512 [ 296.302761][T27649] Invalid ELF header magic: != ELF [ 296.308404][T27647] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.331096][T27647] ext4 filesystem being mounted at /880/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.367405][T27653] loop6: detected capacity change from 0 to 512 [ 296.377237][T27653] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 296.395242][T16940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.414203][T27653] EXT4-fs (loop6): 1 truncate cleaned up [ 296.431017][T27653] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.498701][T13049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.750182][T27694] loop6: detected capacity change from 0 to 512 [ 296.784003][T27694] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 296.830733][T27694] EXT4-fs (loop6): 1 truncate cleaned up [ 296.860727][T27694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.027259][T13049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.092140][T27715] loop6: detected capacity change from 0 to 256 [ 297.178460][T27719] sctp: [Deprecated]: syz.0.10225 (pid 27719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.178460][T27719] Use struct sctp_sack_info instead [ 297.493605][T27747] loop6: detected capacity change from 0 to 512 [ 297.521840][T27752] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 297.538871][T27747] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 297.567097][T27747] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 297.597416][T27747] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.10250: corrupted in-inode xattr: e_value size too large [ 297.661806][T27747] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.10250: couldn't read orphan inode 15 (err -117) [ 297.723067][T27747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.823921][T13049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.892960][T27774] loop8: detected capacity change from 0 to 512 [ 297.920477][T27774] EXT4-fs (loop8): unable to read superblock [ 297.991502][T27788] futex_wake_op: syz.6.10259 tries to shift op by -1; fix this program [ 298.013197][T27790] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 298.243247][T27829] loop8: detected capacity change from 0 to 2048 [ 298.277539][T27829] Alternate GPT is invalid, using primary GPT. [ 298.284005][T27829] loop8: p1 p2 p3 [ 298.357908][T27851] netlink: 'syz.0.10298': attribute type 7 has an invalid length. [ 298.365804][T27851] netlink: 'syz.0.10298': attribute type 8 has an invalid length. [ 298.380505][T27851] erspan0: entered promiscuous mode [ 298.386840][T27851] gretap0: entered promiscuous mode [ 298.394916][T27851] erspan0: left promiscuous mode [ 298.403621][T27851] gretap0: left promiscuous mode [ 298.411620][T27850] ip6gretap0: entered promiscuous mode [ 298.417365][T27850] ip6gretap0: entered allmulticast mode [ 298.423301][T27855] loop4: detected capacity change from 0 to 2048 [ 298.499555][T27855] Alternate GPT is invalid, using primary GPT. [ 298.505979][T27855] loop4: p2 p3 p7 [ 298.532448][T27869] __nla_validate_parse: 16 callbacks suppressed [ 298.532465][T27869] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.10292'. [ 298.595616][T27873] loop4: detected capacity change from 0 to 512 [ 298.602883][T27873] EXT4-fs: Ignoring removed nobh option [ 298.623299][T27873] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.10294: corrupted inode contents [ 298.635813][T27873] EXT4-fs (loop4): Remounting filesystem read-only [ 298.642887][T27873] EXT4-fs (loop4): 1 truncate cleaned up [ 298.648953][T27873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.661576][T24568] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 298.661609][T27873] ext4 filesystem being mounted at /598/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.672456][T24568] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 298.695722][T24568] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 298.707014][T20042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.745379][T27882] bridge0: entered promiscuous mode [ 298.750878][T27882] macvlan3: entered promiscuous mode [ 298.756829][T27882] bridge0: port 1(macvlan3) entered blocking state [ 298.763481][T27882] bridge0: port 1(macvlan3) entered disabled state [ 298.771118][T27882] macvlan3: entered allmulticast mode [ 298.776598][T27882] bridge0: entered allmulticast mode [ 298.782697][T27882] macvlan3: left allmulticast mode [ 298.783572][T27889] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10302'. [ 298.787868][T27882] bridge0: left allmulticast mode [ 298.802274][T27882] bridge0: left promiscuous mode [ 298.990743][T27913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10317'. [ 299.068370][T27918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10328'. [ 299.077595][T27918] netlink: 'syz.2.10328': attribute type 21 has an invalid length. [ 299.368544][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 299.368561][ T29] audit: type=1400 audit(1746204934.493:8107): avc: denied { create } for pid=27935 comm="syz.4.10325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.415724][ T29] audit: type=1400 audit(1746204934.533:8108): avc: denied { setopt } for pid=27935 comm="syz.4.10325" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.436312][ T29] audit: type=1400 audit(1746204934.533:8109): avc: denied { write } for pid=27935 comm="syz.4.10325" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.456758][ T29] audit: type=1400 audit(1746204934.533:8110): avc: denied { ioctl } for pid=27935 comm="syz.4.10325" path="socket:[82613]" dev="sockfs" ino=82613 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.482017][ T29] audit: type=1400 audit(1746204934.533:8111): avc: denied { read } for pid=27935 comm="syz.4.10325" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.508374][T27941] bridge0: entered promiscuous mode [ 299.513791][T27941] macvlan2: entered promiscuous mode [ 299.520214][T27941] bridge0: port 3(macvlan2) entered blocking state [ 299.526815][T27941] bridge0: port 3(macvlan2) entered disabled state [ 299.533663][T27941] macvlan2: entered allmulticast mode [ 299.539174][T27941] bridge0: entered allmulticast mode [ 299.547028][T27941] macvlan2: left allmulticast mode [ 299.552215][T27941] bridge0: left allmulticast mode [ 299.561830][T27941] bridge0: left promiscuous mode [ 299.699284][ T29] audit: type=1400 audit(1746204934.823:8112): avc: denied { bind } for pid=27948 comm="syz.6.10332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 299.725918][T27953] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10335'. [ 299.756929][ T29] audit: type=1400 audit(1746204934.873:8113): avc: denied { mount } for pid=27955 comm="syz.6.10336" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 299.790016][T27960] sctp: [Deprecated]: syz.2.10333 (pid 27960) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.790016][T27960] Use struct sctp_sack_info instead [ 299.855810][ T29] audit: type=1326 audit(1746204934.973:8114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27966 comm="syz.2.10341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b82bce969 code=0x7ffc0000 [ 299.918445][ T29] audit: type=1326 audit(1746204935.003:8115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27966 comm="syz.2.10341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f8b82bce969 code=0x7ffc0000 [ 299.942262][ T29] audit: type=1326 audit(1746204935.033:8116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27966 comm="syz.2.10341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b82bce969 code=0x7ffc0000 [ 300.087581][T27980] netlink: 'syz.0.10345': attribute type 6 has an invalid length. [ 300.163811][T27992] netlink: 'syz.0.10352': attribute type 10 has an invalid length. [ 300.182184][T27994] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10354'. [ 300.191370][T27994] netlink: 'syz.8.10354': attribute type 7 has an invalid length. [ 300.199251][T27994] netlink: 'syz.8.10354': attribute type 8 has an invalid length. [ 300.207155][T27994] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10354'. [ 300.254832][T28001] loop6: detected capacity change from 0 to 512 [ 300.264285][T27994] erspan0: entered promiscuous mode [ 300.265634][T28004] netlink: 'syz.4.10367': attribute type 13 has an invalid length. [ 300.272120][T27994] gretap0: entered promiscuous mode [ 300.285118][T27994] erspan0: left promiscuous mode [ 300.291576][T27994] gretap0: left promiscuous mode [ 300.299628][T28001] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.312296][T28001] ext4 filesystem being mounted at /1224/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.323612][T28004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 300.358054][T13049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.415999][T28015] netlink: 'syz.8.10360': attribute type 10 has an invalid length. [ 300.424199][T28015] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10360'. [ 300.461188][T28015] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.470462][T28015] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.479557][T28015] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.484258][T28020] openvswitch: netlink: Message has 6 unknown bytes. [ 300.488626][T28015] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.541630][T28015] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.550548][T28015] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.559419][T28015] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.568347][T28015] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.588075][T28015] team0: Port device geneve1 added [ 300.615551][T28032] atomic_op ffff888139d1e928 conn xmit_atomic 0000000000000000 [ 300.640304][T28034] bridge0: entered promiscuous mode [ 300.647077][T28034] macvlan2: entered promiscuous mode [ 300.652956][T28034] bridge0: port 1(macvlan2) entered blocking state [ 300.660001][T28034] bridge0: port 1(macvlan2) entered disabled state [ 300.670582][T28034] macvlan2: entered allmulticast mode [ 300.676028][T28034] bridge0: entered allmulticast mode [ 300.686804][T28034] macvlan2: left allmulticast mode [ 300.688397][T28041] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10373'. [ 300.692408][T28034] bridge0: left allmulticast mode [ 300.701555][T28041] netlink: 'syz.4.10373': attribute type 7 has an invalid length. [ 300.714351][T28041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10373'. [ 300.723855][T28034] bridge0: left promiscuous mode [ 300.743503][T28041] erspan0: entered promiscuous mode [ 300.749676][T28041] gretap0: entered promiscuous mode [ 300.755700][T28041] erspan0: left promiscuous mode [ 300.761356][T28041] gretap0: left promiscuous mode [ 301.322485][T28060] team0: Port device geneve1 added [ 301.349224][T28066] atomic_op ffff888139d1f128 conn xmit_atomic 0000000000000000 [ 301.391220][T28072] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 301.399982][T28072] SELinux: failed to load policy [ 301.419100][T28076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.436630][T28076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.561115][T28068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.571392][T28068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.585927][T28100] geneve1: entered promiscuous mode [ 301.591677][T28100] team0: Port device geneve1 added [ 302.159157][T28137] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.167508][T28137] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.175944][T28137] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.184236][T28137] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.238960][T28137] team0: Port device geneve1 added [ 302.575723][T28166] loop4: detected capacity change from 0 to 2048 [ 302.618967][T28168] dummy0: entered promiscuous mode [ 302.638193][T28168] bridge0: port 3(dummy0) entered blocking state [ 302.644658][T28168] bridge0: port 3(dummy0) entered disabled state [ 302.655024][T28168] dummy0: entered allmulticast mode [ 302.660864][T28166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.674204][T28168] dummy0: left allmulticast mode [ 302.682729][T28168] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 302.686672][T28160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.701365][T28166] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 302.717224][T28160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.722722][T28166] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 302.741466][T28166] EXT4-fs (loop4): This should not happen!! Data will be lost [ 302.741466][T28166] [ 302.751154][T28166] EXT4-fs (loop4): Total free blocks count 0 [ 302.757218][T28166] EXT4-fs (loop4): Free/Dirty block details [ 302.763132][T28166] EXT4-fs (loop4): free_blocks=2415919104 [ 302.769123][T28166] EXT4-fs (loop4): dirty_blocks=16 [ 302.774296][T28166] EXT4-fs (loop4): Block reservation details [ 302.780323][T28166] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 302.894021][T28186] loop8: detected capacity change from 0 to 512 [ 302.908446][T28186] EXT4-fs: Ignoring removed i_version option [ 302.941208][T28186] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.027712][T16940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.255347][T28178] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 303.280143][T28223] loop8: detected capacity change from 0 to 1024 [ 303.287854][T28223] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 303.298884][T28223] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 303.309638][T28223] JBD2: no valid journal superblock found [ 303.315402][T28223] EXT4-fs (loop8): Could not load journal inode [ 303.327384][T28223] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 303.379020][T28229] validate_nla: 7 callbacks suppressed [ 303.379041][T28229] netlink: 'syz.2.10463': attribute type 21 has an invalid length. [ 303.395990][T28231] loop8: detected capacity change from 0 to 512 [ 303.403441][T28229] netlink: 'syz.2.10463': attribute type 1 has an invalid length. [ 303.412578][T28231] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 303.432564][T28231] EXT4-fs (loop8): 1 truncate cleaned up [ 303.450841][T28231] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.477732][T28240] lo: left promiscuous mode [ 303.681150][T28260] loop6: detected capacity change from 0 to 512 [ 303.712609][T16940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.713505][T28260] EXT4-fs: Ignoring removed orlov option [ 303.737506][T28260] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 303.771419][T28260] EXT4-fs (loop6): 1 orphan inode deleted [ 303.777317][T28260] EXT4-fs (loop6): 1 truncate cleaned up [ 303.789867][T28260] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.813713][T28260] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.6.10477: path /1246/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 303.845996][T28260] EXT4-fs (loop6): Remounting filesystem read-only [ 303.894461][T13049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.979638][T28295] loop4: detected capacity change from 0 to 512 [ 303.996383][T28295] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 304.032127][T28295] EXT4-fs (loop4): 1 truncate cleaned up [ 304.033808][T28301] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 304.054989][T28295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.278520][T28329] netlink: 'syz.8.10509': attribute type 1 has an invalid length. [ 304.328182][T20042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.126351][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 305.126367][ T29] audit: type=1400 audit(1746204940.243:8296): avc: denied { create } for pid=28339 comm="syz.0.10523" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 305.126962][T28338] loop8: detected capacity change from 0 to 512 [ 305.163331][ T29] audit: type=1326 audit(1746204940.283:8297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28335 comm="syz.4.10512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade749e969 code=0x7ffc0000 [ 305.187267][ T29] audit: type=1326 audit(1746204940.283:8298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28335 comm="syz.4.10512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade749e969 code=0x7ffc0000 [ 305.213410][ T29] audit: type=1326 audit(1746204940.333:8299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28335 comm="syz.4.10512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fade749e969 code=0x7ffc0000 [ 305.237205][ T29] audit: type=1326 audit(1746204940.333:8300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28335 comm="syz.4.10512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade749e969 code=0x7ffc0000 [ 305.260963][ T29] audit: type=1326 audit(1746204940.333:8301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28335 comm="syz.4.10512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade749e969 code=0x7ffc0000 [ 305.265349][T28338] EXT4-fs error (device loop8): ext4_iget_extra_inode:4693: inode #15: comm syz.8.10513: corrupted in-inode xattr: invalid ea_ino [ 305.306912][ T29] audit: type=1400 audit(1746204940.423:8302): avc: denied { unlink } for pid=3302 comm="syz-executor" name="file0" dev="tmpfs" ino=11030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 305.339938][T28338] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.10513: couldn't read orphan inode 15 (err -117) [ 305.353772][T28338] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.412041][T16940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.425174][ T29] audit: type=1400 audit(1746204940.503:8303): avc: denied { read } for pid=28349 comm="syz.4.10516" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 305.448629][ T29] audit: type=1400 audit(1746204940.503:8304): avc: denied { open } for pid=28349 comm="syz.4.10516" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 305.472534][ T29] audit: type=1400 audit(1746204940.503:8305): avc: denied { watch watch_reads } for pid=28336 comm="syz.8.10513" path="/937/file0" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 305.754997][T28383] loop6: detected capacity change from 0 to 512 [ 305.765056][T28383] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.10532: casefold flag without casefold feature [ 305.779073][T28383] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.10532: couldn't read orphan inode 15 (err -117) [ 305.791952][T28383] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.853742][T13049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.139741][T28420] vlan0: entered promiscuous mode [ 306.492695][T28460] loop8: detected capacity change from 0 to 512 [ 306.499468][T28460] EXT4-fs: Ignoring removed orlov option [ 306.505562][T28460] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 306.521121][T28460] EXT4-fs (loop8): 1 orphan inode deleted [ 306.527029][T28460] EXT4-fs (loop8): 1 truncate cleaned up [ 306.533312][T28460] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.554022][T28454] EXT4-fs error (device loop8): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.8.10566: path /947/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 306.577612][T28454] EXT4-fs (loop8): Remounting filesystem read-only [ 306.589803][T28469] loop4: detected capacity change from 0 to 512 [ 306.600124][T28469] EXT4-fs: Ignoring removed nobh option [ 306.616323][T28469] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.10569: invalid indirect mapped block 256 (level 2) [ 306.637072][T28469] EXT4-fs (loop4): 2 truncates cleaned up [ 306.643218][T28469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.659286][T16940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.795060][ T12] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:0: bg 0: block 5: invalid block bitmap [ 306.811676][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1292 with error 28 [ 306.824356][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 306.824356][ T12] [ 306.834089][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 306.840196][ T12] EXT4-fs (loop4): Free/Dirty block details [ 306.846185][ T12] EXT4-fs (loop4): free_blocks=0 [ 306.851190][ T12] EXT4-fs (loop4): dirty_blocks=1296 [ 306.856529][ T12] EXT4-fs (loop4): Block reservation details [ 306.862569][ T12] EXT4-fs (loop4): i_reserved_data_blocks=1296 [ 306.886093][T20042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.957323][T28491] pim6reg: entered allmulticast mode [ 306.973034][T28491] pim6reg: left allmulticast mode [ 307.019030][T28495] SELinux: failed to load policy [ 307.145217][T28516] tipc: Enabling of bearer rejected, already enabled [ 307.240423][T28528] pim6reg: entered allmulticast mode [ 307.251338][T28528] pim6reg: left allmulticast mode [ 307.285560][T28536] bridge0: port 1(syz_tun) entered blocking state [ 307.292170][T28536] bridge0: port 1(syz_tun) entered disabled state [ 307.309144][T28536] syz_tun: entered allmulticast mode [ 307.315477][T28536] syz_tun: entered promiscuous mode [ 307.321550][T28536] bridge0: port 1(syz_tun) entered blocking state [ 307.328052][T28536] bridge0: port 1(syz_tun) entered forwarding state [ 307.509601][T28556] pim6reg: entered allmulticast mode [ 307.530806][T28556] pim6reg: left allmulticast mode [ 307.760928][T28596] random: crng reseeded on system resumption [ 307.802152][T28597] pim6reg: entered allmulticast mode [ 307.811916][T28597] pim6reg: left allmulticast mode [ 307.885297][T28602] bridge0: port 1(syz_tun) entered blocking state [ 307.892019][T28602] bridge0: port 1(syz_tun) entered disabled state [ 307.930865][T28602] syz_tun: entered allmulticast mode [ 307.950562][T28602] syz_tun: entered promiscuous mode [ 307.979633][T28602] bridge0: port 1(syz_tun) entered blocking state [ 307.986130][T28602] bridge0: port 1(syz_tun) entered forwarding state [ 308.084794][T28613] loop8: detected capacity change from 0 to 512 [ 308.120773][T28622] tipc: Enabling of bearer rejected, failed to enable media [ 308.127116][T28613] EXT4-fs (loop8): orphan cleanup on readonly fs [ 308.167596][T28613] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.10639: bg 0: block 248: padding at end of block bitmap is not set [ 308.239880][T28613] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.10639: Failed to acquire dquot type 1 [ 308.287208][T28613] EXT4-fs (loop8): 1 truncate cleaned up [ 308.312822][T28613] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 308.401199][T16940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.471507][T28650] tun0: tun_chr_ioctl cmd 1074025675 [ 308.477024][T28650] tun0: persist enabled [ 308.482070][T28648] vlan0: entered promiscuous mode [ 308.513467][T28650] tun0: tun_chr_ioctl cmd 1074025675 [ 308.518862][T28650] tun0: persist disabled [ 308.637012][T28656] hsr0: entered promiscuous mode [ 308.741152][T28663] loop4: detected capacity change from 0 to 256 [ 308.781428][T28665] loop6: detected capacity change from 0 to 512 [ 308.792881][T28665] EXT4-fs: Ignoring removed nomblk_io_submit option [ 308.802792][T28665] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 308.818798][T28665] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 308.831556][T28667] netlink: 'syz.8.10665': attribute type 1 has an invalid length. [ 308.833586][T28665] EXT4-fs (loop6): 1 truncate cleaned up [ 308.841032][T28667] __nla_validate_parse: 8 callbacks suppressed [ 308.841105][T28667] netlink: 224 bytes leftover after parsing attributes in process `syz.8.10665'. [ 308.848008][T28665] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.963814][T13049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.055174][T28681] bridge0: port 1(syz_tun) entered disabled state [ 309.063938][T28681] ip6gretap0: left promiscuous mode [ 309.069349][T28681] ip6gretap0: left allmulticast mode [ 309.085983][T28681] vlan0: left promiscuous mode [ 309.091406][T28681] ipvlan0: left allmulticast mode [ 309.096562][T28681] veth0_vlan: left allmulticast mode [ 309.107286][T28681] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.115961][T28681] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.124528][T28681] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.133060][T28681] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.152198][T28681] veth3: left allmulticast mode [ 309.157496][T28681] vlan2: left allmulticast mode [ 309.162448][T28681] bond0: left allmulticast mode [ 309.167814][ T9] lo speed is unknown, defaulting to 1000 [ 309.173621][ T9] syz0: Port: 1 Link DOWN [ 309.186859][T28692] IPv6: Can't replace route, no match found [ 309.318608][T28718] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10689'. [ 309.368249][T28724] loop4: detected capacity change from 0 to 512 [ 309.397828][T28724] EXT4-fs: inline encryption not supported [ 309.419031][T28724] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 309.468097][T28724] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.10691: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 4(0), depth 0(0) [ 309.492320][T28724] EXT4-fs (loop4): Remounting filesystem read-only [ 309.498987][T28724] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 309.515073][T28724] EXT4-fs (loop4): mount failed [ 309.595754][T28752] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10704'. [ 309.711507][T28773] loop4: detected capacity change from 0 to 512 [ 309.728742][T28778] xt_hashlimit: max too large, truncated to 1048576 [ 309.770391][T28773] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.10715: Failed to acquire dquot type 1 [ 309.792715][T28773] EXT4-fs (loop4): 1 truncate cleaned up [ 309.806813][T28773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.858382][T28773] ext4 filesystem being mounted at /681/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.883878][T20042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.018792][T28816] loop6: detected capacity change from 0 to 256 [ 310.024582][T28813] vxcan1 speed is unknown, defaulting to 1000 [ 310.133760][T28813] lo speed is unknown, defaulting to 1000 [ 310.201408][T28830] netlink: 'syz.0.10751': attribute type 9 has an invalid length. [ 310.209380][T28830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10751'. [ 310.223352][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 310.223367][ T29] audit: type=1326 audit(1746204945.343:8493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28832 comm="syz.6.10752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ac18e969 code=0x7ffc0000 [ 310.253346][ T29] audit: type=1326 audit(1746204945.343:8494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28832 comm="syz.6.10752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ac18e969 code=0x7ffc0000 [ 310.283074][ T29] audit: type=1326 audit(1746204945.373:8495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28832 comm="syz.6.10752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66ac18e969 code=0x7ffc0000 [ 310.306925][ T29] audit: type=1326 audit(1746204945.373:8496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28832 comm="syz.6.10752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ac18e969 code=0x7ffc0000 [ 310.330549][ T29] audit: type=1326 audit(1746204945.373:8497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28832 comm="syz.6.10752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66ac18e969 code=0x7ffc0000 [ 310.354281][ T29] audit: type=1326 audit(1746204945.373:8498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28832 comm="syz.6.10752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ac18e969 code=0x7ffc0000 [ 310.378262][ T29] audit: type=1326 audit(1746204945.373:8499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28832 comm="syz.6.10752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66ac18e969 code=0x7ffc0000 [ 310.412148][ T29] audit: type=1326 audit(1746204945.453:8500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28832 comm="syz.6.10752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ac18e969 code=0x7ffc0000 [ 310.435958][ T29] audit: type=1326 audit(1746204945.453:8501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28832 comm="syz.6.10752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ac18e969 code=0x7ffc0000 [ 310.459762][ T29] audit: type=1326 audit(1746204945.463:8502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28832 comm="syz.6.10752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f66ac18e969 code=0x7ffc0000 [ 310.518090][T28840] netlink: 'syz.4.10744': attribute type 1 has an invalid length. [ 310.526240][T28840] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10744'. [ 310.753382][T28859] loop6: detected capacity change from 0 to 256 [ 310.763826][T28861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10753'. [ 310.961655][T28885] netlink: 'syz.4.10767': attribute type 9 has an invalid length. [ 310.969729][T28885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10767'. [ 311.155911][T28910] netlink: 'syz.6.10778': attribute type 1 has an invalid length. [ 311.163980][T28910] netlink: 224 bytes leftover after parsing attributes in process `syz.6.10778'. [ 311.919120][T28935] xt_hashlimit: max too large, truncated to 1048576 [ 311.931397][T28938] block device autoloading is deprecated and will be removed. [ 311.939685][T28938] +}[@: attempt to access beyond end of device [ 311.939685][T28938] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 311.953499][T28936] netlink: 108 bytes leftover after parsing attributes in process `syz.2.10792'. [ 311.963499][T28936] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10792'. [ 312.009906][T28940] loop8: detected capacity change from 0 to 512 [ 312.040914][T28940] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.10793: Failed to acquire dquot type 1 [ 312.069204][T28940] EXT4-fs (loop8): 1 truncate cleaned up [ 312.101517][T28940] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.147100][T28940] ext4 filesystem being mounted at /993/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.199684][T16940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.289081][T28992] SELinux: policydb version 0 does not match my version range 15-34 [ 312.307091][T28992] SELinux: failed to load policy [ 312.426769][T29008] pim6reg: entered allmulticast mode [ 312.435652][T29008] pim6reg: left allmulticast mode [ 312.632620][T29019] vxcan1 speed is unknown, defaulting to 1000 [ 312.739815][T29029] SELinux: policydb version 0 does not match my version range 15-34 [ 312.769486][T29029] SELinux: failed to load policy [ 312.836477][T29019] lo speed is unknown, defaulting to 1000 [ 313.143741][T29056] SELinux: Context system_u:object_r:src_t:s0 is not valid (left unmapped). [ 313.325115][T29066] loop4: detected capacity change from 0 to 512 [ 313.347431][T29066] EXT4-fs: Ignoring removed nobh option [ 313.440269][T29066] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.10852: invalid indirect mapped block 256 (level 2) [ 313.455243][T29070] loop0: detected capacity change from 0 to 512 [ 313.498750][T29070] EXT4-fs (loop0): 1 truncate cleaned up [ 313.530527][T29070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.548395][T29066] EXT4-fs (loop4): 2 truncates cleaned up [ 313.564868][T29066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.609184][T20042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.634123][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.989058][T29094] loop0: detected capacity change from 0 to 512 [ 314.021263][T29094] EXT4-fs: Ignoring removed oldalloc option [ 314.065221][T29094] EXT4-fs (loop0): failed to initialize system zone (-117) [ 314.127008][T29094] EXT4-fs (loop0): mount failed [ 314.142523][T29107] __nla_validate_parse: 3 callbacks suppressed [ 314.142543][T29107] netlink: 136 bytes leftover after parsing attributes in process `syz.2.10872'. [ 314.157927][T29107] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 314.478835][T29138] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10886'. [ 314.488261][T29136] loop0: detected capacity change from 0 to 1024 [ 314.530080][T29142] netlink: 'syz.4.10889': attribute type 3 has an invalid length. [ 314.547547][T29136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.654914][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.703410][T29160] loop6: detected capacity change from 0 to 1024 [ 314.743958][T29160] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.794033][T29160] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 314.797451][T29177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10900'. [ 314.836945][T29177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10900'. [ 314.911740][T13049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.933474][T29184] vxcan1 speed is unknown, defaulting to 1000 [ 314.974564][T29198] netlink: 'syz.6.10909': attribute type 13 has an invalid length. [ 315.630090][T29198] hsr0: left promiscuous mode [ 315.654716][T29198] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.664000][T29198] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.673228][T29198] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.682376][T29198] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.916669][T29236] SELinux: syz.6.10921 (29236) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 315.956731][T29184] lo speed is unknown, defaulting to 1000 [ 315.987136][T29246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10925'. [ 316.049578][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 316.049594][ T29] audit: type=1326 audit(1746204951.167:8734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29255 comm="syz.2.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b82bce969 code=0x7ffc0000 [ 316.127019][ T29] audit: type=1326 audit(1746204951.197:8735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29255 comm="syz.2.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b82bce969 code=0x7ffc0000 [ 316.150682][ T29] audit: type=1326 audit(1746204951.197:8736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29255 comm="syz.2.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b82bce969 code=0x7ffc0000 [ 316.174449][ T29] audit: type=1326 audit(1746204951.197:8737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29255 comm="syz.2.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b82bce969 code=0x7ffc0000 [ 316.198187][ T29] audit: type=1326 audit(1746204951.197:8738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29255 comm="syz.2.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b82bce969 code=0x7ffc0000 [ 316.221832][ T29] audit: type=1326 audit(1746204951.197:8739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29255 comm="syz.2.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b82bce969 code=0x7ffc0000 [ 316.245642][ T29] audit: type=1326 audit(1746204951.197:8740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29255 comm="syz.2.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b82bce969 code=0x7ffc0000 [ 316.269269][ T29] audit: type=1326 audit(1746204951.217:8741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29255 comm="syz.2.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8b82bce969 code=0x7ffc0000 [ 316.293090][ T29] audit: type=1326 audit(1746204951.227:8742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29255 comm="syz.2.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b82bce969 code=0x7ffc0000 [ 316.316794][ T29] audit: type=1326 audit(1746204951.227:8743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29255 comm="syz.2.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b82bce969 code=0x7ffc0000 [ 316.352395][T29262] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 316.446461][T29275] SELinux: syz.0.10937 (29275) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 316.468864][T29279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10940'. [ 316.478090][T29279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10940'. [ 316.510075][T29285] netlink: 'syz.6.10944': attribute type 1 has an invalid length. [ 316.544590][T29287] vxcan1 speed is unknown, defaulting to 1000 [ 316.631460][T29300] loop0: detected capacity change from 0 to 1024 [ 316.649298][T29300] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 316.660324][T29300] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 316.677838][T29300] JBD2: no valid journal superblock found [ 316.683648][T29300] EXT4-fs (loop0): Could not load journal inode [ 316.719661][T29287] lo speed is unknown, defaulting to 1000 [ 316.747785][T29319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10959'. [ 316.857876][T29328] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10964'. [ 316.912679][T29340] netlink: 61211 bytes leftover after parsing attributes in process `syz.6.10971'. [ 316.965419][T29351] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 316.965419][T29351] program syz.2.10975 not setting count and/or reply_len properly [ 317.064048][T29363] netlink: 'syz.4.10981': attribute type 21 has an invalid length. [ 317.072051][T29363] netlink: 'syz.4.10981': attribute type 20 has an invalid length. [ 317.080190][T29363] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.348203][T29395] syz.2.10993: attempt to access beyond end of device [ 317.348203][T29395] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 317.693216][T29421] program syz.2.11008 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.828988][T29444] loop0: detected capacity change from 0 to 164 [ 317.853865][T29444] ISOFS: unable to read i-node block [ 317.859378][T29444] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 318.112379][T29475] binfmt_misc: register: failed to install interpreter file ./file2 [ 318.126567][T29477] loop0: detected capacity change from 0 to 1024 [ 318.195282][T29477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.246575][T29477] EXT4-fs error (device loop0): ext4_find_dest_de:2054: inode #2: block 16: comm syz.0.11035: bad entry in directory: inode out of bounds - offset=108, inode=16777215, rec_len=916, size=1024 fake=0 [ 318.293085][T29488] team0: Device is already in use. [ 318.327447][T29477] EXT4-fs (loop0): Remounting filesystem read-only [ 318.399621][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.900024][T29520] loop8: detected capacity change from 0 to 128 [ 319.146284][T29561] hsr0: entered promiscuous mode [ 319.153801][T29561] macvtap1: entered promiscuous mode [ 319.159436][T29561] macvtap1: entered allmulticast mode [ 319.164849][T29561] hsr0: entered allmulticast mode [ 319.169965][T29561] hsr_slave_0: entered allmulticast mode [ 319.175663][T29561] hsr_slave_1: entered allmulticast mode [ 319.188954][T29561] hsr0: left allmulticast mode [ 319.193799][T29561] hsr_slave_0: left allmulticast mode [ 319.199336][T29561] hsr_slave_1: left allmulticast mode [ 319.291400][T29577] loop6: detected capacity change from 0 to 128 [ 319.348906][T29577] syz.6.11081: attempt to access beyond end of device [ 319.348906][T29577] loop6: rw=0, sector=121, nr_sectors = 120 limit=128 [ 319.417897][T24512] kworker/u8:25: attempt to access beyond end of device [ 319.417897][T24512] loop6: rw=1, sector=241, nr_sectors = 800 limit=128 [ 319.502484][T29599] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.509822][T29599] IPv6: NLM_F_CREATE should be set when creating new route [ 319.517091][T29599] IPv6: NLM_F_CREATE should be set when creating new route [ 319.585581][T29609] __nla_validate_parse: 2 callbacks suppressed [ 319.585621][T29609] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11097'. [ 319.710369][T29625] loop8: detected capacity change from 0 to 1024 [ 319.718364][T29625] EXT4-fs: Ignoring removed nomblk_io_submit option [ 319.725158][T29625] EXT4-fs: Ignoring removed bh option [ 319.733427][T29627] SELinux: policydb string SE Linb} does not match my string SE Linux [ 319.743010][T29627] SELinux: failed to load policy [ 319.749714][T29625] EXT4-fs (loop8): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.768465][T29625] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.11105: inode #26214: comm syz.8.11105: iget: illegal inode # [ 319.782766][T29625] EXT4-fs (loop8): Remounting filesystem read-only [ 319.789713][T29625] EXT4-fs warning (device loop8): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.8.11105: cleanup dec ref error -30 [ 319.803785][T29625] EXT4-fs warning (device loop8): ext4_xattr_block_set:2190: inode #18: comm syz.8.11105: dec ref error=-30 [ 319.831616][T16940] EXT4-fs (loop8): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 320.018458][T29664] loop8: detected capacity change from 0 to 256 [ 320.128487][T29678] netlink: 'syz.8.11130': attribute type 21 has an invalid length. [ 320.224526][T29231] kernel write not supported for file /4779/net/ip_vs_stats (pid: 29231 comm: kworker/0:13) [ 320.240355][T29694] xt_CT: You must specify a L4 protocol and not use inversions on it [ 320.392641][T29713] No such timeout policy "syz0" [ 320.406141][ T3292] ================================================================== [ 320.414279][ T3292] BUG: KCSAN: data-race in do_select / pollwake [ 320.420638][ T3292] [ 320.422976][ T3292] write to 0xffffc90001547a00 of 4 bytes by task 29711 on cpu 1: [ 320.430696][ T3292] pollwake+0xb6/0x100 [ 320.434778][ T3292] __wake_up_sync_key+0x4f/0x80 [ 320.439639][ T3292] anon_pipe_write+0x8ba/0xaa0 [ 320.444593][ T3292] io_write+0x60f/0xd30 [ 320.448797][ T3292] io_issue_sqe+0x15d/0xb70 [ 320.453325][ T3292] io_submit_sqes+0x64c/0x1000 [ 320.458112][ T3292] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 320.463679][ T3292] __x64_sys_io_uring_enter+0x78/0x90 [ 320.469079][ T3292] x64_sys_call+0x28c8/0x2fb0 [ 320.473890][ T3292] do_syscall_64+0xd0/0x1a0 [ 320.478405][ T3292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.484308][ T3292] [ 320.486637][ T3292] read to 0xffffc90001547a00 of 4 bytes by task 3292 on cpu 0: [ 320.494188][ T3292] do_select+0xe41/0xf40 [ 320.498444][ T3292] core_sys_select+0x3b2/0x600 [ 320.503223][ T3292] __se_sys_pselect6+0x216/0x280 [ 320.508175][ T3292] __x64_sys_pselect6+0x78/0x90 [ 320.513042][ T3292] x64_sys_call+0x1caa/0x2fb0 [ 320.517730][ T3292] do_syscall_64+0xd0/0x1a0 [ 320.522244][ T3292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.528153][ T3292] [ 320.530505][ T3292] value changed: 0x00000000 -> 0x00000001 [ 320.536225][ T3292] [ 320.538551][ T3292] Reported by Kernel Concurrency Sanitizer on: [ 320.544722][ T3292] CPU: 0 UID: 0 PID: 3292 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(voluntary) [ 320.557322][ T3292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 320.567395][ T3292] ================================================================== [ 328.842652][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 328.842670][ T29] audit: type=1400 audit(1746204963.957:9020): avc: denied { read } for pid=2987 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 328.870979][ T29] audit: type=1400 audit(1746204963.957:9021): avc: denied { search } for pid=2987 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.892659][ T29] audit: type=1400 audit(1746204963.957:9022): avc: denied { append } for pid=2987 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 328.915077][ T29] audit: type=1400 audit(1746204963.957:9023): avc: denied { open } for pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 328.937957][ T29] audit: type=1400 audit(1746204963.957:9024): avc: denied { getattr } for pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 328.964707][ T29] audit: type=1400 audit(1746204964.077:9025): avc: denied { recv } for pid=3292 comm="syz-executor" saddr=10.128.0.163 src=45964 daddr=10.128.1.133 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1