last executing test programs: 2m8.727765348s ago: executing program 0 (id=3791): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000380)={[{@dax_never}, {@noblock_validity}, {@data_err_abort}, {@discard}, {@bh}, {@grpjquota, 0x2e}, {@usrjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4c9, &(0x7f00000011c0)="$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") r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x6, &(0x7f0000001680)=""/51, &(0x7f0000000000)=0xfd80) 2m8.712407998s ago: executing program 0 (id=3792): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) ioperm(0x2b, 0xa9, 0x3) 2m8.685338478s ago: executing program 0 (id=3793): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)) 2m8.623875899s ago: executing program 0 (id=3794): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 2m8.623526919s ago: executing program 0 (id=3795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310707000000ffdbdf25380000000e0001006e657464657673696d0000000f000200"], 0x3c}, 0x1, 0x2}, 0x8800) 2m8.50054757s ago: executing program 0 (id=3798): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r0, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) epoll_pwait(r5, &(0x7f0000000400)=[{}], 0x1, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c3a0e4, 0x1, @perf_config_ext={0x20000000000000, 0x1}, 0x11d08, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280)=r6, 0x4) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) close(0x3) preadv(r7, &(0x7f0000001580)=[{&(0x7f0000000340)=""/25, 0x19}], 0x1, 0x1, 0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)='j', 0x1}], 0x1}, 0x1) 2m8.499855641s ago: executing program 32 (id=3798): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r0, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) epoll_pwait(r5, &(0x7f0000000400)=[{}], 0x1, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c3a0e4, 0x1, @perf_config_ext={0x20000000000000, 0x1}, 0x11d08, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280)=r6, 0x4) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) close(0x3) preadv(r7, &(0x7f0000001580)=[{&(0x7f0000000340)=""/25, 0x19}], 0x1, 0x1, 0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)='j', 0x1}], 0x1}, 0x1) 1m3.193281573s ago: executing program 5 (id=6017): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) utimes(&(0x7f0000000000)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x3, 0x3a, '9p\x00', 0x3a, '!/', 0x3a, './file0', 0x3a, [0x46]}, 0x2d) 1m3.165048793s ago: executing program 5 (id=6018): symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) link(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) 1m3.145706024s ago: executing program 5 (id=6020): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r0, 0x0, 0x0, 0x4}, 0x20) 1m2.956165366s ago: executing program 5 (id=6021): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) 1m2.955886026s ago: executing program 5 (id=6022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) read(r0, 0x0, 0x0) 1m2.890201757s ago: executing program 5 (id=6025): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$eJzs3V9rLGcZAPBnNrvHk3NymlS90IK12krOQc9u0tg2eFEriF4V1HpfY7IJIZtsyG7ak1BMDn4AQUQFr/TGG8EPIEjBGy9FKOi1oqKInuqFF9qR2Z1Nc5L913aTTZPfDybzvjPvzPO8G2Z2ZmeYCeDKeiIiXoiIt9I0vRMR0/n0Qj7EYXvI2r354LXlbEgiTV/6RxJJPq2zriQf38wXux4RX/tyxDeT03Ebe/sbS7VadSevV5qb25XG3v7d9c2ltepadWthYf7ZxecWn1mcG0k/b0XE81/8y/e/89MvPf/Lz7z6x5f/dvtbWVpT+fzj/XiHiv1mtrtean0WxxfYeZfBLqJiq4e5yW4tJk5NuX/GOQEA0F12jP/BiPhkRNyJ6ZjofzgLAAAAvA+ln5+K/yYRaXfXekwHAAAA3kcKrXtgk0I5vxdgKgqFcrl9D++H40ahVm80P71a391aad8rOxOlwup6rTqX3ys8E6Ukq8+3ym/Xnz5RX4iIRyPie9OTrXp5uV5bGfePHwAAAHBF3Dxx/v/v6fb5f8fBOJMDAAAARmdm3AkAAAAAZ27Y8/8bZ5wHAAAAcHZc/wcAAIBL7SsvvpgNaef91yuv7O1u1F+5u1JtbJQ3d5fLy/Wd7fJavb7Wembf5qD11er17c/G1u69SrPaaFYae9djs7671Xx5/aFXYAMAAADn6NGPv/77JCIOPzfZGjLXhlt0yGbARVU8KiX5uMtm/YdH2uM/n1NSwLmYGHcCwNgUx50AMDalcScAjF0yYH7Pm3d+k48/Mdp8AACA0Zv9aO/r/4W+Sx72nw1ceDZiuLpc/4erq3X9f9g7eR0swKVSGnQE0HebPxhxNsA4vOfr/wOl6TtKCAAAGLmp1pAUysVOvVAolyNutV4LUEpW12vVuYh4JCJ+N136QFafb7VMBp4zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAFxqEYW/Jr9qP8t/dvqpqZO/D1xL/jMd+StCX/3RSz+4t9Rs7sxn0/95NL35w3z60+P4BQMAAACuhAEv8H9Y5zy9cx4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP05oPXljvDecb9+xciYqZb/GJcb42vRykibvwrieKx5ZKImBhB/Mnsz0e6xU+ytI5Cdos/OYL4h/f7xo/D/FPoFv/mCOLDVfZ6tv95odv2V4gnWuPu218x4qH6u9V7/xdH+7+JHtv/rSFjPPbGzys949+PeKx4Kv5BFqETP+kR/8kh43/j6/v7vealP46Y7fr9k3SaZHvIqDQ3tyuNvf2765tLa9W16tbCwvyzi88tPrM4V1ldr1Xzv11jfPdjv3irX/9v9Ig/M6D/T51a27WuMf73xr0HH2oXS93i336yS/xf/yRvcTp+If/u+1RezubPdsqH7fJxj//st4/36/9Kj/4P+v/f7rXSE+589dt/GrIpAHAOGnv7G0u1WnXn0hays/QhG2dHZxciZ4XzKRyMdIVpmqbZNvUe1pPERfhYWoVx75kAAIBRe/ugf9yZAAAAAAAAAAAAAAAAAAAAwNV1Ho8TOxnz8KiUjOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/H/AAAA///s19ky") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1m2.865348527s ago: executing program 33 (id=6025): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 58.336198528s ago: executing program 4 (id=6146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000000, &(0x7f0000000140)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x2}}]}, 0xff, 0x4d1, &(0x7f0000000f00)="$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") chmod(&(0x7f0000000040)='./file1\x00', 0xe0) 58.111614901s ago: executing program 4 (id=6152): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 58.040930772s ago: executing program 4 (id=6155): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x401}, 0x18) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="89", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x0) close(r1) 57.960032053s ago: executing program 4 (id=6159): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x410c84, &(0x7f0000000340), 0xfd, 0x788, &(0x7f0000001180)="$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") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') 57.894705324s ago: executing program 4 (id=6165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 57.567373378s ago: executing program 4 (id=6179): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) 57.528270449s ago: executing program 34 (id=6179): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) 1.285829193s ago: executing program 3 (id=7800): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x903, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x300, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc4014}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1.285507443s ago: executing program 3 (id=7801): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x8) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) 1.270638663s ago: executing program 3 (id=7802): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c3, 0x5}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}, 0x0, 0x7b}, 0x90) 1.207976093s ago: executing program 3 (id=7803): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r2, 0x40095505, 0x0) 1.172142444s ago: executing program 6 (id=7806): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 1.111984765s ago: executing program 6 (id=7807): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000100)={0xffffffffffffffff, 0x0}) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.097981165s ago: executing program 6 (id=7808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 890.787768ms ago: executing program 7 (id=7811): mkdir(&(0x7f0000000040)='./file0\x00', 0x141) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 865.147149ms ago: executing program 7 (id=7812): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x453, &(0x7f0000000600)="$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") r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000000)=0xc92b) 777.659829ms ago: executing program 6 (id=7813): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x5}, 0x18) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x40000c0) ioctl$VT_DISALLOCATE(r0, 0x5608) 758.92144ms ago: executing program 7 (id=7814): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000380)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x102, 0x0, 0x4}) 732.94845ms ago: executing program 6 (id=7815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 655.483581ms ago: executing program 7 (id=7817): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000001b40)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x32, 0x0, @empty, @broadcast}}}}}, 0x0) 654.440161ms ago: executing program 6 (id=7819): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r0, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000400)=[{}], 0x1, 0x4, 0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c3a0e4, 0x1, @perf_config_ext={0x20000000000000, 0x1}, 0x11d08, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000280)=r5, 0x4) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) close(0x3) preadv(r7, &(0x7f0000001580)=[{&(0x7f0000000340)=""/25, 0x19}], 0x1, 0x1, 0x7) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r6, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg$inet(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)='j', 0x1}], 0x1}, 0x1) 507.688223ms ago: executing program 3 (id=7823): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) 492.616993ms ago: executing program 3 (id=7824): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe2}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb3de6f89a6272ddc63ce532e270bc6cba3d229a96e108026bf64d48efc0435d", 0xc3}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 472.167143ms ago: executing program 2 (id=7825): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, &(0x7f0000000180)) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) 302.586486ms ago: executing program 2 (id=7832): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 300.975356ms ago: executing program 1 (id=7833): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0xfece) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) sendfile(r0, r2, 0x0, 0x100001) 275.434846ms ago: executing program 2 (id=7834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x4a0, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x468, 0x2, [@TCA_ROUTE4_POLICE={0x454, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x100, 0xa, 0xa83f, 0xd, 0xc, 0x101, 0x6, 0x9, 0x6, 0x100, 0x3ff, 0xa, 0x1, 0x2, 0xe, 0xfffffff9, 0x3, 0x2, 0x2, 0x1, 0x2, 0x1, 0x8, 0x101, 0xfffffff7, 0x3, 0x7cb, 0x8020000, 0x7ff, 0x2, 0x7, 0x6, 0x3, 0xff, 0x7fff, 0x5, 0x0, 0xd, 0x6, 0x9, 0x6, 0x7, 0xbb1, 0xb, 0xffffffff, 0x6, 0xded4, 0x5, 0xff, 0xc2f9, 0x6, 0x6, 0x2, 0x8000, 0x40, 0x1, 0x1, 0xffffffff, 0xfffffffa, 0x2, 0x0, 0x3, 0x5, 0x7, 0x5, 0x8, 0x7, 0x80010000, 0xc, 0x220, 0x7fffffff, 0x5, 0x8, 0x2, 0x3ff, 0xd, 0x6, 0x5, 0x8001, 0x3, 0x400, 0x6, 0x4, 0x59e, 0x3, 0x4, 0x7, 0x9, 0x88000, 0x80000000, 0x101, 0x3, 0xe, 0x7bc, 0x8, 0x3, 0x2, 0x3, 0x6, 0x10000, 0x7, 0x5, 0x8001, 0x5, 0x3, 0x7fffffff, 0x4, 0xa6f8, 0x9, 0x7fff, 0x0, 0xfffffffa, 0xccf, 0x6, 0x779, 0xad, 0x2, 0xb0e, 0x255e, 0x9, 0x4, 0x9, 0x5, 0x400, 0x7f, 0x8, 0x7, 0x2, 0x22ba, 0x9, 0x80000001, 0xff, 0x8, 0x1, 0x5, 0x6, 0x1, 0x415, 0x4, 0x401, 0x1c000000, 0x1, 0xba6f, 0xf, 0x5, 0xb1f5, 0xcc8f, 0x4, 0x8, 0x100, 0x7, 0x3, 0xfff, 0x7, 0x1, 0x8, 0xffffffff, 0x5, 0x7, 0xa, 0x8, 0x0, 0x8, 0x6, 0xfffffff7, 0x2, 0x3, 0x1, 0x0, 0x5, 0x7ff, 0x800, 0xfffffff7, 0x4, 0x1, 0xffff7fff, 0x3, 0x2, 0x3, 0xffffff39, 0x8, 0x0, 0x0, 0x1, 0x7, 0xed97, 0x1, 0x101, 0x9, 0x1, 0x4, 0x2, 0x5, 0xfff, 0x6, 0x9, 0x3, 0x6e0, 0x0, 0x10000, 0x470f, 0x2, 0x9, 0x979, 0x0, 0xffffff39, 0x2, 0x4, 0x7, 0x5, 0x7fffffff, 0x9, 0x8, 0x0, 0x80000001, 0x4, 0x80, 0x1, 0x5, 0x2, 0x1c, 0x800, 0x5, 0x81, 0x8, 0x0, 0x4, 0xc, 0x7, 0x7fffffff, 0x1, 0x2, 0x1000, 0x7, 0x8, 0x43, 0x8b5569d, 0x1d, 0x0, 0x9, 0xd, 0x4, 0x3, 0x5, 0x80000001, 0x7, 0x1, 0x8, 0x80000001, 0x9, 0xcf0, 0x9, 0x8, 0x2, 0x7, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xcf5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000006, 0x6, 0x0, 0x8, {0x7, 0x0, 0x2, 0xe, 0x9, 0x80}, {0x9, 0x2, 0x8, 0x43, 0x3}, 0x9, 0xbc, 0xffffffff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xad}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x4a0}}, 0x0) 256.802396ms ago: executing program 1 (id=7835): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) r2 = syz_io_uring_setup(0x7d9b, &(0x7f00000008c0)={0x0, 0x92b2, 0x10100, 0xfffffffe, 0x21a}, &(0x7f0000000980)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x14a8}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 196.317697ms ago: executing program 1 (id=7836): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r3, 0x0, 0x2, 0x2}}, 0x20) 195.937297ms ago: executing program 2 (id=7837): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) 195.659817ms ago: executing program 1 (id=7838): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 170.126768ms ago: executing program 7 (id=7839): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 127.925488ms ago: executing program 2 (id=7840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='!', 0x1}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180)) 127.680878ms ago: executing program 1 (id=7841): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) 81.705089ms ago: executing program 1 (id=7842): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x34, r3, 0x1, 0x7ffffc, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 71.446409ms ago: executing program 7 (id=7843): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) 0s ago: executing program 2 (id=7844): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x104) kernel console output (not intermixed with test programs): _0) entered disabled state [ 296.961158][ T4233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.971044][ T4233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.980168][ T4233] bond0 (unregistering): Released all slaves [ 296.989431][T19566] dummy0 speed is unknown, defaulting to 1000 [ 297.007180][T19603] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6040'. [ 297.055867][T19606] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.6041'. [ 297.207642][T19566] chnl_net:caif_netlink_parms(): no params data found [ 297.222697][ T4233] hsr_slave_0: left promiscuous mode [ 297.240161][ T4233] hsr_slave_1: left promiscuous mode [ 297.249281][ T4233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.268554][ T4233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.347455][ T4233] team0 (unregistering): Port device team_slave_1 removed [ 297.357756][ T4233] team0 (unregistering): Port device team_slave_0 removed [ 297.383812][T19626] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6051'. [ 297.463372][T19630] netlink: '+|[@': attribute type 5 has an invalid length. [ 297.488120][T19566] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.495237][T19566] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.502384][T19566] bridge_slave_0: entered allmulticast mode [ 297.512894][T19566] bridge_slave_0: entered promiscuous mode [ 297.519888][T19566] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.526949][T19566] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.534465][T19566] bridge_slave_1: entered allmulticast mode [ 297.541025][T19566] bridge_slave_1: entered promiscuous mode [ 297.562103][T19566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.572251][T19566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.601140][T19566] team0: Port device team_slave_0 added [ 297.607557][T19566] team0: Port device team_slave_1 added [ 297.632148][T19566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.639129][T19566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.665022][T19566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.676062][T19566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.683095][T19566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.709044][T19566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.805858][T19642] netlink: 'syz.2.6057': attribute type 3 has an invalid length. [ 297.824825][T19566] hsr_slave_0: entered promiscuous mode [ 297.843118][T19566] hsr_slave_1: entered promiscuous mode [ 297.956406][T19668] loop4: detected capacity change from 0 to 128 [ 297.964504][T19668] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 297.979789][T19668] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 297.998512][T19668] ext2 filesystem being mounted at /1261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.006153][T19566] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 298.017926][T19566] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 298.040713][T19566] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 298.050083][T19566] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 298.070841][ T3327] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.076083][T19566] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.086985][T19566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.094358][T19566] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.101413][T19566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.157520][T19566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.176983][ T6810] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.204174][ T6810] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.220967][T19566] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.241759][ T6812] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.248845][ T6812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.265754][ T4233] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.272909][ T4233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.315944][T19566] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 298.326396][T19566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.358274][T19686] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 298.393120][T19566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.500241][T19716] netlink: '+|[@': attribute type 5 has an invalid length. [ 298.553512][T19724] loop4: detected capacity change from 0 to 512 [ 298.562618][T19566] veth0_vlan: entered promiscuous mode [ 298.571577][T19566] veth1_vlan: entered promiscuous mode [ 298.579188][T19716] loop1: detected capacity change from 0 to 128 [ 298.586901][T19724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.603367][T19566] veth0_macvtap: entered promiscuous mode [ 298.610478][T19724] ext4 filesystem being mounted at /1272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 298.620448][T19716] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 298.621307][T19566] veth1_macvtap: entered promiscuous mode [ 298.644461][T19566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.654447][T19566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.663205][T19566] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.672561][T19566] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.681312][T19566] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.690028][T19566] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.700787][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.716577][T19716] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 298.735026][T19730] loop4: detected capacity change from 0 to 128 [ 298.751960][T19730] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 298.765455][T19730] ext4 filesystem being mounted at /1273/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 298.820462][ T3327] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.865127][ T6812] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 298.893986][T19740] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6088'. [ 298.931089][T19744] binfmt_misc: register: failed to install interpreter file ./file0 [ 298.950588][T19739] loop1: detected capacity change from 0 to 128 [ 299.002179][T19739] bio_check_eod: 9180 callbacks suppressed [ 299.002197][T19739] syz.1.6087: attempt to access beyond end of device [ 299.002197][T19739] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 299.033359][T19752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6094'. [ 299.043714][T19754] 9pnet_fd: Insufficient options for proto=fd [ 299.052079][T19752] IPVS: Error connecting to the multicast addr [ 299.061606][T19739] syz.1.6087: attempt to access beyond end of device [ 299.061606][T19739] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 299.134582][T19760] syz.1.6087: attempt to access beyond end of device [ 299.134582][T19760] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 299.185547][T19739] syz.1.6087: attempt to access beyond end of device [ 299.185547][T19739] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 299.223614][T19760] syz.1.6087: attempt to access beyond end of device [ 299.223614][T19760] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 299.279010][T19739] syz.1.6087: attempt to access beyond end of device [ 299.279010][T19739] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 299.315794][T19760] syz.1.6087: attempt to access beyond end of device [ 299.315794][T19760] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 299.368018][T19739] syz.1.6087: attempt to access beyond end of device [ 299.368018][T19739] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 299.408137][T19760] syz.1.6087: attempt to access beyond end of device [ 299.408137][T19760] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 299.455964][T19739] syz.1.6087: attempt to access beyond end of device [ 299.455964][T19739] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 299.868922][T19788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6107'. [ 299.877912][T19788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6107'. [ 299.931839][T19788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6107'. [ 300.011271][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 300.011285][ T29] audit: type=1326 audit(1746853733.217:81614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19807 comm="syz.4.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad332be969 code=0x7ffc0000 [ 300.062602][ T29] audit: type=1326 audit(1746853733.217:81615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19807 comm="syz.4.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad332be969 code=0x7ffc0000 [ 300.086252][ T29] audit: type=1326 audit(1746853733.217:81616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19807 comm="syz.4.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad332be969 code=0x7ffc0000 [ 300.109831][ T29] audit: type=1326 audit(1746853733.217:81617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19807 comm="syz.4.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad332be969 code=0x7ffc0000 [ 300.109980][T19812] tipc: Started in network mode [ 300.133540][ T29] audit: type=1326 audit(1746853733.217:81618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19807 comm="syz.4.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad332be969 code=0x7ffc0000 [ 300.133635][ T29] audit: type=1326 audit(1746853733.217:81619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19807 comm="syz.4.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad332be969 code=0x7ffc0000 [ 300.133674][ T29] audit: type=1326 audit(1746853733.217:81620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19807 comm="syz.4.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad332be969 code=0x7ffc0000 [ 300.133702][ T29] audit: type=1326 audit(1746853733.227:81621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19807 comm="syz.4.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fad332be969 code=0x7ffc0000 [ 300.133730][ T29] audit: type=1326 audit(1746853733.227:81622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19807 comm="syz.4.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad332be969 code=0x7ffc0000 [ 300.133913][ T29] audit: type=1326 audit(1746853733.227:81623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19807 comm="syz.4.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad332be969 code=0x7ffc0000 [ 300.282140][T19812] tipc: Node identity ac1414aa, cluster identity 4711 [ 300.306609][T19812] tipc: Enabled bearer , priority 7 [ 300.372801][T19815] loop4: detected capacity change from 0 to 128 [ 300.391999][T19817] loop1: detected capacity change from 0 to 512 [ 300.406182][T19817] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.6120: corrupted in-inode xattr: invalid ea_ino [ 300.424749][T19817] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.6120: couldn't read orphan inode 15 (err -117) [ 300.438703][T19817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.645767][T19838] netlink: '+|[@': attribute type 5 has an invalid length. [ 300.714272][T19838] loop6: detected capacity change from 0 to 128 [ 300.742990][T19838] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 300.781786][T19838] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 300.952457][ T1449] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 300.981952][T19859] loop6: detected capacity change from 0 to 1024 [ 301.030098][T19859] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.069536][T19859] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6138: bg 0: block 88: padding at end of block bitmap is not set [ 301.127349][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.181846][T19879] loop6: detected capacity change from 0 to 256 [ 301.231866][T19882] loop4: detected capacity change from 0 to 512 [ 301.240518][T19882] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 301.285858][T19882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.301857][T19882] ext4 filesystem being mounted at /1289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.309502][ T10] tipc: Node number set to 2886997162 [ 301.326505][T19882] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6146: corrupted xattr block 32: bad e_name length [ 301.356047][T19882] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 301.376064][T19882] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6146: corrupted xattr block 32: bad e_name length [ 301.400668][T19882] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 301.413170][T19882] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6146: corrupted xattr block 32: bad e_name length [ 301.440394][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.560935][T19910] loop6: detected capacity change from 0 to 256 [ 301.579832][T19909] loop4: detected capacity change from 0 to 2048 [ 301.612170][T19909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.722191][ T6812] smc: removing ib device syz1 [ 301.737463][T19933] loop6: detected capacity change from 0 to 1024 [ 301.775698][T19933] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.801254][T19933] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6169: bg 0: block 88: padding at end of block bitmap is not set [ 301.852770][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.877301][T19943] netlink: 'syz.6.6173': attribute type 21 has an invalid length. [ 301.949951][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.134812][T19974] loop6: detected capacity change from 0 to 1024 [ 302.180739][T19974] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 302.189097][T19974] System zones: 0-1, 3-12 [ 302.198985][T19974] EXT4-fs (loop6): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.237745][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 302.273173][ T6812] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 302.282437][ T6812] batadv0: left promiscuous mode [ 302.287938][ T6812] bond0 (unregistering): Released all slaves [ 302.301434][T19988] loop6: detected capacity change from 0 to 512 [ 302.317230][ T6812] tipc: Left network mode [ 302.328851][T19988] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 302.338805][T19988] EXT4-fs (loop6): inodes count not valid: 0 vs 32 [ 302.427632][T19999] loop6: detected capacity change from 0 to 512 [ 302.443953][ T6812] hsr_slave_0: left promiscuous mode [ 302.487684][T19999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.520156][T19999] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.545125][T19965] dummy0 speed is unknown, defaulting to 1000 [ 302.572382][T19999] EXT4-fs (loop6): shut down requested (0) [ 302.579689][T20011] __nla_validate_parse: 7 callbacks suppressed [ 302.579699][T20011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6200'. [ 302.634785][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.732434][T20024] Cannot find add_set index 0 as target [ 302.748332][ T6812] IPVS: stop unused estimator thread 0... [ 302.783430][T19965] chnl_net:caif_netlink_parms(): no params data found [ 302.881725][T20039] loop6: detected capacity change from 0 to 512 [ 302.889506][T19965] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.896582][T19965] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.084630][T20039] EXT4-fs (loop6): 1 orphan inode deleted [ 303.092536][T20039] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.110865][T20039] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.248031][T19965] bridge_slave_0: entered allmulticast mode [ 303.255026][T19965] bridge_slave_0: entered promiscuous mode [ 303.262004][T19965] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.269095][T19965] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.276238][T19965] bridge_slave_1: entered allmulticast mode [ 303.283205][T19965] bridge_slave_1: entered promiscuous mode [ 303.298828][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.325321][T19965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.336566][T20048] netlink: '+|[@': attribute type 5 has an invalid length. [ 303.347363][T19965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.353173][T20048] loop6: detected capacity change from 0 to 128 [ 303.367360][T20048] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 303.380234][T20048] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 303.396385][T20050] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6213'. [ 303.417292][T19965] team0: Port device team_slave_0 added [ 303.424341][ T6810] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 303.429354][T19965] team0: Port device team_slave_1 added [ 303.464047][T19965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.471744][T19965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.497643][T19965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.510580][T19965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.517614][T19965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.544104][T19965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.580322][T19965] hsr_slave_0: entered promiscuous mode [ 303.591872][T19965] hsr_slave_1: entered promiscuous mode [ 303.599808][T19965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.610105][T19965] Cannot create hsr debugfs directory [ 303.690159][T20070] 9pnet_fd: Insufficient options for proto=fd [ 303.701082][T20072] loop6: detected capacity change from 0 to 512 [ 303.708869][T20072] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 303.741852][T20072] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.6221: invalid block [ 303.765377][T20072] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.6221: invalid indirect mapped block 4294967295 (level 1) [ 303.791124][T20072] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.6221: invalid indirect mapped block 4294967295 (level 1) [ 303.809221][T19965] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 303.818558][T19965] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 303.827367][T20072] EXT4-fs (loop6): 2 truncates cleaned up [ 303.829967][T19965] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 303.840423][T20072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.856298][T19965] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 303.881182][T20072] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.6.6221: path /37/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 303.921472][T19965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.938576][T20072] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.6.6221: path /37/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 303.941031][T19965] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.982414][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.995961][ T4233] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.003083][ T4233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.031874][ T1449] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.039059][ T1449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.064758][T20089] tipc: Started in network mode [ 304.069688][T20089] tipc: Node identity ac1414aa, cluster identity 4711 [ 304.077771][T20089] tipc: Enabled bearer , priority 7 [ 304.164674][T19965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.200681][T20104] loop6: detected capacity change from 0 to 512 [ 304.230313][T20104] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.256145][T20104] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 304.281537][T20104] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 304.329342][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.344391][T19965] veth0_vlan: entered promiscuous mode [ 304.371824][T19965] veth1_vlan: entered promiscuous mode [ 304.399063][T19965] veth0_macvtap: entered promiscuous mode [ 304.407028][T20120] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6234'. [ 304.415960][T19965] veth1_macvtap: entered promiscuous mode [ 304.437904][T19965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.449138][T19965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.468917][T19965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.483816][T19965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.494322][T19965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.505398][T19965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.516549][T20130] program syz.2.6238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.526501][T19965] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.535349][T19965] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.544711][T19965] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.550061][T20132] loop6: detected capacity change from 0 to 1024 [ 304.553418][T19965] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.574636][T20132] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.627235][T20132] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.6239: Allocating blocks 385-513 which overlap fs metadata [ 304.656440][T20131] EXT4-fs (loop6): pa ffff8881072191c0: logic 16, phys. 129, len 24 [ 304.664660][T20131] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 304.696420][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.779374][T20163] netlink: '+|[@': attribute type 5 has an invalid length. [ 304.839124][T20163] loop7: detected capacity change from 0 to 128 [ 304.860449][T20165] dummy0 speed is unknown, defaulting to 1000 [ 304.869910][T20163] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 304.998060][T20163] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 305.243178][ T3391] tipc: Node number set to 2886997162 [ 305.436707][T20195] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6264'. [ 305.555798][T20195] 0XD: renamed from gretap0 [ 305.577625][T20195] 0XD: entered allmulticast mode [ 305.584178][T20195] net_ratelimit: 289 callbacks suppressed [ 305.584193][T20195] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 305.610386][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 305.610479][ T29] audit: type=1326 audit(1746853738.817:81956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20200 comm="syz.2.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 305.646517][ T4233] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 305.674052][ T29] audit: type=1326 audit(1746853738.847:81957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20200 comm="syz.2.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 305.697635][ T29] audit: type=1326 audit(1746853738.847:81958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20200 comm="syz.2.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 305.721887][ T29] audit: type=1326 audit(1746853738.847:81959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20200 comm="syz.2.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 305.745448][ T29] audit: type=1326 audit(1746853738.847:81960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20200 comm="syz.2.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 305.769675][ T29] audit: type=1326 audit(1746853738.847:81961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20200 comm="syz.2.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 305.793269][ T29] audit: type=1326 audit(1746853738.847:81962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20200 comm="syz.2.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 305.817401][ T29] audit: type=1326 audit(1746853738.847:81963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20200 comm="syz.2.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 305.841501][ T29] audit: type=1326 audit(1746853738.867:81964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20200 comm="syz.2.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 305.865100][ T29] audit: type=1326 audit(1746853738.867:81965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20200 comm="syz.2.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 305.990463][T20229] netlink: '+|[@': attribute type 5 has an invalid length. [ 306.141827][T20241] loop6: detected capacity change from 0 to 1024 [ 306.158666][T20241] EXT4-fs: Ignoring removed nobh option [ 306.164237][T20241] EXT4-fs: Ignoring removed bh option [ 306.191078][T20241] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.248905][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.369094][T20267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6295'. [ 306.475038][T20283] loop6: detected capacity change from 0 to 1024 [ 306.484309][T20283] EXT4-fs: Ignoring removed orlov option [ 306.490081][T20283] EXT4-fs: Ignoring removed nomblk_io_submit option [ 306.510450][T20283] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.563714][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.620845][T20295] loop6: detected capacity change from 0 to 128 [ 306.631593][ T3391] Process accounting resumed [ 306.662498][T20295] bio_check_eod: 20916 callbacks suppressed [ 306.662509][T20295] syz.6.6308: attempt to access beyond end of device [ 306.662509][T20295] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 306.690341][T20295] syz.6.6308: attempt to access beyond end of device [ 306.690341][T20295] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 306.708885][T20295] syz.6.6308: attempt to access beyond end of device [ 306.708885][T20295] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 306.723075][T20295] syz.6.6308: attempt to access beyond end of device [ 306.723075][T20295] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 306.736302][T20295] syz.6.6308: attempt to access beyond end of device [ 306.736302][T20295] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 306.750924][T20295] syz.6.6308: attempt to access beyond end of device [ 306.750924][T20295] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 306.766156][T20305] syz.6.6308: attempt to access beyond end of device [ 306.766156][T20305] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 306.781477][T20295] syz.6.6308: attempt to access beyond end of device [ 306.781477][T20295] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 306.794901][T20305] syz.6.6308: attempt to access beyond end of device [ 306.794901][T20305] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 306.809276][T20295] syz.6.6308: attempt to access beyond end of device [ 306.809276][T20295] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 307.046555][T20319] sctp: [Deprecated]: syz.3.6318 (pid 20319) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.046555][T20319] Use struct sctp_sack_info instead [ 307.665358][T20352] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6333'. [ 307.751196][T20357] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6333'. [ 307.783298][T20360] netlink: 'syz.2.6334': attribute type 5 has an invalid length. [ 308.270195][T20377] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 308.270195][T20377] program syz.2.6340 not setting count and/or reply_len properly [ 308.573282][T20388] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 308.751592][T20397] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6347'. [ 308.851284][T20405] xt_hashlimit: max too large, truncated to 1048576 [ 308.906324][T20415] loop6: detected capacity change from 0 to 512 [ 308.923405][T20415] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 308.946548][T20415] block device autoloading is deprecated and will be removed. [ 308.967099][T20415] EXT4-fs (loop6): couldn't read superblock of external journal [ 309.021744][T20426] macvlan3: entered promiscuous mode [ 309.027111][T20426] bridge0: entered promiscuous mode [ 309.036333][T20426] bridge0: port 1(macvlan3) entered blocking state [ 309.042913][T20426] bridge0: port 1(macvlan3) entered disabled state [ 309.060112][T20426] macvlan3: entered allmulticast mode [ 309.065516][T20426] bridge0: entered allmulticast mode [ 309.072588][T20426] macvlan3: left allmulticast mode [ 309.077732][T20426] bridge0: left allmulticast mode [ 309.096563][T20426] bridge0: left promiscuous mode [ 309.159333][T20437] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6367'. [ 309.179021][T20437] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6367'. [ 309.414036][T20453] netlink: '+|[@': attribute type 5 has an invalid length. [ 309.509756][T20463] loop6: detected capacity change from 0 to 1024 [ 309.516565][T20463] EXT4-fs: Ignoring removed nobh option [ 309.522214][T20463] EXT4-fs: Ignoring removed bh option [ 309.562987][T20463] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.586653][T20463] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.6378: Allocating blocks 385-513 which overlap fs metadata [ 309.607148][T20463] EXT4-fs (loop6): pa ffff8881072191c0: logic 16, phys. 129, len 24 [ 309.615532][T20463] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 309.660327][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.699561][T20481] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6386'. [ 309.767378][T20489] netlink: '+|[@': attribute type 5 has an invalid length. [ 309.781583][T20489] loop7: detected capacity change from 0 to 128 [ 309.807739][T20489] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 309.829342][T20489] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 309.886445][ T4233] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 310.547000][T20544] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 310.660404][T20541] dummy0 speed is unknown, defaulting to 1000 [ 310.821581][T20562] xt_hashlimit: max too large, truncated to 1048576 [ 310.851615][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 310.851628][ T29] audit: type=1326 audit(1746853744.047:82224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20563 comm="syz.2.6426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 310.881459][ T29] audit: type=1326 audit(1746853744.047:82225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20563 comm="syz.2.6426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 310.905105][ T29] audit: type=1326 audit(1746853744.047:82226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20563 comm="syz.2.6426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 310.928830][ T29] audit: type=1326 audit(1746853744.047:82227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20563 comm="syz.2.6426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 310.969196][ T29] audit: type=1326 audit(1746853744.177:82228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20563 comm="syz.2.6426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 310.992913][ T29] audit: type=1326 audit(1746853744.177:82229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20563 comm="syz.2.6426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 311.044359][T20566] netlink: 'syz.3.6427': attribute type 5 has an invalid length. [ 311.062378][ T29] audit: type=1326 audit(1746853744.227:82230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20563 comm="syz.2.6426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 311.086014][ T29] audit: type=1326 audit(1746853744.227:82231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20563 comm="syz.2.6426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 311.109653][ T29] audit: type=1326 audit(1746853744.227:82232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20563 comm="syz.2.6426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 311.133332][ T29] audit: type=1326 audit(1746853744.227:82233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20563 comm="syz.2.6426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 311.419144][T20587] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6429'. [ 311.834847][T20604] netlink: '+|[@': attribute type 5 has an invalid length. [ 312.289532][T20639] netlink: '+|[@': attribute type 5 has an invalid length. [ 312.611972][T20649] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6457'. [ 313.310154][T20665] loop7: detected capacity change from 0 to 1024 [ 313.316941][T20665] EXT4-fs: Ignoring removed bh option [ 313.322424][T20665] EXT4-fs: Ignoring removed bh option [ 313.361024][T20665] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.401946][T19965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.426979][T20670] netlink: 'syz.7.6464': attribute type 10 has an invalid length. [ 313.440196][T20670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.453685][T20670] team0: Port device bond0 added [ 313.510034][T20672] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=20672 comm=syz.7.6465 [ 313.586488][T20675] loop7: detected capacity change from 0 to 128 [ 313.615994][T20675] bio_check_eod: 19055 callbacks suppressed [ 313.616009][T20675] syz.7.6466: attempt to access beyond end of device [ 313.616009][T20675] loop7: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 313.642425][T20675] syz.7.6466: attempt to access beyond end of device [ 313.642425][T20675] loop7: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 313.659608][T20675] syz.7.6466: attempt to access beyond end of device [ 313.659608][T20675] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 313.672901][T20675] syz.7.6466: attempt to access beyond end of device [ 313.672901][T20675] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 313.686897][T20675] syz.7.6466: attempt to access beyond end of device [ 313.686897][T20675] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 313.709155][T20675] syz.7.6466: attempt to access beyond end of device [ 313.709155][T20675] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 313.723610][T20676] syz.7.6466: attempt to access beyond end of device [ 313.723610][T20676] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 313.737161][T20675] syz.7.6466: attempt to access beyond end of device [ 313.737161][T20675] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 313.751771][T20676] syz.7.6466: attempt to access beyond end of device [ 313.751771][T20676] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 313.765730][T20675] syz.7.6466: attempt to access beyond end of device [ 313.765730][T20675] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 314.079567][T20687] SELinux: failed to load policy [ 314.440588][T20706] netlink: '+|[@': attribute type 5 has an invalid length. [ 314.466635][T20708] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6481'. [ 314.477712][T20716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6484'. [ 314.486740][T20716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6484'. [ 314.495756][T20716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6484'. [ 314.519842][T20719] xt_hashlimit: size too large, truncated to 1048576 [ 314.560835][T20716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6484'. [ 314.569858][T20716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6484'. [ 314.578875][T20716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6484'. [ 314.654658][T20716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6484'. [ 314.663910][T20716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6484'. [ 314.672894][T20716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6484'. [ 314.755330][T20746] netlink: '+|[@': attribute type 5 has an invalid length. [ 314.776957][T20746] loop6: detected capacity change from 0 to 128 [ 314.789217][T20746] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 314.802191][T20746] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 314.875087][T20752] loop7: detected capacity change from 0 to 8192 [ 314.925705][T20761] No such timeout policy "syz1" [ 314.939419][T20752] loop7: p4 < > [ 314.983805][ T1449] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 315.023375][T20760] dummy0 speed is unknown, defaulting to 1000 [ 315.151595][T20791] loop7: detected capacity change from 0 to 256 [ 315.286644][T20807] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 315.832187][ T2969] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 315.839633][ T2969] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 315.847050][ T2969] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 315.866153][ T2969] hid-generic 0000:0004:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 315.985702][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 315.985717][ T29] audit: type=1326 audit(1746853749.187:82570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20864 comm="syz.1.6548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb403f9e969 code=0x7ffc0000 [ 316.029496][ T29] audit: type=1326 audit(1746853749.227:82571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20860 comm="syz.2.6544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 316.053226][ T29] audit: type=1326 audit(1746853749.227:82572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20860 comm="syz.2.6544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 316.076816][ T29] audit: type=1326 audit(1746853749.227:82573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20860 comm="syz.2.6544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 316.100538][ T29] audit: type=1326 audit(1746853749.227:82574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20864 comm="syz.1.6548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb403f9e969 code=0x7ffc0000 [ 316.124243][ T29] audit: type=1326 audit(1746853749.227:82575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20864 comm="syz.1.6548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb403f9e969 code=0x7ffc0000 [ 316.147877][ T29] audit: type=1326 audit(1746853749.227:82576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20864 comm="syz.1.6548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb403f9e969 code=0x7ffc0000 [ 316.171548][ T29] audit: type=1326 audit(1746853749.227:82577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20864 comm="syz.1.6548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb403f9e969 code=0x7ffc0000 [ 316.195139][ T29] audit: type=1326 audit(1746853749.227:82578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20864 comm="syz.1.6548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb403f9e969 code=0x7ffc0000 [ 316.218828][ T29] audit: type=1326 audit(1746853749.227:82579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20864 comm="syz.1.6548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb403f9e969 code=0x7ffc0000 [ 316.256738][T20879] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.355816][T20887] netlink: '+|[@': attribute type 5 has an invalid length. [ 316.916638][T20915] SELinux: Context system_u:object_r:iptables_initrc_exec_t:s0 is not valid (left unmapped). [ 317.749127][T20934] futex_wake_op: syz.6.6576 tries to shift op by -1; fix this program [ 317.885086][ T9110] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 317.892804][ T9110] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 317.916547][ T9110] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 317.924261][ T9110] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 317.932546][ T9110] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 317.940199][ T9110] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 317.947856][ T9110] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 317.955542][ T9110] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 317.963810][ T9110] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 317.971566][ T9110] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 317.979275][ T9110] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 317.987002][ T9110] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 317.995380][ T9110] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 318.003094][ T9110] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 318.010772][ T9110] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 318.019142][ T9110] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 318.045087][ T9110] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 318.086193][T20951] loop7: detected capacity change from 0 to 1764 [ 318.403928][ T2969] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 318.411677][ T2969] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 318.421559][ T2969] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 318.429505][ T2969] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 318.437222][ T2969] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 318.444951][ T2969] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 318.452710][ T2969] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 318.460462][ T2969] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 318.468190][ T2969] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 318.475900][ T2969] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 318.483606][ T2969] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 318.491275][ T2969] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 318.499037][ T2969] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 318.506695][ T2969] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 318.514348][ T2969] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 318.522028][ T2969] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 318.537206][ T2969] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 318.651644][T20995] loop7: detected capacity change from 0 to 2048 [ 318.690667][T20999] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 319.781351][T21048] vhci_hcd: invalid port number 96 [ 319.786614][T21048] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 319.985593][T21061] __nla_validate_parse: 2 callbacks suppressed [ 319.985611][T21061] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6631'. [ 320.860341][T21127] blktrace: Concurrent blktraces are not allowed on sg0 [ 320.905308][T21131] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6661'. [ 320.988586][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 320.988603][ T29] audit: type=1326 audit(1746853754.197:82852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21138 comm="syz.7.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c474fe969 code=0x7ffc0000 [ 321.018560][ T29] audit: type=1326 audit(1746853754.197:82853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21138 comm="syz.7.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c474fe969 code=0x7ffc0000 [ 321.098019][ T29] audit: type=1326 audit(1746853754.257:82854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21138 comm="syz.7.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f8c474fe969 code=0x7ffc0000 [ 321.121774][ T29] audit: type=1326 audit(1746853754.257:82855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21138 comm="syz.7.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c474fe969 code=0x7ffc0000 [ 321.145381][ T29] audit: type=1326 audit(1746853754.257:82856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21138 comm="syz.7.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c474fe969 code=0x7ffc0000 [ 321.198705][T21144] netlink: 'syz.7.6667': attribute type 5 has an invalid length. [ 321.229167][T21144] loop7: detected capacity change from 0 to 128 [ 321.243313][T21144] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 321.275607][T21144] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 321.288074][ T29] audit: type=1326 audit(1746853754.487:82857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21151 comm="syz.3.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19626e969 code=0x7ffc0000 [ 321.311712][ T29] audit: type=1326 audit(1746853754.487:82858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21151 comm="syz.3.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19626e969 code=0x7ffc0000 [ 321.396659][ T29] audit: type=1326 audit(1746853754.547:82859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21151 comm="syz.3.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe19626e969 code=0x7ffc0000 [ 321.420191][ T29] audit: type=1326 audit(1746853754.547:82860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21151 comm="syz.3.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19626e969 code=0x7ffc0000 [ 321.443912][ T29] audit: type=1326 audit(1746853754.547:82861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21151 comm="syz.3.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19626e969 code=0x7ffc0000 [ 321.509660][ T4229] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 321.579071][T21159] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 321.759037][T21176] loop7: detected capacity change from 0 to 512 [ 321.781760][T21176] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.813053][T21176] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.847022][T21176] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 321.937053][T19965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.020023][T21190] netlink: '+|[@': attribute type 5 has an invalid length. [ 322.030929][T21190] loop6: detected capacity change from 0 to 128 [ 322.038933][T21186] SELinux: failed to load policy [ 322.044320][T21192] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 322.048991][T21190] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 322.050825][T21192] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 322.070510][T21192] vhci_hcd vhci_hcd.0: Device attached [ 322.080637][T21195] vhci_hcd: connection closed [ 322.080948][ T4229] vhci_hcd: stop threads [ 322.090100][ T4229] vhci_hcd: release socket [ 322.094510][ T4229] vhci_hcd: disconnect device [ 322.100273][T21190] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 322.171439][ T1449] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 322.197780][T21202] loop6: detected capacity change from 0 to 164 [ 322.205701][T21202] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 322.215008][T21206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=21206 comm=syz.1.6690 [ 322.235073][T21202] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 322.243418][T21202] Symlink component flag not implemented [ 322.249165][T21202] Symlink component flag not implemented [ 322.255629][T21202] Symlink component flag not implemented (7) [ 322.261663][T21202] Symlink component flag not implemented (116) [ 322.384861][T21226] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 322.449049][T21232] netlink: '+|[@': attribute type 5 has an invalid length. [ 322.703817][T21248] loop7: detected capacity change from 0 to 128 [ 322.729294][T21248] bio_check_eod: 17515 callbacks suppressed [ 322.729309][T21248] syz.7.6706: attempt to access beyond end of device [ 322.729309][T21248] loop7: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 322.756095][T21248] syz.7.6706: attempt to access beyond end of device [ 322.756095][T21248] loop7: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 322.775575][T21248] syz.7.6706: attempt to access beyond end of device [ 322.775575][T21248] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 322.790385][T21248] syz.7.6706: attempt to access beyond end of device [ 322.790385][T21248] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 322.804032][T21248] syz.7.6706: attempt to access beyond end of device [ 322.804032][T21248] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 322.820297][T21248] syz.7.6706: attempt to access beyond end of device [ 322.820297][T21248] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 322.835280][T21248] syz.7.6706: attempt to access beyond end of device [ 322.835280][T21248] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 322.843748][T21255] binfmt_misc: register: failed to install interpreter file ./bus [ 322.850220][T21248] syz.7.6706: attempt to access beyond end of device [ 322.850220][T21248] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 322.869661][T21257] syz.7.6706: attempt to access beyond end of device [ 322.869661][T21257] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 322.882864][T21248] syz.7.6706: attempt to access beyond end of device [ 322.882864][T21248] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 322.966838][T21266] tipc: New replicast peer: 255.255.255.255 [ 322.972971][T21266] tipc: Enabled bearer , priority 7 [ 323.132197][T21281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6722'. [ 323.141205][T21281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6722'. [ 323.150169][T21281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6722'. [ 323.160814][T21281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6722'. [ 323.169815][T21281] netlink: 'syz.3.6722': attribute type 6 has an invalid length. [ 323.182513][T21283] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.6721'. [ 323.545948][T21309] block device autoloading is deprecated and will be removed. [ 323.662663][T21322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.675028][T21322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.869779][T21335] loop6: detected capacity change from 0 to 1024 [ 323.876577][T21335] EXT4-fs: Ignoring removed orlov option [ 323.882306][T21335] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.904244][T21335] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.931936][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.986333][T21342] loop6: detected capacity change from 0 to 1024 [ 323.998464][T21342] EXT4-fs: Ignoring removed oldalloc option [ 324.006993][T21342] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 324.038242][T21342] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.081704][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.098545][ T9108] tipc: Node number set to 1079724002 [ 324.270685][T21365] loop6: detected capacity change from 0 to 512 [ 324.311358][T21365] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.328794][T21365] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.342012][T21365] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.017233][T21413] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 325.379029][T21433] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6785'. [ 325.421845][T21435] loop7: detected capacity change from 0 to 128 [ 325.486871][T21435] buffer_io_error: 6 callbacks suppressed [ 325.486891][T21435] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 325.838325][T21450] Falling back ldisc for ttyS3. [ 326.061708][T21463] random: crng reseeded on system resumption [ 326.068321][ T29] kauditd_printk_skb: 382 callbacks suppressed [ 326.068337][ T29] audit: type=1400 audit(1746853759.267:83244): avc: denied { append } for pid=21462 comm="syz.2.6798" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 326.097914][ T29] audit: type=1400 audit(1746853759.267:83245): avc: denied { open } for pid=21462 comm="syz.2.6798" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 326.228298][ T29] audit: type=1400 audit(1746853759.327:83246): avc: denied { firmware_load } for pid=4233 comm="kworker/u8:9" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 326.254011][ T29] audit: type=1400 audit(1746853759.427:83247): avc: denied { append } for pid=21467 comm="syz.1.6800" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 326.328182][T21474] netlink: 'syz.6.6801': attribute type 4 has an invalid length. [ 326.341098][T21474] netlink: 'syz.6.6801': attribute type 4 has an invalid length. [ 326.355385][ T29] audit: type=1400 audit(1746853759.557:83248): avc: denied { ioctl } for pid=21475 comm="syz.3.6803" path="socket:[60370]" dev="sockfs" ino=60370 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 326.397758][ T29] audit: type=1400 audit(1746853759.597:83249): avc: denied { sys_module } for pid=21475 comm="syz.3.6803" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 326.425184][T21484] C: renamed from team_slave_0 [ 326.444558][T21484] netlink: 'wg1': attribute type 1 has an invalid length. [ 326.451891][T21484] netlink: 152 bytes leftover after parsing attributes in process `wg1'. [ 326.460361][T21484] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 326.501759][ T29] audit: type=1326 audit(1746853759.707:83250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21497 comm="syz.2.6811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 326.526040][ T29] audit: type=1326 audit(1746853759.737:83251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21497 comm="syz.2.6811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 326.549792][ T29] audit: type=1326 audit(1746853759.737:83252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21497 comm="syz.2.6811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 326.573401][ T29] audit: type=1326 audit(1746853759.737:83253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21497 comm="syz.2.6811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 326.674476][T21510] SELinux: failed to load policy [ 326.715764][T21514] serio: Serial port ptm0 [ 327.126966][T21547] loop6: detected capacity change from 0 to 128 [ 327.137323][T21547] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 327.150598][T21547] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 327.640925][T21555] can0: slcan on ttyS3. [ 327.664744][T21559] loop6: detected capacity change from 0 to 512 [ 327.673689][T21559] EXT4-fs: Ignoring removed nobh option [ 327.685847][T21559] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 327.698996][T21554] can0 (unregistered): slcan off ttyS3. [ 327.707324][T21559] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.6836: invalid indirect mapped block 2683928664 (level 1) [ 327.740482][T21559] EXT4-fs (loop6): 1 truncate cleaned up [ 327.750816][T21559] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.847245][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.082924][T21587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6847'. [ 328.161914][T21591] blktrace: Concurrent blktraces are not allowed on sg0 [ 328.509141][T21601] loop6: detected capacity change from 0 to 512 [ 328.542297][T21601] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.581143][T21601] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 328.621365][T21601] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6853: bg 0: block 217: padding at end of block bitmap is not set [ 328.682750][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.967464][T21617] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 329.014038][T21619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6861'. [ 329.030874][T21619] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.039218][T21619] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.047402][T21619] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.055738][T21619] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.075995][T21619] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.084449][T21619] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.092813][T21619] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.101253][T21619] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.281584][T21628] SELinux: failed to load policy [ 329.467767][T21651] IPVS: Error connecting to the multicast addr [ 329.561422][T21659] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 329.561422][T21659] program syz.2.6878 not setting count and/or reply_len properly [ 329.661510][T21669] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6882'. [ 329.722763][T21675] loop7: detected capacity change from 0 to 128 [ 329.761381][T21675] bio_check_eod: 18592 callbacks suppressed [ 329.761399][T21675] syz.7.6884: attempt to access beyond end of device [ 329.761399][T21675] loop7: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 329.828978][T21675] syz.7.6884: attempt to access beyond end of device [ 329.828978][T21675] loop7: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 329.863458][T21675] syz.7.6884: attempt to access beyond end of device [ 329.863458][T21675] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 329.893949][T21675] syz.7.6884: attempt to access beyond end of device [ 329.893949][T21675] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 329.917577][T21685] syz.7.6884: attempt to access beyond end of device [ 329.917577][T21685] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 329.930805][T21675] syz.7.6884: attempt to access beyond end of device [ 329.930805][T21675] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 329.944770][T21685] syz.7.6884: attempt to access beyond end of device [ 329.944770][T21685] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 329.958380][T21685] syz.7.6884: attempt to access beyond end of device [ 329.958380][T21685] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 329.971616][T21675] syz.7.6884: attempt to access beyond end of device [ 329.971616][T21675] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 329.985416][T21685] syz.7.6884: attempt to access beyond end of device [ 329.985416][T21685] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 330.047640][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 330.063090][ T10] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 330.552980][T21696] dummy0 speed is unknown, defaulting to 1000 [ 330.612166][T21703] Invalid ELF header magic: != ELF [ 330.700787][T21707] smc: net device bond0 applied user defined pnetid SYZ0 [ 330.728902][T21707] smc: net device bond0 erased user defined pnetid SYZ0 [ 330.814132][T21720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6904'. [ 330.823187][T21720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6904'. [ 330.832181][T21720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6904'. [ 330.834148][T21709] dummy0 speed is unknown, defaulting to 1000 [ 330.873606][T21723] SELinux: failed to load policy [ 330.917908][T21726] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 330.927082][T21726] SELinux: failed to load policy [ 330.955616][T21729] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 331.003405][T21720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6904'. [ 331.012606][T21720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6904'. [ 331.021573][T21720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6904'. [ 331.101839][T21735] loop6: detected capacity change from 0 to 128 [ 331.147088][T21737] loop7: detected capacity change from 0 to 2048 [ 331.155335][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 331.155346][ T29] audit: type=1326 audit(1746853764.357:83383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21738 comm="syz.6.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a75d2e969 code=0x7ffc0000 [ 331.185681][ T29] audit: type=1326 audit(1746853764.357:83384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21738 comm="syz.6.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a75d2e969 code=0x7ffc0000 [ 331.253247][T21737] loop7: p1 < > p4 [ 331.255911][ T29] audit: type=1326 audit(1746853764.357:83385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21738 comm="syz.6.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a75d2e969 code=0x7ffc0000 [ 331.281424][ T29] audit: type=1326 audit(1746853764.357:83386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21738 comm="syz.6.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a75d2e969 code=0x7ffc0000 [ 331.288351][T21720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6904'. [ 331.305082][ T29] audit: type=1326 audit(1746853764.357:83387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21738 comm="syz.6.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a75d2e969 code=0x7ffc0000 [ 331.313960][T21720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6904'. [ 331.314023][T21720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6904'. [ 331.315441][T21737] loop7: p4 size 8388608 extends beyond EOD, [ 331.338028][ T29] audit: type=1326 audit(1746853764.357:83388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21738 comm="syz.6.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a75d2e969 code=0x7ffc0000 [ 331.338069][ T29] audit: type=1326 audit(1746853764.367:83389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21738 comm="syz.6.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a75d2e969 code=0x7ffc0000 [ 331.347050][T21737] truncated [ 331.414159][ T29] audit: type=1326 audit(1746853764.367:83390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21738 comm="syz.6.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a75d2e969 code=0x7ffc0000 [ 331.437821][ T29] audit: type=1326 audit(1746853764.367:83391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21738 comm="syz.6.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a75d2e969 code=0x7ffc0000 [ 331.461983][ T29] audit: type=1326 audit(1746853764.367:83392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21738 comm="syz.6.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a75d2e969 code=0x7ffc0000 [ 331.540451][T21750] loop7: detected capacity change from 0 to 512 [ 331.574354][T21750] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 331.622999][T21750] EXT4-fs (loop7): 1 truncate cleaned up [ 331.629258][T21750] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.653430][T21750] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 331.669496][T21750] EXT4-fs (loop7): Remounting filesystem read-only [ 331.702954][T21754] vhci_hcd: invalid port number 96 [ 331.708097][T21754] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 331.726719][T19965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.763534][T21767] loop7: detected capacity change from 0 to 128 [ 331.805100][T21774] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6927'. [ 331.809780][T21773] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 331.809780][T21773] program syz.7.6926 not setting count and/or reply_len properly [ 331.862918][T21779] netlink: '+|[@': attribute type 5 has an invalid length. [ 331.874821][T21779] loop6: detected capacity change from 0 to 128 [ 331.884142][T21779] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 331.906419][T21779] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 331.953095][ T1449] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 332.295739][T21811] netlink: '+|[@': attribute type 5 has an invalid length. [ 332.322776][T21815] bond1: entered promiscuous mode [ 332.327839][T21815] bond1: entered allmulticast mode [ 332.333894][T21815] 8021q: adding VLAN 0 to HW filter on device bond1 [ 332.344208][T21815] bond1 (unregistering): Released all slaves [ 332.402381][T21822] netlink: '+|[@': attribute type 5 has an invalid length. [ 332.472145][T21824] dummy0 speed is unknown, defaulting to 1000 [ 332.655382][T21845] netlink: '+|[@': attribute type 5 has an invalid length. [ 332.779540][T21851] netem: change failed [ 332.846958][T21867] 9pnet_fd: Insufficient options for proto=fd [ 333.597391][T21934] dummy0 speed is unknown, defaulting to 1000 [ 333.747168][T21940] loop6: detected capacity change from 0 to 1024 [ 333.760042][T21940] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.772152][T21940] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.785948][T21940] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 333.802713][T21940] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 333.815174][T21940] EXT4-fs (loop6): This should not happen!! Data will be lost [ 333.815174][T21940] [ 333.824822][T21940] EXT4-fs (loop6): Total free blocks count 0 [ 333.831396][T21940] EXT4-fs (loop6): Free/Dirty block details [ 333.837324][T21940] EXT4-fs (loop6): free_blocks=4293918720 [ 333.843124][T21940] EXT4-fs (loop6): dirty_blocks=16 [ 333.848262][T21940] EXT4-fs (loop6): Block reservation details [ 333.854334][T21940] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 333.872114][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.279381][T21966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.287064][T21966] bridge0: port 1(bond0) entered blocking state [ 334.293381][T21966] bridge0: port 1(bond0) entered disabled state [ 334.301256][T21966] bond0: entered allmulticast mode [ 334.307680][T21966] bond0: entered promiscuous mode [ 334.508599][T21979] dummy0 speed is unknown, defaulting to 1000 [ 334.716565][T21986] usb usb6: usbfs: process 21986 (syz.1.7013) did not claim interface 0 before use [ 335.202721][T22017] netlink: '+|[@': attribute type 5 has an invalid length. [ 335.898022][T22074] loop6: detected capacity change from 0 to 2048 [ 335.930906][T22074] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.070310][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.104048][T22084] IPv6: NLM_F_CREATE should be specified when creating new route [ 336.137746][T22090] __nla_validate_parse: 6 callbacks suppressed [ 336.137759][T22090] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7057'. [ 336.175113][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 336.175125][ T29] audit: type=1326 audit(1746853769.377:83746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22087 comm="syz.1.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb403f9e969 code=0x7ffc0000 [ 336.214709][ T29] audit: type=1326 audit(1746853769.407:83747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22087 comm="syz.1.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fb403f9e969 code=0x7ffc0000 [ 336.238384][ T29] audit: type=1326 audit(1746853769.407:83748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22087 comm="syz.1.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb403f9e969 code=0x7ffc0000 [ 336.262196][ T29] audit: type=1326 audit(1746853769.407:83749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22087 comm="syz.1.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb403f9e969 code=0x7ffc0000 [ 336.288420][ T29] audit: type=1400 audit(1746853769.497:83750): avc: denied { read } for pid=22092 comm="syz.6.7058" dev="nsfs" ino=4026532442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 336.309842][ T29] audit: type=1400 audit(1746853769.497:83751): avc: denied { open } for pid=22092 comm="syz.6.7058" path="net:[4026532442]" dev="nsfs" ino=4026532442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 336.334016][T22093] netlink: 9412 bytes leftover after parsing attributes in process `syz.6.7058'. [ 336.353528][ T29] audit: type=1400 audit(1746853769.537:83752): avc: denied { create } for pid=22094 comm="syz.1.7059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 336.394944][ T29] audit: type=1400 audit(1746853769.597:83753): avc: denied { ioctl } for pid=22094 comm="syz.1.7059" path="socket:[62219]" dev="sockfs" ino=62219 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 336.420070][ T29] audit: type=1400 audit(1746853769.597:83754): avc: denied { setopt } for pid=22094 comm="syz.1.7059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 336.439937][ T29] audit: type=1400 audit(1746853769.597:83755): avc: denied { write } for pid=22094 comm="syz.1.7059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 336.520118][T22106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7061'. [ 336.550843][T22108] loop6: detected capacity change from 0 to 512 [ 336.621284][T22108] EXT4-fs (loop6): 1 orphan inode deleted [ 336.629940][T22108] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.643569][ T4233] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 1 [ 336.672130][T22115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65520 sclass=netlink_route_socket pid=22115 comm=syz.3.7065 [ 336.704275][T22108] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.715692][T22115] IPv6: NLM_F_CREATE should be specified when creating new route [ 336.782754][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.819717][T22127] loop6: detected capacity change from 0 to 1024 [ 336.826511][T22127] EXT4-fs: Ignoring removed nobh option [ 336.840213][T22127] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.857282][T22127] EXT4-fs warning (device loop6): ext4_rename_delete:3728: inode #12: comm syz.6.7069: Deleting old file: nlink 2, error=-2 [ 336.881585][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.043368][T22158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7082'. [ 337.063983][T22158] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.072280][T22158] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.074144][T22162] loop7: detected capacity change from 0 to 512 [ 337.080596][T22158] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.087650][T22162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 337.095008][T22158] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.095381][T22158] vxlan0: entered promiscuous mode [ 337.120282][T22162] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.132815][T22162] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.161322][T19965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.263919][T22180] SELinux: syz.7.7091 (22180) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 337.308342][T22184] loop7: detected capacity change from 0 to 128 [ 337.332575][T22184] bio_check_eod: 12899 callbacks suppressed [ 337.332586][T22184] syz.7.7093: attempt to access beyond end of device [ 337.332586][T22184] loop7: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 337.359297][T22184] syz.7.7093: attempt to access beyond end of device [ 337.359297][T22184] loop7: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 337.374690][T22184] syz.7.7093: attempt to access beyond end of device [ 337.374690][T22184] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 337.388033][T22184] syz.7.7093: attempt to access beyond end of device [ 337.388033][T22184] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 337.401863][T22184] syz.7.7093: attempt to access beyond end of device [ 337.401863][T22184] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 337.415166][T22184] syz.7.7093: attempt to access beyond end of device [ 337.415166][T22184] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 337.429231][T22184] syz.7.7093: attempt to access beyond end of device [ 337.429231][T22184] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 337.442672][T22184] syz.7.7093: attempt to access beyond end of device [ 337.442672][T22184] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 337.455853][T22188] syz.7.7093: attempt to access beyond end of device [ 337.455853][T22188] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 337.469116][T22184] syz.7.7093: attempt to access beyond end of device [ 337.469116][T22184] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 337.675242][T22193] loop6: detected capacity change from 0 to 164 [ 337.692991][T22193] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 337.737620][T22195] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7096'. [ 337.974814][T22205] netlink: '+|[@': attribute type 5 has an invalid length. [ 338.218433][T22223] bond0: entered promiscuous mode [ 338.223510][T22223] bond_slave_0: entered promiscuous mode [ 338.229959][T22223] bond_slave_1: entered promiscuous mode [ 338.251750][T22223] bond0: left promiscuous mode [ 338.256611][T22223] bond_slave_0: left promiscuous mode [ 338.262845][T22223] bond_slave_1: left promiscuous mode [ 338.350356][T22240] sd 0:0:1:0: device reset [ 338.422429][T22253] loop6: detected capacity change from 0 to 128 [ 338.450571][T22253] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 338.489561][T22253] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 338.570019][T22271] netlink: 292 bytes leftover after parsing attributes in process `syz.7.7128'. [ 338.599437][T22269] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 338.613950][T19566] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 338.824167][T22301] smc: net device bond0 applied user defined pnetid SYZ2 [ 338.836628][T22301] smc: net device bond0 erased user defined pnetid SYZ2 [ 338.900687][T22315] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7146'. [ 338.933750][T22319] loop6: detected capacity change from 0 to 2048 [ 338.959586][T22319] loop6: p1 < > p3 [ 338.971071][T22319] loop6: p3 size 134217728 extends beyond EOD, truncated [ 339.182273][T22363] xt_CT: You must specify a L4 protocol and not use inversions on it [ 339.330805][T22388] SELinux: ebitmap start bit (3223858) is not a multiple of the map unit size (64) [ 339.341512][T22388] SELinux: failed to load policy [ 339.477781][T22428] serio: Serial port ptm0 [ 339.506652][T22430] SELinux: failed to load policy [ 339.537602][T22436] netlink: '+|[@': attribute type 5 has an invalid length. [ 339.562096][T22442] loop6: detected capacity change from 0 to 164 [ 339.624469][T22453] netlink: '+|[@': attribute type 5 has an invalid length. [ 339.847601][T22495] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7224'. [ 339.969912][T22507] netlink: '+|[@': attribute type 5 has an invalid length. [ 340.143819][T22521] netlink: '+|[@': attribute type 5 has an invalid length. [ 340.507391][T22552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7251'. [ 340.516382][T22552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7251'. [ 340.818203][T22571] vhci_hcd: invalid port number 96 [ 340.823361][T22571] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 341.405200][ T29] kauditd_printk_skb: 822 callbacks suppressed [ 341.405215][ T29] audit: type=1400 audit(1746853774.607:84577): avc: denied { execute } for pid=22593 comm="syz.1.7271" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=63132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 341.482867][ T29] audit: type=1400 audit(1746853774.687:84578): avc: denied { ioctl } for pid=22604 comm="syz.1.7274" path="socket:[63143]" dev="sockfs" ino=63143 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.509332][ T29] audit: type=1400 audit(1746853774.687:84579): avc: denied { bind } for pid=22604 comm="syz.1.7274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 341.535593][T22607] __nla_validate_parse: 8 callbacks suppressed [ 341.535607][T22607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7275'. [ 341.551910][T22607] netlink: 'syz.1.7275': attribute type 1 has an invalid length. [ 341.559669][T22607] netlink: 'syz.1.7275': attribute type 2 has an invalid length. [ 341.567409][T22607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7275'. [ 341.593804][T22609] netlink: '+|[@': attribute type 5 has an invalid length. [ 341.669452][T22613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7278'. [ 341.696354][T22617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7280'. [ 341.726683][ T29] audit: type=1400 audit(1746853774.927:84580): avc: denied { create } for pid=22621 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 341.746100][T22622] macvlan3: entered promiscuous mode [ 341.746121][T22622] bridge0: entered promiscuous mode [ 341.746363][T22622] bridge0: port 1(macvlan3) entered blocking state [ 341.746421][T22622] bridge0: port 1(macvlan3) entered disabled state [ 341.746571][T22622] macvlan3: entered allmulticast mode [ 341.763623][ T29] audit: type=1400 audit(1746853774.957:84581): avc: denied { setopt } for pid=22621 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 341.770052][T22622] bridge0: entered allmulticast mode [ 341.801369][ T29] audit: type=1400 audit(1746853774.957:84582): avc: denied { bind } for pid=22621 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 341.820767][T22622] macvlan3: left allmulticast mode [ 341.825929][T22622] bridge0: left allmulticast mode [ 341.832966][T22622] bridge0: left promiscuous mode [ 341.874347][T22631] netlink: '+|[@': attribute type 5 has an invalid length. [ 341.895436][ T29] audit: type=1326 audit(1746853775.087:84583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22632 comm="syz.2.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 341.919696][ T29] audit: type=1326 audit(1746853775.087:84584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22632 comm="syz.2.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 341.943443][ T29] audit: type=1326 audit(1746853775.087:84585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22632 comm="syz.2.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 341.967695][ T29] audit: type=1326 audit(1746853775.087:84586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22632 comm="syz.2.7288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4410cae969 code=0x7ffc0000 [ 342.309415][T22696] loop6: detected capacity change from 0 to 512 [ 342.316077][T22696] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 342.332239][T22696] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.7316: invalid block [ 342.356884][T22696] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.7316: invalid indirect mapped block 4294967295 (level 1) [ 342.374082][T22696] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.7316: invalid indirect mapped block 4294967295 (level 1) [ 342.390204][T22696] EXT4-fs (loop6): 2 truncates cleaned up [ 342.396476][T22696] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.412731][T22696] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.6.7316: path /266/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 342.435911][T22696] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.6.7316: path /266/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 342.476090][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.546380][T22724] macsec1: entered allmulticast mode [ 342.553022][T22724] dummy0: entered allmulticast mode [ 342.561155][T22724] dummy0: left allmulticast mode [ 342.562975][T22728] block device autoloading is deprecated and will be removed. [ 342.575444][T22728] bio_check_eod: 19109 callbacks suppressed [ 342.575475][T22728] syz.6.7329: attempt to access beyond end of device [ 342.575475][T22728] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 342.689289][T22743] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7335'. [ 342.722297][T22748] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7337'. [ 342.755767][T22750] loop6: detected capacity change from 0 to 2048 [ 342.819063][T22755] loop6: detected capacity change from 0 to 1024 [ 342.826749][T22755] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 342.860076][T22755] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.876416][T22755] EXT4-fs error (device loop6): ext4_check_all_de:659: inode #12: block 7: comm syz.6.7341: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 342.911511][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.949300][T22766] loop6: detected capacity change from 0 to 128 [ 343.047141][T22777] program syz.2.7349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.065697][T22777] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 343.126435][T22782] hub 9-0:1.0: USB hub found [ 343.132210][T22782] hub 9-0:1.0: 8 ports detected [ 343.215600][T22790] loop6: detected capacity change from 0 to 1024 [ 343.230208][T22790] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.242978][T22790] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.262451][T22790] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7354: bg 0: block 393: padding at end of block bitmap is not set [ 343.280784][T22790] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 343.293341][T22790] EXT4-fs (loop6): This should not happen!! Data will be lost [ 343.293341][T22790] [ 343.320089][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.393094][T22800] vhci_hcd: invalid port number 96 [ 343.398324][T22800] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 343.493173][T22814] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 343.989987][T22845] loop6: detected capacity change from 0 to 128 [ 344.033100][T22845] syz.6.7377: attempt to access beyond end of device [ 344.033100][T22845] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 344.063910][T22845] syz.6.7377: attempt to access beyond end of device [ 344.063910][T22845] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 344.089268][T22845] syz.6.7377: attempt to access beyond end of device [ 344.089268][T22845] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 344.103781][T22845] syz.6.7377: attempt to access beyond end of device [ 344.103781][T22845] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 344.117485][T22845] syz.6.7377: attempt to access beyond end of device [ 344.117485][T22845] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 344.138291][T22845] syz.6.7377: attempt to access beyond end of device [ 344.138291][T22845] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 344.152526][T22849] syz.6.7377: attempt to access beyond end of device [ 344.152526][T22849] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 344.165812][T22845] syz.6.7377: attempt to access beyond end of device [ 344.165812][T22845] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 344.185076][T22849] syz.6.7377: attempt to access beyond end of device [ 344.185076][T22849] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 344.206690][T22847] netlink: '+|[@': attribute type 5 has an invalid length. [ 344.286269][T22856] sd 0:0:1:0: device reset [ 344.884761][T22905] ALSA: seq fatal error: cannot create timer (-22) [ 345.075319][T22928] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 345.458351][T22964] netlink: '+|[@': attribute type 5 has an invalid length. [ 345.682436][T22978] xt_connbytes: Forcing CT accounting to be enabled [ 345.689177][T22978] Cannot find add_set index 0 as target [ 345.720399][T22982] loop9: detected capacity change from 0 to 7 [ 345.726637][T22982] Buffer I/O error on dev loop9, logical block 0, async page read [ 345.735747][T22982] Buffer I/O error on dev loop9, logical block 0, async page read [ 345.743752][T22982] loop9: unable to read partition table [ 345.749904][T22982] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 345.749904][T22982] U) failed (rc=-5) [ 345.791701][T22995] netlink: '+|[@': attribute type 5 has an invalid length. [ 345.805259][T22993] netlink: 304 bytes leftover after parsing attributes in process `syz.1.7440'. [ 345.815261][T22993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7440'. [ 345.865127][T23000] syzkaller0: entered promiscuous mode [ 345.870713][T23000] syzkaller0: entered allmulticast mode [ 345.902676][T23007] loop6: detected capacity change from 0 to 512 [ 345.914252][T23007] EXT4-fs: Ignoring removed nobh option [ 345.920239][T23007] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 345.932695][T23007] EXT4-fs (loop6): 1 truncate cleaned up [ 345.939613][T23007] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.957825][T23007] EXT4-fs error (device loop6): ext4_read_inline_dir:1501: inode #12: block 7: comm syz.6.7445: path /292/file5/file0: bad entry in directory: inode out of bounds - offset=24, inode=16777215, rec_len=16, size=80 fake=0 [ 345.980579][T23007] EXT4-fs (loop6): Remounting filesystem read-only [ 346.001123][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.129984][T23020] macsec0: entered allmulticast mode [ 346.135366][T23020] dummy0: entered allmulticast mode [ 346.142516][T23020] dummy0: left allmulticast mode [ 346.604194][T23039] loop7: detected capacity change from 0 to 512 [ 346.619448][T23039] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 346.627760][T23039] EXT4-fs (loop7): 1 truncate cleaned up [ 346.634040][T23039] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.659487][ T29] kauditd_printk_skb: 513 callbacks suppressed [ 346.659500][ T29] audit: type=1326 audit(1746853779.867:85100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23041 comm="syz.3.7459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19626e969 code=0x7ffc0000 [ 346.670290][T23039] EXT4-fs error (device loop7): ext4_add_entry:2419: inode #2: comm syz.7.7458: Directory hole found for htree leaf block 0 [ 346.698161][ T29] audit: type=1326 audit(1746853779.867:85101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23041 comm="syz.3.7459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19626e969 code=0x7ffc0000 [ 346.726406][ T29] audit: type=1326 audit(1746853779.867:85102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23041 comm="syz.3.7459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fe19626e969 code=0x7ffc0000 [ 346.750711][ T29] audit: type=1326 audit(1746853779.867:85103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23041 comm="syz.3.7459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19626e969 code=0x7ffc0000 [ 346.759279][T23039] EXT4-fs (loop7): Remounting filesystem read-only [ 346.774322][ T29] audit: type=1326 audit(1746853779.867:85104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23041 comm="syz.3.7459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19626e969 code=0x7ffc0000 [ 346.774353][ T29] audit: type=1326 audit(1746853779.867:85105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23041 comm="syz.3.7459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fe19626e969 code=0x7ffc0000 [ 346.829145][ T29] audit: type=1326 audit(1746853779.867:85106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23041 comm="syz.3.7459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe19620ab39 code=0x7ffc0000 [ 346.852702][ T29] audit: type=1326 audit(1746853779.867:85107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23041 comm="syz.3.7459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19626e969 code=0x7ffc0000 [ 346.876921][ T29] audit: type=1326 audit(1746853779.867:85108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23041 comm="syz.3.7459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19626e969 code=0x7ffc0000 [ 346.901131][ T29] audit: type=1400 audit(1746853779.877:85109): avc: denied { create } for pid=23038 comm="syz.7.7458" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 346.945356][T19965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.979350][T23047] serio: Serial port ptm0 [ 347.155625][T23068] netlink: '+|[@': attribute type 5 has an invalid length. [ 347.202464][T23068] loop7: detected capacity change from 0 to 128 [ 347.211008][T23068] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 347.242797][T23068] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 347.319186][T23080] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7474'. [ 347.349305][T23083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7477'. [ 347.366698][T23080] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7474'. [ 347.376412][ T1449] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 347.425127][T23093] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7480'. [ 347.439340][T23095] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 347.470885][T23099] loop6: detected capacity change from 0 to 512 [ 347.480857][T23099] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 347.499815][T23099] EXT4-fs (loop6): 1 truncate cleaned up [ 347.505957][T23099] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.605404][T19566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.678214][T23113] SELinux: failed to load policy [ 347.794567][T23128] SELinux: failed to load policy [ 347.939144][T23146] netlink: 11 bytes leftover after parsing attributes in process `syz.6.7503'. [ 348.132249][T23170] syzkaller0: entered promiscuous mode [ 348.137741][T23170] syzkaller0: entered allmulticast mode [ 348.247118][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.255535][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.263413][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.273521][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.281994][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.289812][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.297590][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.305412][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.313915][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.321735][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.329490][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.337331][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.345783][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.353591][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.361530][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.369856][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.377652][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.385428][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.393262][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.401627][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.409453][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.417240][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.425018][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.433360][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.441196][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.449068][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.456805][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.465215][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.472955][ T9108] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 348.479665][T23206] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7530'. [ 348.490788][T23206] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7530'. [ 348.492031][T23207] program syz.7.7529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 348.527423][ T9108] hid-generic 0000:0000:20000000.000B: hidraw0: HID v0.01 Device [syz0] on syz0 [ 348.561116][T23214] Falling back ldisc for ttyS3. [ 348.601871][T23222] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 348.651007][T23226] SELinux: ebitmap: truncated map [ 348.656586][T23226] SELinux: failed to load policy [ 348.685672][T23233] random: crng reseeded on system resumption [ 348.856327][T23242] loop7: detected capacity change from 0 to 128 [ 348.903032][T23242] bio_check_eod: 14740 callbacks suppressed [ 348.903044][T23242] syz.7.7545: attempt to access beyond end of device [ 348.903044][T23242] loop7: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 348.935257][T23242] syz.7.7545: attempt to access beyond end of device [ 348.935257][T23242] loop7: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 348.955627][T23242] syz.7.7545: attempt to access beyond end of device [ 348.955627][T23242] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 348.973813][T23242] syz.7.7545: attempt to access beyond end of device [ 348.973813][T23242] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 348.992337][T23242] syz.7.7545: attempt to access beyond end of device [ 348.992337][T23242] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 349.007602][T23246] syz.7.7545: attempt to access beyond end of device [ 349.007602][T23246] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 349.021636][T23246] syz.7.7545: attempt to access beyond end of device [ 349.021636][T23246] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 349.022198][T23245] netlink: '+|[@': attribute type 5 has an invalid length. [ 349.038290][T23246] syz.7.7545: attempt to access beyond end of device [ 349.038290][T23246] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 349.055876][T23242] syz.7.7545: attempt to access beyond end of device [ 349.055876][T23242] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 349.072136][T23242] syz.7.7545: attempt to access beyond end of device [ 349.072136][T23242] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 350.314034][T23324] ALSA: seq fatal error: cannot create timer (-22) [ 350.342452][T23326] loop7: detected capacity change from 0 to 512 [ 350.361756][T23326] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 350.384052][T23326] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.7579: invalid block [ 350.396616][T23326] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.7579: invalid indirect mapped block 4294967295 (level 1) [ 350.411007][T23326] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.7579: invalid indirect mapped block 4294967295 (level 1) [ 350.425271][T23326] EXT4-fs (loop7): 2 truncates cleaned up [ 350.431400][T23326] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.459399][T19965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.010135][T23360] SELinux: failed to load policy [ 351.166783][T23385] loop6: detected capacity change from 0 to 512 [ 351.191653][T23385] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 351.208397][T23385] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.219506][T23385] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 351.284509][T23396] SELinux: ebitmap: truncated map [ 351.290134][T23396] SELinux: failed to load policy [ 351.426651][T23420] netlink: '+|[@': attribute type 5 has an invalid length. [ 351.742761][T23446] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7629'. [ 351.780416][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 351.780448][ T29] audit: type=1400 audit(1746853784.987:85428): avc: denied { mount } for pid=23449 comm="syz.7.7631" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 351.914736][ T29] audit: type=1400 audit(1746853785.117:85429): avc: denied { create } for pid=23461 comm="syz.7.7638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 351.959383][ T29] audit: type=1400 audit(1746853785.137:85430): avc: denied { bind } for pid=23461 comm="syz.7.7638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 352.064039][T23476] loop7: detected capacity change from 0 to 1024 [ 352.103806][T23476] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.146135][T23475] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 352.161848][ T29] audit: type=1400 audit(1746853785.357:85431): avc: denied { name_connect } for pid=23483 comm="syz.1.7645" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 352.192425][T23475] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 352.205289][T23475] EXT4-fs (loop7): This should not happen!! Data will be lost [ 352.205289][T23475] [ 352.214924][T23475] EXT4-fs (loop7): Total free blocks count 0 [ 352.220913][T23475] EXT4-fs (loop7): Free/Dirty block details [ 352.227184][T23475] EXT4-fs (loop7): free_blocks=68451041280 [ 352.233602][T23475] EXT4-fs (loop7): dirty_blocks=32 [ 352.238734][T23475] EXT4-fs (loop7): Block reservation details [ 352.244714][T23475] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 352.250637][ T29] audit: type=1400 audit(1746853785.367:85432): avc: denied { listen } for pid=23483 comm="syz.1.7645" lport=42606 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 352.274347][ T29] audit: type=1400 audit(1746853785.367:85433): avc: denied { accept } for pid=23483 comm="syz.1.7645" lport=42606 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 352.297498][ T29] audit: type=1400 audit(1746853785.367:85434): avc: denied { write } for pid=23483 comm="syz.1.7645" lport=42606 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 352.321686][ T29] audit: type=1400 audit(1746853785.377:85435): avc: denied { setopt } for pid=23483 comm="syz.1.7645" lport=42606 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 352.335556][T23486] netlink: 'syz.1.7646': attribute type 1 has an invalid length. [ 352.353368][T23486] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7646'. [ 352.377529][T19965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.389766][T23488] netlink: '+|[@': attribute type 5 has an invalid length. [ 352.567240][ T29] audit: type=1326 audit(1746853785.767:85436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23506 comm="syz.3.7656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19626e969 code=0x7ffc0000 [ 352.591801][ T29] audit: type=1326 audit(1746853785.767:85437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23506 comm="syz.3.7656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe19626e969 code=0x7ffc0000 [ 352.678550][T23510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7667'. [ 352.715815][T23520] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 352.792607][T23530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23530 comm=syz.1.7666 [ 352.932137][T23533] syzkaller0: entered promiscuous mode [ 352.937709][T23533] syzkaller0: entered allmulticast mode [ 352.949396][T23544] 9pnet_fd: Insufficient options for proto=fd [ 353.116385][T23556] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7677'. [ 353.130820][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.138363][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.145812][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.153208][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.202978][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.210395][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.217856][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.225874][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.233275][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.240725][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.248770][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.256227][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.256527][T23561] SELinux: failed to load policy [ 353.263608][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.263633][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.283948][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.353374][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.360956][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.369091][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.376523][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.383921][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.391418][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.399439][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.406809][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.414204][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.421698][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.429769][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.437168][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.444554][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.451946][ T9108] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 353.520314][ T9108] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 353.558369][T23567] Falling back ldisc for ttyS3. [ 353.590648][T23569] serio: Serial port ptm0 [ 353.672174][T23574] loop7: detected capacity change from 0 to 512 [ 353.701653][T23574] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.7685: Failed to acquire dquot type 1 [ 353.714286][T23574] EXT4-fs (loop7): 1 truncate cleaned up [ 353.720557][T23574] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.737032][T23574] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.771093][T19965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.942808][T23590] loop7: detected capacity change from 0 to 2048 [ 353.959958][T23590] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.983763][T23590] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.004695][T23590] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7690: bg 0: block 345: padding at end of block bitmap is not set [ 354.047442][T23590] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 354.059942][T23590] EXT4-fs (loop7): This should not happen!! Data will be lost [ 354.059942][T23590] [ 354.119985][T19965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.212949][T23617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7700'. [ 354.244846][T23619] loop7: detected capacity change from 0 to 1024 [ 354.273157][T23619] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.292329][T23619] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 354.368701][T19965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.530726][T23641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7709'. [ 354.859166][T23665] vlan0: entered allmulticast mode [ 354.864417][T23665] batadv0: entered allmulticast mode [ 354.910866][T23669] netlink: '+|[@': attribute type 5 has an invalid length. [ 355.029752][ T23] kernel write not supported for file /2853/attr/exec (pid: 23 comm: kworker/1:0) [ 355.106297][T23690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7732'. [ 355.131024][T23690] bond0: left allmulticast mode [ 355.135958][T23690] bond0: left promiscuous mode [ 355.141068][T23690] bridge0: port 1(bond0) entered disabled state [ 355.657916][T23712] loop7: detected capacity change from 0 to 1024 [ 355.674072][T23712] EXT4-fs: Ignoring removed orlov option [ 355.686682][T23712] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 355.720836][T23712] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.771384][T19965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.823039][T23716] loop7: detected capacity change from 0 to 2048 [ 355.850479][T23716] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.872798][T23716] EXT4-fs error (device loop7): ext4_find_inline_data_nolock:169: inode #12: comm syz.7.7740: inline data xattr refers to an external xattr inode [ 355.898175][T23716] EXT4-fs (loop7): Remounting filesystem read-only [ 355.930010][T19965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.067029][T23730] netlink: '+|[@': attribute type 5 has an invalid length. [ 356.133445][T23730] loop6: detected capacity change from 0 to 128 [ 356.150962][T23730] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 356.189833][T23730] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 356.361621][T23740] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 356.435492][ T6810] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 356.471632][T23752] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7756'. [ 356.494386][T23753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7757'. [ 356.690458][T23770] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7762'. [ 356.708937][T23770] IPVS: Error joining to the multicast group [ 356.791453][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 356.791476][ T29] audit: type=1400 audit(1746853789.997:85742): avc: denied { create } for pid=23777 comm="syz.1.7766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 356.819943][T23776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 356.822137][ T29] audit: type=1400 audit(1746853790.027:85743): avc: denied { write } for pid=23777 comm="syz.1.7766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 356.855753][ T29] audit: type=1400 audit(1746853790.027:85744): avc: denied { nlmsg_write } for pid=23777 comm="syz.1.7766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 356.876572][ T29] audit: type=1400 audit(1746853790.027:85745): avc: denied { create } for pid=23777 comm="syz.1.7766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 356.938943][ T29] audit: type=1400 audit(1746853790.107:85746): avc: denied { setopt } for pid=23777 comm="syz.1.7766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 356.994893][ T29] audit: type=1326 audit(1746853790.197:85747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23784 comm="syz.7.7769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c474fe969 code=0x7ffc0000 [ 357.025964][ T29] audit: type=1326 audit(1746853790.197:85748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23784 comm="syz.7.7769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c474fe969 code=0x7ffc0000 [ 357.049649][ T29] audit: type=1326 audit(1746853790.227:85749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23784 comm="syz.7.7769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8c474fe969 code=0x7ffc0000 [ 357.073218][ T29] audit: type=1326 audit(1746853790.227:85750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23784 comm="syz.7.7769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c474fe969 code=0x7ffc0000 [ 357.096861][ T29] audit: type=1326 audit(1746853790.227:85751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23784 comm="syz.7.7769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c474fe969 code=0x7ffc0000 [ 357.177885][T23790] pim6reg: entered allmulticast mode [ 357.201352][T23790] pim6reg: left allmulticast mode [ 357.298281][T23799] loop7: detected capacity change from 0 to 512 [ 357.310672][T23799] EXT4-fs: Ignoring removed mblk_io_submit option [ 357.327953][T23799] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 357.372703][T23799] EXT4-fs (loop7): 1 truncate cleaned up [ 357.386177][T23799] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.479924][T19965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.539511][T23817] vhci_hcd: invalid port number 96 [ 357.544644][T23817] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 358.235038][T23861] loop6: detected capacity change from 0 to 2048 [ 358.292278][T23861] loop6: p1 < > p4 [ 358.297401][T23861] loop6: p4 size 8388608 extends beyond EOD, truncated [ 358.336192][T23871] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7804'. [ 358.348472][T23871] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7804'. [ 358.399251][T23875] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 358.492410][T23881] SELinux: security policydb version 18 (MLS) not backwards compatible [ 358.514234][T23881] SELinux: failed to load policy [ 358.698074][T23889] loop7: detected capacity change from 0 to 512 [ 358.708965][T23889] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 358.739579][T23889] EXT4-fs (loop7): 1 truncate cleaned up [ 358.745557][T23889] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.788258][T19965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.873416][T23902] netlink: 9412 bytes leftover after parsing attributes in process `+}[@'. [ 359.116309][T23924] sd 0:0:1:0: device reset [ 359.181304][T23931] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 359.195178][T23931] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 359.389150][T23951] loop7: detected capacity change from 0 to 512 [ 359.399663][T23951] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 359.422673][T23951] EXT4-fs (loop7): 1 truncate cleaned up [ 359.428973][T23951] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.475492][T19965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.553579][ T3391] ================================================================== [ 359.561653][ T3391] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 359.568660][ T3391] [ 359.570973][ T3391] read-write to 0xffff888237c299e4 of 4 bytes by task 10 on cpu 0: [ 359.578850][ T3391] wq_worker_running+0x95/0x120 [ 359.583690][ T3391] schedule_preempt_disabled+0x10/0x20 [ 359.589144][ T3391] __mutex_lock+0x414/0xa50 [ 359.594505][ T3391] __mutex_lock_slowpath+0xa/0x10 [ 359.599718][ T3391] mutex_lock+0x27/0x30 [ 359.603898][ T3391] pcpu_balance_workfn+0x4a/0xc00 [ 359.608933][ T3391] process_scheduled_works+0x4cb/0x9d0 [ 359.614416][ T3391] worker_thread+0x582/0x770 [ 359.619007][ T3391] kthread+0x486/0x510 [ 359.623095][ T3391] ret_from_fork+0x4b/0x60 [ 359.627498][ T3391] ret_from_fork_asm+0x1a/0x30 [ 359.632269][ T3391] [ 359.634585][ T3391] read to 0xffff888237c299e4 of 4 bytes by task 3391 on cpu 1: [ 359.642112][ T3391] kick_pool+0x49/0x2d0 [ 359.646252][ T3391] __queue_work+0x8d6/0xb60 [ 359.650741][ T3391] queue_work_on+0xd1/0x160 [ 359.655234][ T3391] wg_queue_enqueue_per_peer_tx+0x119/0x270 [ 359.661121][ T3391] wg_packet_encrypt_worker+0x9e1/0xb80 [ 359.666657][ T3391] process_scheduled_works+0x4cb/0x9d0 [ 359.672107][ T3391] worker_thread+0x582/0x770 [ 359.676688][ T3391] kthread+0x486/0x510 [ 359.680745][ T3391] ret_from_fork+0x4b/0x60 [ 359.685152][ T3391] ret_from_fork_asm+0x1a/0x30 [ 359.689917][ T3391] [ 359.692227][ T3391] value changed: 0x00000000 -> 0x00000001 [ 359.697954][ T3391] [ 359.700271][ T3391] Reported by Kernel Concurrency Sanitizer on: [ 359.706420][ T3391] CPU: 1 UID: 0 PID: 3391 Comm: kworker/1:4 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 359.718912][ T3391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 359.728969][ T3391] Workqueue: wg-crypt-wg1 wg_packet_encrypt_worker [ 359.735492][ T3391] ==================================================================