last executing test programs: 56.199154829s ago: executing program 1 (id=240): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x9}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4d3, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x90, 0x7f, {0x5, 0x4, 0x2, 0x24, 0x5, 0x67, 0x3ff, 0xa7, 0x5c, 0x8, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x34}}}}}}}, 0x0) 56.142753134s ago: executing program 1 (id=241): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x9) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x2e) 56.104191017s ago: executing program 1 (id=242): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='status\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 56.052928961s ago: executing program 1 (id=243): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000080)={0x2, 0xf8, 0x40000, {r0}}, 0x20) 56.000828035s ago: executing program 1 (id=245): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='mm_page_free\x00', r0, 0x0, 0x8080000001}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 55.765887344s ago: executing program 1 (id=251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@mask_fadd={0x58, 0x118, 0x8, {{}, 0x0, 0x0, 0x5c, 0x8, 0x1, 0x0, 0x0, 0x20}}], 0x58, 0x20000000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 55.739247156s ago: executing program 32 (id=251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@mask_fadd={0x58, 0x118, 0x8, {{}, 0x0, 0x0, 0x5c, 0x8, 0x1, 0x0, 0x0, 0x20}}], 0x58, 0x20000000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 49.187289796s ago: executing program 4 (id=440): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r0}, 0x10) r1 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x2, 0x0, @mcast1}}}, 0x88) 49.129549311s ago: executing program 4 (id=444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='mm_page_free\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 49.071965535s ago: executing program 4 (id=447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x3, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) 48.960490274s ago: executing program 4 (id=449): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") write$selinux_context(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:cgroup_t:s0\x00', 0x1e) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) 48.76521446s ago: executing program 4 (id=454): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') 48.436945056s ago: executing program 4 (id=464): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 48.397208179s ago: executing program 33 (id=464): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 738.127231ms ago: executing program 5 (id=2418): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048014) 701.125233ms ago: executing program 5 (id=2421): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x4c}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7d, 0x0, &(0x7f0000000000)) 680.402685ms ago: executing program 5 (id=2422): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 661.510677ms ago: executing program 5 (id=2423): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 621.420109ms ago: executing program 5 (id=2425): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) bind$xdp(r3, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) 598.813111ms ago: executing program 5 (id=2428): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x6ac9, 0x7}, 0x100000, 0x2, 0x800000, 0x8, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x200000000000000) 486.666311ms ago: executing program 2 (id=2441): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a3100000000050001"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300010029bd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="d45006000200000024001a802000028014"], 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 458.880733ms ago: executing program 2 (id=2444): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) 427.006795ms ago: executing program 2 (id=2446): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff) 399.679878ms ago: executing program 2 (id=2450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 349.100042ms ago: executing program 2 (id=2454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 348.978102ms ago: executing program 2 (id=2455): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x0) 327.281373ms ago: executing program 3 (id=2458): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x20}, {0x20, 0x0, 0x0, 0xad}, {0x6, 0x3}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 269.613408ms ago: executing program 6 (id=2461): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x8000000000000000}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f00000003c0)="10", 0x1, 0x4000, &(0x7f0000000140)={0x11, 0xf7, r2, 0x1, 0x0, 0x6, @local}, 0x14) 264.548349ms ago: executing program 3 (id=2463): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x0) 226.081372ms ago: executing program 3 (id=2465): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 225.976341ms ago: executing program 6 (id=2466): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xeebbb9fac0fc5d31, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0xffdd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) 225.734872ms ago: executing program 0 (id=2467): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 204.130003ms ago: executing program 6 (id=2468): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 203.684223ms ago: executing program 0 (id=2469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x1c, r2, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 202.210734ms ago: executing program 3 (id=2470): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000f40)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@orlov}, {@noquota}, {@errors_remount}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x51f, &(0x7f00000007c0)="$eJzs3UFsI1cZAOB/HDvd7KZNChygEqXQouwK1k4a2kY9lCIhOFUCyn0JiRNFceIodtpNVEFWHDgiIQRInMqFCxInTkioEheOCKkSnEGAQAi2cEACdirb4+xuMk6yG8fOJt8nTea955n3v+doxn7jp5kALqxnIuLViLiTpum1iJjIygvZErudpbXde7ffWmgtSaTp6/9IIsnKunWlbY/FlWy3SxHxlS9GfD05GLexvbM6X6tVN7N8pbm2UWls71xfWZtfri5X12dnZ16ce2nuhbnpvvRzPCJe+fxfvv+dn3zhlV9++s0/3vjb1W8kWXns68cDKh72YqfrpfZ7ce8Omw8Z7CwqtnuYGcvbYuRAya1TbhMAAL19ICI+ERHXYiJGDv86CwAAADyC0s+Ox/+S7m93B4z2KAcAAAAeIYX2HNikUM7m+45HoVAuR3sO74ficqFWbzQ/tVTfWl/szJWdjFJhaaVWnc7mCk9GKWnlZ9rpu/nn9+VnI+LJiPjexFg7X16o1xaHffEDAAAALogr+8b//57ojP8BAACAc2Zy2A0AAAAATp3xPwAAAJx/xv8AAABwrn3ptddaS9p9/vXiG9tbq/U3ri9WG6vlta2F8kJ9c6O8XK8vt+/Zt3ZUfbV6feMzsb51s9KsNpqVxvbOjbX61nrzxsp9j8AGAAAABujJj73z+yQidl8eay8to8fb9ZibAWdVcS+VZOucw/oPT3TWfx5Qo4CBGBl2A4ChKQ67AcDQlIbdAGDokiNe7zl55zfZ+uP9bQ8AANB/Ux/J//3/6OuCu4UBNA84RQ5iALh42t/zjzuT15cFOFdKZgDChXfi3/+PlKYP1CAAAKDvxttLUihnl/fGo1AolyMebz8WoJQsrdSq0xHxRET8bqL0WCs/094zOXLMAAAAAAAAAAAAAAAAAAAAAAAAAAB0pGkSKQAAAHCuRRT+mvyqcy//qYnnxvdfHxhN/jMR2SNC3/zR6z+4Od9sbs60yv+5V978YVb+/DCuYAAAAMCFUHyQjbvj9O44HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD66b3bby10l0HG/fvnImIyL34xLrXXl6IUEZf/lUTxnv2SiBjpQ/yx1p8P58VPWs3aC5kXf+ztk8ffvXVo/JjM3oW8+FdOHh4utHda559X846/QjzTXucff8WI+/IPq/f5L/bOfyM9jv/HjxnjqXd/VukZ/1bEU8X88083ftIj/rN5Ff782weKvvbVnZ1e8dO3I6ZyP3+S+2JVmmsblcb2zvWVtfnl6nJ1fXZ25sW5l+ZemJuuLK3Uqtnf3Bjf/egv7hzW/8s94k8e0f/ncuobzSn7/7s3b3+wkyzlxb/6bE78X/842+Jg/EL22ffJLN16faqb3u2k7/X0T3/79GH9X+zR/6P+/1d7VbrPtS9/60/H3BQAGIDG9s7qfK1W3TwbiZej7zW3RvhD79ejl/hveiaacbqJb/a1wjRN09YxdYJ6khjcm5Ac3tRhn5kAAIB+u/ulf9gtAQAAAAAAAAAAAAAAAAAAgItrEHca2x9zdy+V9OMW2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAffF+AAAA///0iOAC") mremap(&(0x7f0000a99000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff8000/0x2000)=nil) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ac6000/0x3000)=nil, 0x3000, 0x8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8000, 0x0, 0x0, 0x2) 166.847947ms ago: executing program 0 (id=2471): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 162.785527ms ago: executing program 3 (id=2472): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 96.841072ms ago: executing program 3 (id=2473): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000080)="4f1002f8839db50f6b17361b58", 0xd) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 87.137432ms ago: executing program 6 (id=2474): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8) 51.145666ms ago: executing program 6 (id=2475): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10}, @in6={0xa, 0x4e23, 0xfffffffd, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}], 0x38) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @loopback={0xfec0ffffffffffff}, 0x80000000}], 0x1c) 47.700276ms ago: executing program 0 (id=2476): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x2) 23.526688ms ago: executing program 6 (id=2477): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x606c) 16.640629ms ago: executing program 0 (id=2478): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b35", 0x14}], 0x1}}], 0x2, 0x4004040) 0s ago: executing program 0 (id=2479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) kernel console output (not intermixed with test programs): ntext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.826501][ T29] audit: type=1400 audit(1755785820.270:718): avc: denied { nlmsg_write } for pid=4447 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.865328][ T29] audit: type=1400 audit(1755785820.355:719): avc: denied { read } for pid=4452 comm="syz.4.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.939381][ T29] audit: type=1400 audit(1755785820.429:720): avc: denied { bind } for pid=4452 comm="syz.4.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.959005][ T29] audit: type=1400 audit(1755785820.429:721): avc: denied { name_bind } for pid=4452 comm="syz.4.338" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 36.979984][ T29] audit: type=1400 audit(1755785820.429:722): avc: denied { node_bind } for pid=4452 comm="syz.4.338" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 37.007541][ T4458] loop2: detected capacity change from 0 to 512 [ 37.080510][ T4458] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.093830][ T4458] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.153376][ T4458] EXT4-fs (loop2): 1 orphan inode deleted [ 37.159368][ T4458] EXT4-fs (loop2): 1 truncate cleaned up [ 37.188113][ T4109] veth0_vlan: entered promiscuous mode [ 37.188255][ T4458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.199289][ T4109] veth1_vlan: entered promiscuous mode [ 37.222282][ T4109] veth0_macvtap: entered promiscuous mode [ 37.230032][ T4109] veth1_macvtap: entered promiscuous mode [ 37.242810][ T4109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.257156][ T4477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'. [ 37.272208][ T29] audit: type=1400 audit(1755785820.788:723): avc: denied { read write } for pid=4478 comm="syz.4.345" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 37.297846][ T4477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'. [ 37.314894][ T4477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'. [ 37.331991][ T4109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.340033][ T4458] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 37.358284][ T4423] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.367313][ T4423] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.396073][ T4458] EXT4-fs (loop2): Remounting filesystem read-only [ 37.410207][ T4423] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.422069][ T4458] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 37.433876][ T4423] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.474312][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.549253][ T4493] SELinux: failed to load policy [ 37.565758][ T4495] loop0: detected capacity change from 0 to 1024 [ 37.587332][ T4495] EXT4-fs: Ignoring removed orlov option [ 37.613052][ T4495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.709504][ T4519] ip6gre1: entered allmulticast mode [ 37.753339][ T4525] hub 9-0:1.0: USB hub found [ 37.759323][ T4525] hub 9-0:1.0: 8 ports detected [ 37.773811][ T4528] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 37.830383][ T4533] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 38.096962][ T4551] netlink: 'syz.3.374': attribute type 6 has an invalid length. [ 38.304949][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.480166][ T2955] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 38.487652][ T2955] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.495053][ T2955] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.502673][ T2955] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.510310][ T2955] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.517967][ T2955] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.589981][ T2955] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.597559][ T2955] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.605080][ T2955] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 38.612593][ T2955] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.624563][ T4594] loop2: detected capacity change from 0 to 512 [ 38.663911][ T2955] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz1] on syz0 [ 38.678919][ T4594] EXT4-fs (loop2): orphan cleanup on readonly fs [ 38.737019][ T4594] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 38.776941][ T4594] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1 [ 38.790837][ T4605] fido_id[4605]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 38.807992][ T4594] EXT4-fs (loop2): 1 truncate cleaned up [ 38.830331][ T4594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.884813][ T4594] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 38.907046][ T4594] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 0 [ 38.927994][ T4614] SELinux: failed to load policy [ 38.967984][ T4594] +}[@ (4594) used greatest stack depth: 9280 bytes left [ 38.975608][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.007924][ T4632] loop2: detected capacity change from 0 to 512 [ 39.015741][ T4632] EXT4-fs (loop2): orphan cleanup on readonly fs [ 39.024819][ T4632] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 39.039193][ T4632] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1 [ 39.051145][ T4632] EXT4-fs (loop2): 1 truncate cleaned up [ 39.084711][ T4632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.111946][ T4632] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 39.162406][ T4632] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 0 [ 39.215604][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.318415][ T4656] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 39.325811][ T4656] IPv6: NLM_F_CREATE should be set when creating new route [ 39.333149][ T4656] IPv6: NLM_F_CREATE should be set when creating new route [ 39.341001][ T4656] ------------[ cut here ]------------ [ 39.346480][ T4656] WARNING: CPU: 0 PID: 4656 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xc41/0xcb0 [ 39.356901][ T4656] Modules linked in: [ 39.360820][ T4656] CPU: 0 UID: 0 PID: 4656 Comm: syz.3.417 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.370545][ T4656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 39.380697][ T4656] RIP: 0010:nsim_fib_event_nb+0xc41/0xcb0 [ 39.386553][ T4656] Code: d1 12 fe be 01 00 00 00 4c 8b 74 24 18 49 8d 7e 2c e8 03 83 a8 fe 4c 8b 2c 24 48 8b 6c 24 10 e9 93 f6 ff ff e8 b0 d1 12 fe 90 <0f> 0b 90 e9 5a fc ff ff e8 a2 d1 12 fe e9 a5 f9 ff ff e8 98 d1 12 [ 39.406217][ T4656] RSP: 0018:ffffc90001377618 EFLAGS: 00010283 [ 39.412343][ T4656] RAX: ffffffff834528e0 RBX: 0000000000000001 RCX: 0000000000080000 [ 39.420418][ T4656] RDX: ffffc900045fa000 RSI: 0000000000002812 RDI: 0000000000002813 [ 39.428517][ T4656] RBP: 0000000000000001 R08: 0001c90001377733 R09: 0000000000000000 [ 39.436562][ T4656] R10: ffff88811b7e8a40 R11: 0000000000000002 R12: ffffc90001377718 [ 39.444646][ T4656] R13: ffff8881199fdc00 R14: ffffc90001377730 R15: 0000000000000002 [ 39.452751][ T4656] FS: 00007fc66c8476c0(0000) GS:ffff8882aee44000(0000) knlGS:0000000000000000 [ 39.461781][ T4656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.468397][ T4656] CR2: 0000200000002000 CR3: 0000000115cd8000 CR4: 00000000003506f0 [ 39.476479][ T4656] Call Trace: [ 39.479863][ T4656] [ 39.482966][ T4656] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 39.488503][ T4656] atomic_notifier_call_chain+0x76/0x1c0 [ 39.494435][ T4656] call_fib_notifiers+0x65/0xa0 [ 39.499392][ T4656] call_fib6_notifiers+0x30/0x40 [ 39.504524][ T4656] call_fib6_multipath_entry_notifiers+0x94/0xc0 [ 39.511002][ T4656] inet6_rtm_newroute+0xaf1/0x1020 [ 39.516208][ T4656] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 39.521941][ T4656] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 39.526950][ T4656] netlink_rcv_skb+0x123/0x220 [ 39.531803][ T4656] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 39.537387][ T4656] rtnetlink_rcv+0x1c/0x30 [ 39.541822][ T4656] netlink_unicast+0x5bd/0x690 [ 39.546783][ T4656] netlink_sendmsg+0x58b/0x6b0 [ 39.551583][ T4656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 39.557064][ T4656] __sock_sendmsg+0x142/0x180 [ 39.561838][ T4656] ____sys_sendmsg+0x31e/0x4e0 [ 39.567010][ T4656] ___sys_sendmsg+0x17b/0x1d0 [ 39.571831][ T4656] __x64_sys_sendmsg+0xd4/0x160 [ 39.576795][ T4656] x64_sys_call+0x191e/0x2ff0 [ 39.581482][ T4656] do_syscall_64+0xd2/0x200 [ 39.586093][ T4656] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.592271][ T4656] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 39.598266][ T4656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.604275][ T4656] RIP: 0033:0x7fc66dddebe9 [ 39.608889][ T4656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.628757][ T4656] RSP: 002b:00007fc66c847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.637286][ T4656] RAX: ffffffffffffffda RBX: 00007fc66e005fa0 RCX: 00007fc66dddebe9 [ 39.645343][ T4656] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 39.653435][ T4656] RBP: 00007fc66de61e19 R08: 0000000000000000 R09: 0000000000000000 [ 39.662627][ T4656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.671480][ T4656] R13: 00007fc66e006038 R14: 00007fc66e005fa0 R15: 00007ffd158e14b8 [ 39.679781][ T4656] [ 39.682825][ T4656] ---[ end trace 0000000000000000 ]--- [ 39.987378][ T4661] loop2: detected capacity change from 0 to 32768 [ 40.001340][ T4683] loop3: detected capacity change from 0 to 2048 [ 40.028923][ T3290] loop2: p1 p3 < > [ 40.036244][ T4661] loop2: p1 p3 < > [ 40.042400][ T4683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.069683][ T4683] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.152941][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 40.152963][ T3828] udevd[3828]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 40.228503][ T3828] udevd[3828]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 40.229218][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 40.238550][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.434329][ T4719] loop2: detected capacity change from 0 to 1024 [ 40.478452][ T4719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.505662][ T4719] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 40.522769][ T4719] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 40.535055][ T4719] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.535055][ T4719] [ 40.544723][ T4719] EXT4-fs (loop2): Total free blocks count 0 [ 40.550903][ T4719] EXT4-fs (loop2): Free/Dirty block details [ 40.557137][ T4719] EXT4-fs (loop2): free_blocks=20480 [ 40.562546][ T4719] EXT4-fs (loop2): dirty_blocks=80 [ 40.567794][ T4719] EXT4-fs (loop2): Block reservation details [ 40.573841][ T4719] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 40.584736][ T4719] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 40.624178][ T4731] loop4: detected capacity change from 0 to 1024 [ 40.663984][ T4731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.802084][ T4742] loop0: detected capacity change from 0 to 1024 [ 40.808935][ T4742] EXT4-fs: Ignoring removed bh option [ 40.814543][ T4742] EXT4-fs: Ignoring removed nobh option [ 40.820193][ T4742] EXT4-fs: inline encryption not supported [ 40.848450][ T4742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.909223][ T4742] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 40.960359][ T4755] loop3: detected capacity change from 0 to 1024 [ 40.973580][ T4755] EXT4-fs: Ignoring removed oldalloc option [ 41.001785][ T4736] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.017945][ T4755] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 41.035166][ T4366] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.052955][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.064693][ T4755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.120590][ T4366] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.137040][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.186906][ T4770] SELinux: failed to load policy [ 41.191921][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 41.191936][ T29] audit: type=1400 audit(1755785824.932:935): avc: denied { read } for pid=4773 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 41.219681][ T29] audit: type=1400 audit(1755785824.932:936): avc: denied { open } for pid=4773 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 41.233583][ T4366] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.243106][ T29] audit: type=1400 audit(1755785824.932:937): avc: denied { mounton } for pid=4773 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 41.294555][ T4772] ipvlan2: entered promiscuous mode [ 41.297379][ T29] audit: type=1400 audit(1755785825.006:938): avc: denied { sys_module } for pid=4773 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 41.323034][ T4772] bridge0: port 3(ipvlan2) entered blocking state [ 41.329683][ T4772] bridge0: port 3(ipvlan2) entered disabled state [ 41.345554][ T4772] ipvlan2: entered allmulticast mode [ 41.350954][ T4772] bridge0: entered allmulticast mode [ 41.358190][ T4772] ipvlan2: left allmulticast mode [ 41.363362][ T4772] bridge0: left allmulticast mode [ 41.384847][ T4782] syz.3.468 uses obsolete (PF_INET,SOCK_PACKET) [ 41.394056][ T29] audit: type=1400 audit(1755785825.154:939): avc: denied { ioctl } for pid=4781 comm="syz.3.468" path="socket:[9185]" dev="sockfs" ino=9185 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.420569][ T4366] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.482808][ T4792] loop2: detected capacity change from 0 to 764 [ 41.504584][ T4792] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 41.515552][ T29] audit: type=1400 audit(1755785825.270:940): avc: denied { mount } for pid=4791 comm="syz.2.473" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 41.556563][ T4366] bridge_slave_1: left allmulticast mode [ 41.562263][ T4366] bridge_slave_1: left promiscuous mode [ 41.567946][ T4366] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.588505][ T29] audit: type=1400 audit(1755785825.344:941): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 41.614240][ T4366] bridge_slave_0: left promiscuous mode [ 41.619998][ T4366] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.633971][ T4797] rdma_op ffff888100280980 conn xmit_rdma 0000000000000000 [ 41.641442][ T29] audit: type=1400 audit(1755785825.376:942): avc: denied { create } for pid=4796 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 41.649894][ T4799] loop2: detected capacity change from 0 to 512 [ 41.660807][ T29] audit: type=1400 audit(1755785825.397:943): avc: denied { bind } for pid=4796 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 41.673073][ T4799] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.686139][ T29] audit: type=1400 audit(1755785825.397:944): avc: denied { write } for pid=4796 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 41.716900][ T4799] EXT4-fs (loop2): 1 truncate cleaned up [ 41.723234][ T4799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.764965][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.822582][ T4366] team0: Port device geneve1 removed [ 41.880174][ T4366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.891698][ T4366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.901756][ T4366] bond0 (unregistering): Released all slaves [ 41.927699][ T4800] team0 (unregistering): Port device team_slave_0 removed [ 41.936744][ T4800] team0 (unregistering): Port device team_slave_1 removed [ 41.958470][ T4366] hsr_slave_0: left promiscuous mode [ 41.964481][ T4366] hsr_slave_1: left promiscuous mode [ 41.977210][ T4366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.984764][ T4366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.002867][ T4366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.010597][ T4366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.050872][ T4366] veth1_macvtap: left promiscuous mode [ 42.056455][ T4366] veth0_macvtap: left promiscuous mode [ 42.065766][ T4366] veth1_vlan: left promiscuous mode [ 42.073468][ T4366] veth0_vlan: left promiscuous mode [ 42.199187][ T4366] team0 (unregistering): Port device team_slave_1 removed [ 42.209957][ T4366] team0 (unregistering): Port device team_slave_0 removed [ 42.323466][ T4860] __nla_validate_parse: 6 callbacks suppressed [ 42.323521][ T4860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.501'. [ 42.363439][ T4867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 42.374169][ T4867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 42.405476][ T4773] chnl_net:caif_netlink_parms(): no params data found [ 42.511449][ T4773] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.518851][ T4773] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.533520][ T4773] bridge_slave_0: entered allmulticast mode [ 42.541065][ T4773] bridge_slave_0: entered promiscuous mode [ 42.547984][ T4773] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.555215][ T4773] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.562488][ T4773] bridge_slave_1: entered allmulticast mode [ 42.568908][ T4773] bridge_slave_1: entered promiscuous mode [ 42.575363][ T4887] netlink: 28 bytes leftover after parsing attributes in process `syz.0.510'. [ 42.584274][ T4887] netlink: 28 bytes leftover after parsing attributes in process `syz.0.510'. [ 42.621333][ T4773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.637993][ T4895] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4895 comm=syz.0.514 [ 42.655913][ T4773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.711294][ T4773] team0: Port device team_slave_0 added [ 42.726595][ T4773] team0: Port device team_slave_1 added [ 42.737937][ T4904] loop5: detected capacity change from 0 to 164 [ 42.761853][ T4773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.769048][ T4773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.795535][ T4773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.806903][ T4773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.813904][ T4773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.814089][ T4904] rock: directory entry would overflow storage [ 42.840005][ T4773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.846159][ T4904] rock: sig=0x66, size=4, remaining=3 [ 42.904994][ T4773] hsr_slave_0: entered promiscuous mode [ 42.916970][ T4773] hsr_slave_1: entered promiscuous mode [ 42.923377][ T4773] debugfs: 'hsr0' already exists in 'hsr' [ 42.929203][ T4773] Cannot create hsr debugfs directory [ 42.966639][ T4918] loop0: detected capacity change from 0 to 764 [ 42.975013][ T4918] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 43.031051][ T4773] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 43.041064][ T4773] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 43.051104][ T4773] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 43.060783][ T4773] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 43.113812][ T4773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.131585][ T4773] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.144560][ T4354] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.151793][ T4354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.163323][ T4934] IPv6: Can't replace route, no match found [ 43.176750][ T4773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.187229][ T4773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.204999][ T4354] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.212277][ T4354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.280793][ T4773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.452421][ T4973] loop0: detected capacity change from 0 to 1024 [ 43.464549][ T4773] veth0_vlan: entered promiscuous mode [ 43.479280][ T4973] EXT4-fs: Ignoring removed oldalloc option [ 43.486171][ T4773] veth1_vlan: entered promiscuous mode [ 43.504882][ T4773] veth0_macvtap: entered promiscuous mode [ 43.514221][ T4773] veth1_macvtap: entered promiscuous mode [ 43.520674][ T4973] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 43.538396][ T4773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.556691][ T4973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.558242][ T4986] vlan2: entered allmulticast mode [ 43.586646][ T4773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.619920][ T4354] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.645562][ T4424] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.675567][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.681177][ T4424] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.694017][ T4424] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.766483][ T5010] loop3: detected capacity change from 0 to 512 [ 43.781771][ T5012] syz.6.551 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 43.807687][ T5010] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.552: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 43.855183][ T5010] EXT4-fs error (device loop3): ext4_quota_enable:7131: comm syz.3.552: Bad quota inode: 3, type: 0 [ 43.952009][ T5010] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 43.971356][ T5010] EXT4-fs (loop3): mount failed [ 44.073766][ T5038] loop6: detected capacity change from 0 to 128 [ 44.090939][ T5038] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.117163][ T5038] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.146412][ T4773] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.187072][ T5056] loop6: detected capacity change from 0 to 1024 [ 44.194063][ T5056] EXT4-fs: Ignoring removed bh option [ 44.201909][ T5056] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 44.233388][ T5056] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.264194][ T5070] netlink: 4 bytes leftover after parsing attributes in process `syz.5.575'. [ 44.287700][ T4773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.305956][ T4363] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.315449][ T5070] netlink: 4 bytes leftover after parsing attributes in process `syz.5.575'. [ 44.325793][ T4363] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.348841][ T5072] loop6: detected capacity change from 0 to 1024 [ 44.353445][ T4363] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.357984][ T5074] SELinux: failed to load policy [ 44.369407][ T5072] EXT4-fs: Ignoring removed orlov option [ 44.378179][ T4363] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.399060][ T5072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.666692][ T5100] netlink: 28 bytes leftover after parsing attributes in process `syz.5.590'. [ 44.675878][ T5100] netlink: 28 bytes leftover after parsing attributes in process `syz.5.590'. [ 44.730896][ T4773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.788784][ T5123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.601'. [ 44.800655][ T5123] netlink: 'syz.0.601': attribute type 6 has an invalid length. [ 44.809007][ T5125] netlink: 'syz.5.602': attribute type 3 has an invalid length. [ 44.919107][ C1] hrtimer: interrupt took 27258 ns [ 44.934401][ T5144] loop6: detected capacity change from 0 to 512 [ 44.951284][ T5144] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 44.965053][ T5144] System zones: 0-2, 18-18, 34-34 [ 44.974825][ T5144] EXT4-fs (loop6): orphan cleanup on readonly fs [ 44.988463][ T5144] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.611: bg 0: block 248: padding at end of block bitmap is not set [ 45.008182][ T5144] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.611: Failed to acquire dquot type 1 [ 45.048167][ T5144] EXT4-fs (loop6): 1 orphan inode deleted [ 45.054701][ T4423] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:60: Failed to release dquot type 1 [ 45.084849][ T5144] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.102866][ T5155] loop3: detected capacity change from 0 to 1024 [ 45.127163][ T5155] EXT4-fs: Ignoring removed bh option [ 45.145391][ T5155] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 45.168328][ T5144] syz.6.611 (5144) used greatest stack depth: 9224 bytes left [ 45.177075][ T4773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.283438][ T5155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.571568][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.596747][ T5187] mmap: syz.3.630 (5187) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.730178][ T5205] loop5: detected capacity change from 0 to 1024 [ 45.737441][ T5205] EXT4-fs: Ignoring removed bh option [ 45.754582][ T5205] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 45.776934][ T5205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.825438][ T4109] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.935433][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 45.935447][ T29] audit: type=1326 audit(1755785829.950:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66dddebe9 code=0x7ffc0000 [ 46.001766][ T29] audit: type=1400 audit(1755785829.950:1182): avc: denied { create } for pid=5236 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.021887][ T29] audit: type=1400 audit(1755785829.950:1183): avc: denied { ioctl } for pid=5236 comm="syz.2.650" path="socket:[11096]" dev="sockfs" ino=11096 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.046729][ T29] audit: type=1326 audit(1755785829.992:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc66dddebe9 code=0x7ffc0000 [ 46.064037][ T5238] SELinux: failed to load policy [ 46.070158][ T29] audit: type=1326 audit(1755785829.992:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66dddebe9 code=0x7ffc0000 [ 46.098460][ T29] audit: type=1326 audit(1755785829.992:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66dddebe9 code=0x7ffc0000 [ 46.121970][ T29] audit: type=1326 audit(1755785829.992:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc66dddebe9 code=0x7ffc0000 [ 46.145444][ T29] audit: type=1326 audit(1755785829.992:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66dddebe9 code=0x7ffc0000 [ 46.168750][ T29] audit: type=1326 audit(1755785829.992:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66dddebe9 code=0x7ffc0000 [ 46.192472][ T29] audit: type=1326 audit(1755785829.992:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fc66dddebe9 code=0x7ffc0000 [ 46.259380][ T5254] batadv1: entered promiscuous mode [ 46.373888][ T5275] loop2: detected capacity change from 0 to 128 [ 46.576920][ T5297] IPVS: stopping backup sync thread 5302 ... [ 46.582988][ T5302] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 46.620324][ T5284] loop5: detected capacity change from 0 to 32768 [ 46.639004][ T5304] SELinux: failed to load policy [ 46.907956][ T5355] netlink: 'syz.2.706': attribute type 1 has an invalid length. [ 46.940933][ T5360] SELinux: failed to load policy [ 47.035231][ T5379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 47.255011][ T5394] __nla_validate_parse: 8 callbacks suppressed [ 47.255029][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.725'. [ 47.415087][ T5410] netlink: 'syz.3.732': attribute type 1 has an invalid length. [ 47.449730][ T5410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.475385][ T5410] bond1: (slave geneve2): making interface the new active one [ 47.487215][ T5413] netlink: 268 bytes leftover after parsing attributes in process `syz.5.733'. [ 47.496347][ T5413] unsupported nla_type 65024 [ 47.507598][ T5410] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 47.616887][ T5425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.738'. [ 47.630939][ T5425] netlink: 12 bytes leftover after parsing attributes in process `syz.5.738'. [ 47.726120][ T5437] netlink: 28 bytes leftover after parsing attributes in process `syz.0.744'. [ 47.754816][ T5439] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 47.800815][ T5446] program syz.6.748 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.808329][ T5447] loop5: detected capacity change from 0 to 1024 [ 47.834364][ T5447] EXT4-fs: Ignoring removed orlov option [ 47.853942][ T5447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.174166][ T4109] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.202831][ T5482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.762'. [ 48.224671][ T5480] loop3: detected capacity change from 0 to 8192 [ 48.232428][ T5480] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.249061][ T5480] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 48.257749][ T5480] FAT-fs (loop3): Filesystem has been set read-only [ 48.697329][ T5508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'. [ 48.946876][ T5527] loop0: detected capacity change from 0 to 32768 [ 48.982943][ T5543] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.104455][ T5552] netlink: 'syz.0.795': attribute type 1 has an invalid length. [ 49.112209][ T5552] netlink: 224 bytes leftover after parsing attributes in process `syz.0.795'. [ 49.145978][ T5554] binfmt_misc: register: failed to install interpreter file ./file2 [ 49.181237][ T5558] loop0: detected capacity change from 0 to 1024 [ 49.190670][ T5558] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 49.201723][ T5558] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 49.213704][ T5558] JBD2: no valid journal superblock found [ 49.214286][ T5562] netlink: 'syz.5.800': attribute type 1 has an invalid length. [ 49.219557][ T5558] EXT4-fs (loop0): Could not load journal inode [ 49.278031][ T5558] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 49.280790][ T5570] netlink: 176 bytes leftover after parsing attributes in process `syz.6.804'. [ 49.333331][ T5578] loop0: detected capacity change from 0 to 512 [ 49.341493][ T5578] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 49.358237][ T5578] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.808: corrupted in-inode xattr: overlapping e_value [ 49.373119][ T5578] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.808: couldn't read orphan inode 15 (err -117) [ 49.374694][ T5576] netlink: 'syz.6.807': attribute type 1 has an invalid length. [ 49.385817][ T5578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.392961][ T5576] netlink: 224 bytes leftover after parsing attributes in process `syz.6.807'. [ 49.719931][ T5608] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 49.723386][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.748764][ T5612] capability: warning: `syz.0.823' uses deprecated v2 capabilities in a way that may be insecure [ 49.789049][ T5620] SELinux: failed to load policy [ 49.895804][ T5643] sctp: [Deprecated]: syz.2.833 (pid 5643) Use of int in max_burst socket option deprecated. [ 49.895804][ T5643] Use struct sctp_assoc_value instead [ 50.113698][ T5663] vhci_hcd: invalid port number 96 [ 50.118852][ T5663] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 50.144928][ T5672] smc: net device bond0 applied user defined pnetid SYZ0 [ 50.170445][ T5678] loop5: detected capacity change from 0 to 512 [ 50.178314][ T5678] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 50.190614][ T5678] EXT4-fs (loop5): 1 truncate cleaned up [ 50.197070][ T5678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.245224][ T5685] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 50.245224][ T5685] program syz.0.857 not setting count and/or reply_len properly [ 50.282544][ T4109] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.308738][ T5690] loop0: detected capacity change from 0 to 1024 [ 50.316166][ T5693] loop5: detected capacity change from 0 to 1024 [ 50.316902][ T5690] EXT4-fs: Ignoring removed orlov option [ 50.328457][ T5690] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.328537][ T5693] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 50.346096][ T5693] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 50.357423][ T5693] JBD2: no valid journal superblock found [ 50.358388][ T5690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.363415][ T5693] EXT4-fs (loop5): Could not load journal inode [ 50.431075][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.439566][ T5693] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 50.507313][ T5714] program syz.0.870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.608178][ T5732] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 50.624601][ T5729] loop3: detected capacity change from 0 to 1024 [ 50.633157][ T5729] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 50.644192][ T5729] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 50.656732][ T5729] JBD2: no valid journal superblock found [ 50.662607][ T5729] EXT4-fs (loop3): Could not load journal inode [ 50.677989][ T5729] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 50.750456][ T29] kauditd_printk_skb: 382 callbacks suppressed [ 50.750473][ T29] audit: type=1400 audit(1755785835.029:1573): avc: denied { setopt } for pid=5744 comm="syz.2.884" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.785857][ T5746] pim6reg: entered allmulticast mode [ 50.808373][ T5751] serio: Serial port ptm0 [ 50.915534][ T29] audit: type=1326 audit(1755785835.198:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5759 comm="syz.6.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488121ebe9 code=0x7ffc0000 [ 50.939260][ T29] audit: type=1326 audit(1755785835.198:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5759 comm="syz.6.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488121ebe9 code=0x7ffc0000 [ 51.003029][ T29] audit: type=1326 audit(1755785835.198:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5759 comm="syz.6.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f488121ebe9 code=0x7ffc0000 [ 51.026361][ T29] audit: type=1326 audit(1755785835.198:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5759 comm="syz.6.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488121ebe9 code=0x7ffc0000 [ 51.029087][ T5753] loop2: detected capacity change from 0 to 32768 [ 51.049999][ T29] audit: type=1326 audit(1755785835.198:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5759 comm="syz.6.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488121ebe9 code=0x7ffc0000 [ 51.111997][ T5773] loop6: detected capacity change from 0 to 1024 [ 51.119831][ T5773] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 51.130921][ T5773] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 51.153793][ T5773] JBD2: no valid journal superblock found [ 51.159767][ T5773] EXT4-fs (loop6): Could not load journal inode [ 51.171859][ T29] audit: type=1400 audit(1755785835.473:1579): avc: denied { create } for pid=5774 comm="syz.3.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.176477][ T5773] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 51.275849][ T29] audit: type=1400 audit(1755785835.578:1580): avc: denied { write } for pid=5780 comm="syz.5.899" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.356460][ T5792] vhci_hcd: invalid port number 96 [ 51.361767][ T5792] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 51.393877][ T29] audit: type=1400 audit(1755785835.705:1581): avc: denied { create } for pid=5798 comm="syz.5.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 51.443192][ T29] audit: type=1400 audit(1755785835.726:1582): avc: denied { write } for pid=5798 comm="syz.5.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 51.547926][ T5819] IPVS: Error joining to the multicast group [ 51.686042][ T4354] nci: nci_rsp_packet: unknown rsp opcode 0x211 [ 51.714640][ T5862] loop6: detected capacity change from 0 to 1024 [ 51.722353][ T5862] EXT4-fs: Ignoring removed bh option [ 51.732869][ T5862] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.756538][ T4773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.073808][ T5879] loop3: detected capacity change from 0 to 512 [ 52.080751][ T5879] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.092930][ T5879] EXT4-fs (loop3): 1 truncate cleaned up [ 52.099171][ T5879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.120671][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.138548][ T5882] lo speed is unknown, defaulting to 1000 [ 52.144396][ T5882] lo speed is unknown, defaulting to 1000 [ 52.150690][ T5882] lo speed is unknown, defaulting to 1000 [ 52.157014][ T5882] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 52.164746][ T5882] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 52.174712][ T5882] lo speed is unknown, defaulting to 1000 [ 52.181008][ T5882] lo speed is unknown, defaulting to 1000 [ 52.187272][ T5882] lo speed is unknown, defaulting to 1000 [ 52.193354][ T5882] lo speed is unknown, defaulting to 1000 [ 52.200069][ T5882] lo speed is unknown, defaulting to 1000 [ 52.326471][ T5893] loop3: detected capacity change from 0 to 1024 [ 52.333444][ T5893] EXT4-fs: Ignoring removed orlov option [ 52.341083][ T5893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.413499][ T5875] netlink: 'syz.6.935': attribute type 1 has an invalid length. [ 52.563359][ T5907] loop5: detected capacity change from 0 to 1024 [ 52.577317][ T5907] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.629712][ T4109] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.691936][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.770530][ T5931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 52.790897][ T36] lo speed is unknown, defaulting to 1000 [ 53.419443][ T5944] __nla_validate_parse: 7 callbacks suppressed [ 53.419458][ T5944] netlink: 48 bytes leftover after parsing attributes in process `syz.0.963'. [ 53.447818][ T5946] netlink: 'syz.0.964': attribute type 3 has an invalid length. [ 53.548198][ T5961] netlink: 'syz.0.971': attribute type 7 has an invalid length. [ 53.555970][ T5961] netlink: 32 bytes leftover after parsing attributes in process `syz.0.971'. [ 53.659530][ T5978] loop5: detected capacity change from 0 to 128 [ 53.742942][ T5990] netlink: 'syz.2.994': attribute type 1 has an invalid length. [ 53.759114][ T5990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.785285][ T5990] bond1: (slave geneve2): making interface the new active one [ 53.794122][ T5990] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 53.803155][ T4366] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.812081][ T4366] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.821057][ T4366] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.839854][ T4366] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.878047][ T6002] binfmt_misc: register: failed to install interpreter file ./file0 [ 53.922340][ T4366] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.932870][ T4366] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.980711][ T6008] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 54.018207][ T4366] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.028888][ T4366] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.049574][ T6014] loop2: detected capacity change from 0 to 1024 [ 54.059772][ T6014] EXT4-fs: Ignoring removed bh option [ 54.092779][ T4366] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.103410][ T4366] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.136046][ T6014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.169482][ T6035] siw: device registration error -23 [ 54.179222][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.199357][ T4366] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.209798][ T4366] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.294442][ T6024] lo speed is unknown, defaulting to 1000 [ 54.302025][ T6055] loop3: detected capacity change from 0 to 128 [ 54.313816][ T6056] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1011'. [ 54.325609][ T4366] bridge_slave_1: left allmulticast mode [ 54.331369][ T4366] bridge_slave_1: left promiscuous mode [ 54.337178][ T4366] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.363166][ T4366] bridge_slave_0: left promiscuous mode [ 54.368871][ T4366] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.370335][ T6060] IPv6: NLM_F_CREATE should be specified when creating new route [ 54.659511][ T4366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.670641][ T4366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.678564][ T6081] loop2: detected capacity change from 0 to 512 [ 54.687146][ T4366] bond0 (unregistering): Released all slaves [ 54.693574][ T6081] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 54.702997][ T6081] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1025: iget: bogus i_mode (5) [ 54.716721][ T6081] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1025: couldn't read orphan inode 15 (err -117) [ 54.736836][ T6081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.757072][ T4366] IPVS: stopping master sync thread 4533 ... [ 54.768802][ T6081] ext2 filesystem being mounted at /197/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.786911][ T4366] hsr_slave_0: left promiscuous mode [ 54.792740][ T4366] hsr_slave_1: left promiscuous mode [ 54.804105][ T4366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.811851][ T4366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.820447][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.829980][ T4366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.837477][ T4366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.855069][ T4366] veth1_macvtap: left promiscuous mode [ 54.860712][ T4366] veth0_macvtap: left promiscuous mode [ 54.870799][ T4366] veth1_vlan: left promiscuous mode [ 54.870841][ T4366] veth0_vlan: left promiscuous mode [ 54.910779][ T6096] loop0: detected capacity change from 0 to 512 [ 54.919197][ T6097] sctp: [Deprecated]: syz.2.1028 (pid 6097) Use of struct sctp_assoc_value in delayed_ack socket option. [ 54.919197][ T6097] Use struct sctp_sack_info instead [ 54.937713][ T6096] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.958743][ T6096] EXT4-fs (loop0): 1 truncate cleaned up [ 54.979761][ T6096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.015432][ T4366] team0 (unregistering): Port device team_slave_1 removed [ 55.034475][ T4366] team0 (unregistering): Port device team_slave_0 removed [ 55.042731][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.077609][ T6111] program syz.0.1036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.110905][ T6024] chnl_net:caif_netlink_parms(): no params data found [ 55.198977][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.206203][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.218455][ T6024] bridge_slave_0: entered allmulticast mode [ 55.229449][ T6024] bridge_slave_0: entered promiscuous mode [ 55.243081][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.250246][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.262627][ T6024] bridge_slave_1: entered allmulticast mode [ 55.269515][ T6024] bridge_slave_1: entered promiscuous mode [ 55.276937][ T6104] lo speed is unknown, defaulting to 1000 [ 55.307153][ T6024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.334607][ T6024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.337662][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1043'. [ 55.369342][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.376687][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.412933][ T6024] team0: Port device team_slave_0 added [ 55.420329][ T6024] team0: Port device team_slave_1 added [ 55.427051][ T6104] chnl_net:caif_netlink_parms(): no params data found [ 55.471082][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.478194][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.504355][ T6024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.521466][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.528494][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.554551][ T6024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.614575][ T6024] hsr_slave_0: entered promiscuous mode [ 55.621096][ T6024] hsr_slave_1: entered promiscuous mode [ 55.627245][ T6024] debugfs: 'hsr0' already exists in 'hsr' [ 55.633159][ T6024] Cannot create hsr debugfs directory [ 55.639205][ T6104] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.646380][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.655437][ T6104] bridge_slave_0: entered allmulticast mode [ 55.661849][ T6104] bridge_slave_0: entered promiscuous mode [ 55.668729][ T6104] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.676057][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.684746][ T6104] bridge_slave_1: entered allmulticast mode [ 55.693286][ T6104] bridge_slave_1: entered promiscuous mode [ 55.707232][ T4366] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.723759][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 55.730187][ T29] audit: type=1400 audit(1755785840.081:1705): avc: denied { mounton } for pid=6163 comm="syz.2.1054" path="/200/bus" dev="tmpfs" ino=1047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.784868][ T6169] netlink: 'syz.0.1056': attribute type 3 has an invalid length. [ 55.792679][ T6169] netlink: 'syz.0.1056': attribute type 3 has an invalid length. [ 55.807775][ T4366] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.820898][ T6104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.832492][ T6104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.874576][ T4366] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.886989][ T6104] team0: Port device team_slave_0 added [ 55.896726][ T6176] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 55.905132][ T6176] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 55.905815][ T6104] team0: Port device team_slave_1 added [ 55.911937][ T6176] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 55.911973][ T6176] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 55.930962][ T6176] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 55.937771][ T6176] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 55.944467][ T6176] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 55.951183][ T6176] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 55.957937][ T6176] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 56.088633][ T4366] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.127537][ T6179] loop0: detected capacity change from 0 to 256 [ 56.139547][ T6104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.144514][ T29] audit: type=1326 audit(1755785840.485:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.0.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8bd8ebe9 code=0x7ffc0000 [ 56.146599][ T6104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.170588][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'. [ 56.196434][ T6104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.208362][ T29] audit: type=1326 audit(1755785840.525:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.0.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c8bd8ebe9 code=0x7ffc0000 [ 56.217863][ T6104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.239038][ T29] audit: type=1326 audit(1755785840.525:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.0.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8bd8ebe9 code=0x7ffc0000 [ 56.239064][ T29] audit: type=1326 audit(1755785840.525:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.0.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9c8bd8ebe9 code=0x7ffc0000 [ 56.239096][ T29] audit: type=1326 audit(1755785840.564:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6180 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a509ebe9 code=0x7ffc0000 [ 56.239116][ T29] audit: type=1326 audit(1755785840.564:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6180 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a509ebe9 code=0x7ffc0000 [ 56.247173][ T6104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.270301][ T29] audit: type=1326 audit(1755785840.564:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6180 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f55a509ebe9 code=0x7ffc0000 [ 56.293555][ T6104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.305062][ T6179] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1061'. [ 56.316927][ T29] audit: type=1326 audit(1755785840.564:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6180 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a509ebe9 code=0x7ffc0000 [ 56.316950][ T29] audit: type=1326 audit(1755785840.564:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6180 comm="syz.2.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f55a509ebe9 code=0x7ffc0000 [ 56.402308][ T6184] loop2: detected capacity change from 0 to 2048 [ 56.465004][ T6184] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.474778][ T6104] hsr_slave_0: entered promiscuous mode [ 56.480842][ T6104] hsr_slave_1: entered promiscuous mode [ 56.487679][ T6104] debugfs: 'hsr0' already exists in 'hsr' [ 56.493415][ T6104] Cannot create hsr debugfs directory [ 56.508591][ T6188] loop6: detected capacity change from 0 to 4096 [ 56.515958][ T6188] EXT4-fs: test_dummy_encryption option not supported [ 56.523848][ T6184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.568565][ T4366] bridge_slave_1: left allmulticast mode [ 56.574255][ T4366] bridge_slave_1: left promiscuous mode [ 56.580055][ T4366] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.587879][ T4366] bridge_slave_0: left allmulticast mode [ 56.593526][ T4366] bridge_slave_0: left promiscuous mode [ 56.599375][ T4366] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.608093][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.676817][ T4366] bond1 (unregistering): (slave geneve2): Releasing active interface [ 56.755255][ T6208] loop6: detected capacity change from 0 to 512 [ 56.762424][ T6208] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.771995][ T4366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.782501][ T6208] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1073: Failed to acquire dquot type 1 [ 56.794295][ T4366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.794804][ T6208] EXT4-fs (loop6): 1 truncate cleaned up [ 56.808915][ T6208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.809725][ T4366] bond0 (unregistering): Released all slaves [ 56.833123][ T4366] bond1 (unregistering): Released all slaves [ 56.835048][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1073'. [ 56.848046][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1073'. [ 56.857024][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1073'. [ 56.888022][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1073'. [ 56.908734][ T4366] hsr_slave_0: left promiscuous mode [ 56.914706][ T4366] hsr_slave_1: left promiscuous mode [ 56.920398][ T4366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.928064][ T4366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.942367][ T4366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.950096][ T4366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.960666][ T4366] veth1_macvtap: left promiscuous mode [ 56.966730][ T4366] veth0_macvtap: left promiscuous mode [ 56.972276][ T4366] veth1_vlan: left promiscuous mode [ 56.978342][ T4366] veth0_vlan: left promiscuous mode [ 57.053904][ T3395] lo speed is unknown, defaulting to 1000 [ 57.059913][ T3395] infiniband syz2: ib_query_port failed (-19) [ 57.341834][ T6237] netlink: 'syz.6.1083': attribute type 12 has an invalid length. [ 57.349711][ T6237] netlink: 'syz.6.1083': attribute type 29 has an invalid length. [ 57.358177][ T6237] netlink: 'syz.6.1083': attribute type 12 has an invalid length. [ 57.366124][ T6237] netlink: 'syz.6.1083': attribute type 29 has an invalid length. [ 57.511378][ T6255] netlink: 'syz.0.1091': attribute type 1 has an invalid length. [ 57.547657][ T6255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.555787][ T6024] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 57.572886][ T6024] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 57.581505][ T6024] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 57.594793][ T6255] bond1: (slave geneve2): making interface the new active one [ 57.603443][ T6255] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 57.620655][ T6024] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 57.655464][ T6104] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.666448][ T6104] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.685746][ T6104] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.695861][ T6104] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.777000][ T6024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.795710][ T6104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.807755][ T6104] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.834599][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.841704][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.862592][ T6024] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.872225][ T4424] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.879385][ T4424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.904491][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.911661][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.922680][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.929814][ T4363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.940427][ T6301] net_ratelimit: 3323 callbacks suppressed [ 57.940443][ T6301] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 57.945999][ T6104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.966380][ T6104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.983549][ T6024] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.994038][ T6024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.094946][ T6104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.112526][ T6024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.198785][ T6341] netlink: 'syz.0.1118': attribute type 8 has an invalid length. [ 58.234041][ T6333] SELinux: failed to load policy [ 58.246109][ T6104] veth0_vlan: entered promiscuous mode [ 58.269103][ T6104] veth1_vlan: entered promiscuous mode [ 58.308022][ T6024] veth0_vlan: entered promiscuous mode [ 58.315260][ T6104] veth0_macvtap: entered promiscuous mode [ 58.328340][ T6024] veth1_vlan: entered promiscuous mode [ 58.335725][ T6104] veth1_macvtap: entered promiscuous mode [ 58.354875][ T6104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.370515][ T6024] veth0_macvtap: entered promiscuous mode [ 58.378625][ T6104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.399910][ T6024] veth1_macvtap: entered promiscuous mode [ 58.416113][ T4446] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.431079][ T6024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.446221][ T4363] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.458743][ T6024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.470285][ T4363] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.487024][ T4366] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.509679][ T4366] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.532073][ T4366] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.545347][ T4366] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.555418][ T4366] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.588522][ T6382] loop3: detected capacity change from 0 to 512 [ 58.596104][ T6382] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.608684][ T6382] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1131: corrupted in-inode xattr: overlapping e_value [ 58.624936][ T6382] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1131: couldn't read orphan inode 15 (err -117) [ 58.681972][ T6396] batadv_slave_1: entered promiscuous mode [ 58.688873][ T6394] batadv_slave_1: left promiscuous mode [ 58.727081][ T6401] binfmt_misc: register: failed to install interpreter file ./file0 [ 58.832408][ T6410] __nla_validate_parse: 10 callbacks suppressed [ 58.832496][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1144'. [ 58.847915][ T6410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1144'. [ 58.856846][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1144'. [ 58.881862][ T6410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1144'. [ 58.890932][ T6410] netlink: 'syz.2.1144': attribute type 6 has an invalid length. [ 59.088025][ T6443] SELinux: policydb table sizes (0,538976256) do not match mine (8,7) [ 59.097487][ T6443] SELinux: failed to load policy [ 59.105650][ T6447] loop6: detected capacity change from 0 to 512 [ 59.113303][ T6447] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.127104][ T6447] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.1162: corrupted in-inode xattr: overlapping e_value [ 59.142617][ T6447] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1162: couldn't read orphan inode 15 (err -117) [ 59.184464][ T6450] netlink: 'syz.2.1163': attribute type 13 has an invalid length. [ 59.196583][ T6450] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 59.476815][ T6478] netlink: 'syz.6.1175': attribute type 1 has an invalid length. [ 59.552117][ T6482] loop5: detected capacity change from 0 to 128 [ 59.572164][ T6482] FAT-fs (loop5): bogus sectors per cluster 7 [ 59.578329][ T6482] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 59.587554][ T6482] FAT-fs (loop5): Can't find a valid FAT filesystem [ 59.780989][ T4363] nci: nci_ntf_packet: unknown ntf opcode 0x102 [ 59.940671][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'. [ 59.949683][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1192'. [ 60.035570][ T6531] geneve3: entered promiscuous mode [ 60.040993][ T6531] geneve3: entered allmulticast mode [ 60.664736][ T6564] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 60.757446][ T6577] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1219'. [ 60.768265][ T6577] bond0: option downdelay: invalid value (18446744073709551615) [ 60.776118][ T6577] bond0: option downdelay: allowed values 0 - 2147483647 [ 60.790100][ T6582] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1222'. [ 60.800123][ T6582] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1222'. [ 60.865088][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1227'. [ 60.874165][ T6592] bridge: RTM_NEWNEIGH with invalid ether address [ 60.975897][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 60.975915][ T29] audit: type=1326 audit(1755785845.149:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 61.022122][ T29] audit: type=1326 audit(1755785845.177:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 61.045863][ T29] audit: type=1326 audit(1755785845.177:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 61.073626][ T29] audit: type=1326 audit(1755785845.253:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803e2febe9 code=0x7ffc0000 [ 61.097109][ T29] audit: type=1326 audit(1755785845.253:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803e2febe9 code=0x7ffc0000 [ 61.120819][ T29] audit: type=1326 audit(1755785845.253:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f803e2febe9 code=0x7ffc0000 [ 61.144489][ T29] audit: type=1326 audit(1755785845.253:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803e2febe9 code=0x7ffc0000 [ 61.168283][ T29] audit: type=1326 audit(1755785845.253:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f803e2febe9 code=0x7ffc0000 [ 61.191700][ T29] audit: type=1326 audit(1755785845.262:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803e2febe9 code=0x7ffc0000 [ 61.215230][ T29] audit: type=1326 audit(1755785845.262:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803e2febe9 code=0x7ffc0000 [ 61.249067][ T4423] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x2c [ 61.306449][ T6631] loop3: detected capacity change from 0 to 128 [ 61.313061][ T6631] EXT4-fs: Ignoring removed nobh option [ 61.337452][ T6631] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.402823][ T6654] rdma_op ffff88811aa9c580 conn xmit_rdma 0000000000000000 [ 61.672694][ T6688] netlink: 'syz.2.1268': attribute type 2 has an invalid length. [ 61.680731][ T6688] netlink: 'syz.2.1268': attribute type 1 has an invalid length. [ 61.857855][ T6707] geneve2: entered promiscuous mode [ 61.863111][ T6707] geneve2: entered allmulticast mode [ 62.060085][ T6743] gretap0: refused to change device tx_queue_len [ 62.062895][ T4424] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x2c [ 62.082966][ T6743] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 62.145625][ T6746] geneve2: entered promiscuous mode [ 62.151066][ T6746] geneve2: entered allmulticast mode [ 62.187857][ T6751] netlink: 'syz.3.1295': attribute type 13 has an invalid length. [ 62.363901][ T6751] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 62.537240][ T4366] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x2c [ 62.571940][ T6793] loop5: detected capacity change from 0 to 128 [ 62.615015][ T6793] syz.5.1316: attempt to access beyond end of device [ 62.615015][ T6793] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 62.653873][ T6802] netlink: 'syz.6.1318': attribute type 2 has an invalid length. [ 62.661768][ T6802] netlink: 'syz.6.1318': attribute type 1 has an invalid length. [ 62.859142][ T6841] dvmrp0: entered allmulticast mode [ 63.017599][ T6857] loop3: detected capacity change from 0 to 512 [ 63.046921][ T6857] EXT4-fs: Ignoring removed i_version option [ 63.053206][ T6857] EXT4-fs: Ignoring removed nobh option [ 63.064627][ T806] IPVS: starting estimator thread 0... [ 63.068890][ T6857] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.071964][ T6855] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 63.094868][ T6867] vlan2: entered allmulticast mode [ 63.100461][ T6867] dummy0: entered allmulticast mode [ 63.119262][ T6857] EXT4-fs (loop3): 1 truncate cleaned up [ 63.155900][ T6865] IPVS: using max 3552 ests per chain, 177600 per kthread [ 63.345245][ T6893] loop2: detected capacity change from 0 to 2048 [ 63.400817][ T6893] loop2: p1 < > p4 [ 63.406313][ T6893] loop2: p4 size 8388608 extends beyond EOD, truncated [ 63.658244][ T6934] 9pnet_fd: Insufficient options for proto=fd [ 63.708213][ T6942] netlink: 'syz.2.1384': attribute type 6 has an invalid length. [ 63.898853][ T6946] vlan2: entered allmulticast mode [ 63.904142][ T6946] dummy0: entered allmulticast mode [ 63.927300][ T6949] bridge_slave_1: left allmulticast mode [ 63.933309][ T6949] bridge_slave_1: left promiscuous mode [ 63.939121][ T6949] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.953338][ T6949] bridge_slave_0: left allmulticast mode [ 63.959083][ T6949] bridge_slave_0: left promiscuous mode [ 63.965053][ T6949] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.244945][ T6982] veth3: entered promiscuous mode [ 64.291662][ T6990] netlink: 'syz.2.1405': attribute type 10 has an invalid length. [ 64.301183][ T6990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.310103][ T6990] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 64.351712][ T7000] __nla_validate_parse: 4 callbacks suppressed [ 64.351823][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1409'. [ 64.411907][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1415'. [ 64.421185][ T7013] netlink: 'syz.5.1415': attribute type 19 has an invalid length. [ 64.429025][ T7013] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1415'. [ 64.443475][ T4423] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.453210][ T4423] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.462066][ T4423] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.471948][ T4446] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 64.481244][ T4423] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.317446][ T7046] netlink: 'syz.0.1429': attribute type 13 has an invalid length. [ 65.343817][ T7046] gretap0: refused to change device tx_queue_len [ 65.356420][ T7046] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 65.400216][ T7051] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1432'. [ 65.625111][ T7079] loop6: detected capacity change from 0 to 512 [ 65.631723][ T7079] EXT4-fs: Ignoring removed i_version option [ 65.637840][ T7079] EXT4-fs: Ignoring removed nobh option [ 65.658135][ T7079] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 65.670731][ T7079] EXT4-fs (loop6): 1 truncate cleaned up [ 65.677045][ T7079] EXT4-fs mount: 9 callbacks suppressed [ 65.677064][ T7079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.817518][ T7095] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.828122][ T7095] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.877826][ T7098] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1454'. [ 65.888470][ T7098] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1454'. [ 65.913987][ T4773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.922938][ T7095] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.933451][ T7095] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.007029][ T7095] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.017404][ T7095] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.105066][ T7095] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.115593][ T7095] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.145816][ T7116] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1463'. [ 66.162715][ T7112] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 66.208734][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1468'. [ 66.221265][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1468'. [ 66.236831][ T4363] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.245261][ T4363] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.273783][ T4363] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.282204][ T4363] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.297341][ T7134] pimreg: entered allmulticast mode [ 66.316539][ T7134] pimreg: left allmulticast mode [ 66.325037][ T7138] loop3: detected capacity change from 0 to 1024 [ 66.341660][ T4363] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.350119][ T4363] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.362451][ T4363] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.362841][ T7138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.370830][ T4363] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.409898][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 66.409912][ T29] audit: type=1400 audit(2000000000.411:2334): avc: denied { getopt } for pid=7143 comm="syz.0.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.437021][ T7138] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1474: bg 0: block 494: padding at end of block bitmap is not set [ 66.451757][ T7138] EXT4-fs (loop3): Remounting filesystem read-only [ 66.460678][ T7138] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 66.472205][ T29] audit: type=1400 audit(2000000000.411:2335): avc: denied { remove_name } for pid=7137 comm="syz.3.1474" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.494924][ T29] audit: type=1400 audit(2000000000.411:2336): avc: denied { rename } for pid=7137 comm="syz.3.1474" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.531233][ T6104] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.533165][ T7151] loop6: detected capacity change from 0 to 512 [ 66.549808][ T7153] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1480'. [ 66.559464][ T7151] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1479: casefold flag without casefold feature [ 66.574239][ T7151] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1479: couldn't read orphan inode 15 (err -117) [ 66.587337][ T7151] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.679168][ T29] audit: type=1400 audit(2000000000.664:2337): avc: denied { map } for pid=7150 comm="syz.6.1479" path="/201/file0/cgroup.controllers" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 66.705125][ T7171] netlink: 'syz.2.1487': attribute type 13 has an invalid length. [ 66.723982][ T7171] gretap0: refused to change device tx_queue_len [ 66.738191][ T7177] netlink: 'syz.0.1499': attribute type 27 has an invalid length. [ 66.749142][ T7171] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 66.844123][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.851475][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.913343][ T7199] IPv6: Can't replace route, no match found [ 66.930904][ T7177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.944231][ T7177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.959024][ T4773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.037320][ T29] audit: type=1400 audit(2000000001.000:2338): avc: denied { connect } for pid=7208 comm="syz.3.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.057126][ T29] audit: type=1400 audit(2000000001.000:2339): avc: denied { setopt } for pid=7208 comm="syz.3.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.076674][ T29] audit: type=1400 audit(2000000001.000:2340): avc: denied { ioctl } for pid=7208 comm="syz.3.1495" path="socket:[18954]" dev="sockfs" ino=18954 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.104899][ T7205] loop2: detected capacity change from 0 to 2048 [ 67.156283][ T7181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.165003][ T7181] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.174759][ T7181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.200858][ T4446] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.201742][ T7205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 67.209362][ T4446] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.234934][ T4446] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.243783][ T4446] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.252471][ T4446] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.261114][ T4446] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.270421][ T4446] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.278971][ T4446] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.310057][ T7204] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.369095][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 67.409736][ T7228] loop2: detected capacity change from 0 to 512 [ 67.428465][ T7228] EXT4-fs: Ignoring removed nobh option [ 67.451646][ T7228] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1503: corrupted inode contents [ 67.470485][ T7228] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.1503: mark_inode_dirty error [ 67.491690][ T7228] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1503: corrupted inode contents [ 67.512839][ T7228] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1503: mark_inode_dirty error [ 67.552587][ T7228] Quota error (device loop2): write_blk: dquota write failed [ 67.583601][ T7228] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 67.594029][ T7228] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1503: Failed to acquire dquot type 0 [ 67.605337][ T29] audit: type=1326 audit(2000000001.515:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7240 comm="syz.5.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803e2febe9 code=0x7ffc0000 [ 67.649469][ T7228] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1503: corrupted inode contents [ 67.665048][ T7228] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.1503: mark_inode_dirty error [ 67.696310][ T7228] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1503: corrupted inode contents [ 67.696490][ T7244] ipvlan2: entered promiscuous mode [ 67.727004][ T7244] bridge0: port 3(ipvlan2) entered blocking state [ 67.733511][ T7244] bridge0: port 3(ipvlan2) entered disabled state [ 67.739221][ T7228] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1503: mark_inode_dirty error [ 67.751289][ T7244] ipvlan2: entered allmulticast mode [ 67.756670][ T7244] bridge0: entered allmulticast mode [ 67.773407][ T7228] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1503: corrupted inode contents [ 67.776510][ T7244] ipvlan2: left allmulticast mode [ 67.790871][ T7244] bridge0: left allmulticast mode [ 67.801473][ T7228] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 67.819316][ T7228] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1503: corrupted inode contents [ 67.832934][ T7228] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.1503: mark_inode_dirty error [ 67.846892][ T7228] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 67.856484][ T7228] EXT4-fs (loop2): 1 truncate cleaned up [ 67.867039][ T7228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.880322][ T7250] netlink: 'syz.5.1512': attribute type 27 has an invalid length. [ 67.887784][ T7228] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.945803][ T7250] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.953154][ T7250] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.953865][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.003319][ T7250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.014710][ T7250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.069176][ T7250] veth3: left promiscuous mode [ 68.094922][ T7255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.110405][ T7255] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.135071][ T7255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 68.164988][ T4446] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.173922][ T4446] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.189781][ T4446] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.198722][ T4446] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.223216][ T4446] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.232215][ T4446] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.241205][ T4446] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.250170][ T4446] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.677360][ T7308] loop5: detected capacity change from 0 to 256 [ 68.740548][ T7311] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 68.755461][ T7311] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 68.819408][ T7319] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7319 comm=syz.0.1541 [ 68.832054][ T7319] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7319 comm=syz.0.1541 [ 68.959184][ T7339] bridge_slave_1: left allmulticast mode [ 68.964881][ T7339] bridge_slave_1: left promiscuous mode [ 68.970662][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.997650][ T7339] bridge_slave_0: left allmulticast mode [ 69.004101][ T7339] bridge_slave_0: left promiscuous mode [ 69.009994][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.609240][ T7392] bridge_slave_1: left allmulticast mode [ 69.614948][ T7392] bridge_slave_1: left promiscuous mode [ 69.620764][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.638269][ T7392] bridge_slave_0: left allmulticast mode [ 69.644050][ T7392] bridge_slave_0: left promiscuous mode [ 69.649731][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.753993][ T7409] ipvlan2: entered promiscuous mode [ 69.767140][ T7409] bridge0: port 3(ipvlan2) entered blocking state [ 69.773787][ T7409] bridge0: port 3(ipvlan2) entered disabled state [ 69.790237][ T7409] ipvlan2: entered allmulticast mode [ 69.795586][ T7409] bridge0: entered allmulticast mode [ 69.802144][ T7409] ipvlan2: left allmulticast mode [ 69.807199][ T7409] bridge0: left allmulticast mode [ 70.092002][ T7423] __nla_validate_parse: 5 callbacks suppressed [ 70.092051][ T7423] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1587'. [ 70.329547][ T7452] loop3: detected capacity change from 0 to 2048 [ 70.358311][ T7452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 70.375277][ T7451] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 70.403199][ T6104] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 70.646569][ T7492] program syz.5.1619 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.836205][ T7512] loop3: detected capacity change from 0 to 764 [ 71.130064][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1644'. [ 71.140150][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1630'. [ 71.151696][ T7528] bridge_slave_1: left allmulticast mode [ 71.157489][ T7528] bridge_slave_1: left promiscuous mode [ 71.163251][ T7528] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.173264][ T7528] bridge_slave_0: left allmulticast mode [ 71.179114][ T7528] bridge_slave_0: left promiscuous mode [ 71.185131][ T7528] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.225711][ T7534] loop3: detected capacity change from 0 to 8192 [ 71.722735][ T7592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1666'. [ 71.731882][ T7592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1666'. [ 71.781464][ T7595] loop5: detected capacity change from 0 to 1024 [ 71.806412][ T7595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 71.823563][ T7595] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 1: comm syz.5.1667: lblock 1 mapped to illegal pblock 1 (length 4) [ 71.839168][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 71.839187][ T29] audit: type=1400 audit(72.032:2580): avc: denied { write } for pid=7594 comm="syz.5.1667" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.867044][ T29] audit: type=1400 audit(72.032:2581): avc: denied { open } for pid=7594 comm="syz.5.1667" path="/96/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.928949][ T7595] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 4 with error 117 [ 71.941384][ T7595] EXT4-fs (loop5): This should not happen!! Data will be lost [ 71.941384][ T7595] [ 71.959954][ T29] audit: type=1400 audit(72.153:2582): avc: denied { read } for pid=7594 comm="syz.5.1667" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.983242][ T7605] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.1667: lblock 3 mapped to illegal pblock 3 (length 2) [ 72.005259][ T7602] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 7: comm syz.5.1667: lblock 7 mapped to illegal pblock 7 (length 1) [ 72.028072][ T7607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1670'. [ 72.040385][ T7607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1670'. [ 72.054122][ T7602] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 117 [ 72.066551][ T7602] EXT4-fs (loop5): This should not happen!! Data will be lost [ 72.066551][ T7602] [ 72.116272][ T6024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 72.258261][ T29] audit: type=1107 audit(72.434:2583): pid=7622 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='`' [ 72.333089][ T7631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.345617][ T7631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.515596][ T29] audit: type=1400 audit(72.677:2584): avc: denied { getopt } for pid=7652 comm="syz.3.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.625689][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1697'. [ 72.706681][ T7681] program syz.2.1704 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.767397][ T7691] loop6: detected capacity change from 0 to 128 [ 72.794167][ T7693] wireguard0: entered promiscuous mode [ 72.800038][ T7693] wireguard0: entered allmulticast mode [ 72.857196][ T29] audit: type=1326 audit(72.995:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.6.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488121ebe9 code=0x7ffc0000 [ 72.880443][ T29] audit: type=1326 audit(72.995:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.6.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488121ebe9 code=0x7ffc0000 [ 72.904798][ T29] audit: type=1326 audit(73.033:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.6.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f488121ebe9 code=0x7ffc0000 [ 72.927755][ T29] audit: type=1326 audit(73.033:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.6.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488121ebe9 code=0x7ffc0000 [ 72.950569][ T29] audit: type=1326 audit(73.033:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.6.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f488121ebe9 code=0x7ffc0000 [ 73.009900][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1727'. [ 73.149507][ T7733] netlink: 'syz.0.1726': attribute type 1 has an invalid length. [ 73.351996][ T7759] netlink: 'syz.2.1739': attribute type 21 has an invalid length. [ 73.422404][ T7759] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1739'. [ 73.431618][ T7759] netlink: 'syz.2.1739': attribute type 1 has an invalid length. [ 73.626553][ T7779] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 73.815280][ T7806] bridge_slave_1: left allmulticast mode [ 73.821021][ T7806] bridge_slave_1: left promiscuous mode [ 73.826722][ T7806] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.840964][ T7806] bridge_slave_0: left allmulticast mode [ 73.846899][ T7806] bridge_slave_0: left promiscuous mode [ 73.853046][ T7806] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.888984][ T7810] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7810 comm=syz.3.1762 [ 73.901931][ T7810] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7810 comm=syz.3.1762 [ 73.930192][ T7808] SELinux: failed to load policy [ 74.044991][ T7824] 9pnet_fd: Insufficient options for proto=fd [ 74.415971][ T7850] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 74.424539][ T7855] netlink: 'syz.2.1782': attribute type 33 has an invalid length. [ 74.443101][ T7855] bond0: (slave dummy0): Releasing backup interface [ 74.477836][ T7862] loop6: detected capacity change from 0 to 512 [ 74.495376][ T7862] EXT4-fs: Ignoring removed i_version option [ 74.509025][ T7871] netlink: 'syz.5.1788': attribute type 21 has an invalid length. [ 74.533806][ T7862] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 74.542748][ T7862] System zones: 0-2, 18-18, 34-35 [ 74.571497][ T7862] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.637461][ T7884] wireguard0: entered promiscuous mode [ 74.642957][ T7884] wireguard0: entered allmulticast mode [ 74.651381][ T4773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.666595][ T7889] rdma_op ffff88811f594980 conn xmit_rdma 0000000000000000 [ 75.353220][ T7987] rdma_op ffff88811f593d80 conn xmit_rdma 0000000000000000 [ 75.433031][ T8002] loop6: detected capacity change from 0 to 128 [ 75.442350][ T8002] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.456052][ T8002] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.498149][ T8011] __nla_validate_parse: 15 callbacks suppressed [ 75.498178][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1853'. [ 75.506294][ T8012] random: crng reseeded on system resumption [ 75.526016][ T8011] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 75.537401][ T8011] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 75.565573][ T8018] SELinux: Context system_u:object_r:crack_db_t:s0 is not valid (left unmapped). [ 75.846595][ T8044] SELinux: failed to load policy [ 75.918478][ T8054] netlink: 'syz.3.1873': attribute type 33 has an invalid length. [ 75.926392][ T8054] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1873'. [ 75.937488][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1873'. [ 76.158656][ T8085] syz_tun: entered allmulticast mode [ 76.165265][ T8084] syz_tun: left allmulticast mode [ 76.192096][ T8090] netlink: 'syz.0.1889': attribute type 33 has an invalid length. [ 76.200060][ T8090] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1889'. [ 76.213361][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1889'. [ 76.302877][ T8104] random: crng reseeded on system resumption [ 76.517718][ T8133] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1906'. [ 76.543582][ T8133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.553379][ T8133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.563951][ T8133] bond0 (unregistering): Released all slaves [ 76.606935][ T8141] netlink: 'syz.3.1910': attribute type 9 has an invalid length. [ 76.614795][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1910'. [ 76.627745][ T4363] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.627800][ T8141] netlink: 'syz.3.1910': attribute type 9 has an invalid length. [ 76.640156][ T4363] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.644442][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1910'. [ 76.654534][ T4363] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.684908][ T4363] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.784854][ T8159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.793715][ T8159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.817728][ T8163] syzkaller1: entered promiscuous mode [ 76.823235][ T8163] syzkaller1: entered allmulticast mode [ 76.947680][ T8167] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 76.956363][ T8167] SELinux: failed to load policy [ 76.973594][ T3395] IPVS: starting estimator thread 0... [ 77.070304][ T8171] IPVS: using max 4512 ests per chain, 225600 per kthread [ 77.435540][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 77.435557][ T29] audit: type=1400 audit(77.289:2679): avc: denied { add_name } for pid=8205 comm="syz.5.1940" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 77.465642][ T29] audit: type=1400 audit(77.289:2680): avc: denied { associate } for pid=8205 comm="syz.5.1940" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 77.749792][ T29] audit: type=1400 audit(77.579:2681): avc: denied { create } for pid=8231 comm="syz.6.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.935998][ T29] audit: type=1326 audit(77.747:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.3.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 77.960045][ T29] audit: type=1326 audit(77.747:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.3.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 77.983219][ T29] audit: type=1326 audit(77.747:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.3.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 78.006043][ T29] audit: type=1326 audit(77.747:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.3.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 78.028749][ T29] audit: type=1326 audit(77.747:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.3.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 78.031970][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1961'. [ 78.051550][ T29] audit: type=1326 audit(77.747:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.3.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 78.079589][ T8249] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1961'. [ 78.083183][ T29] audit: type=1326 audit(77.747:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.3.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 78.193838][ T8259] netlink: 'syz.2.1966': attribute type 4 has an invalid length. [ 78.434233][ T8262] chnl_net:caif_netlink_parms(): no params data found [ 78.497091][ T8262] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.504489][ T8262] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.515659][ T8262] bridge_slave_0: entered allmulticast mode [ 78.526388][ T8262] bridge_slave_0: entered promiscuous mode [ 78.541367][ T8262] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.548602][ T8262] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.560711][ T8262] bridge_slave_1: entered allmulticast mode [ 78.576523][ T8262] bridge_slave_1: entered promiscuous mode [ 78.606105][ T8262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.631492][ T8262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.666387][ T8262] team0: Port device team_slave_0 added [ 78.676510][ T8262] team0: Port device team_slave_1 added [ 78.690267][ T8316] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 78.698168][ T8316] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 78.706054][ T8316] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 78.714143][ T8316] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 78.721977][ T8316] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 78.729804][ T8316] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 78.737639][ T8316] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 78.745504][ T8316] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 78.753457][ T8316] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 78.761264][ T8316] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 78.805743][ T8262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.812708][ T8262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.838791][ T8262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.850990][ T8262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.858008][ T8262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.884164][ T8262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.931247][ T8262] hsr_slave_0: entered promiscuous mode [ 78.946693][ T8262] hsr_slave_1: entered promiscuous mode [ 78.953439][ T8262] debugfs: 'hsr0' already exists in 'hsr' [ 78.959344][ T8262] Cannot create hsr debugfs directory [ 79.179483][ T8364] pim6reg: entered allmulticast mode [ 79.186900][ T8364] pim6reg: left allmulticast mode [ 79.353288][ T8262] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.371403][ T8262] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.381755][ T8262] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 79.397795][ T8262] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.479161][ T8406] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 79.520322][ T8406] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 79.549334][ T8262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.570324][ T8262] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.586221][ T4424] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.593342][ T4424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.627567][ T4423] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.634710][ T4423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.762583][ T8262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.983538][ T8262] veth0_vlan: entered promiscuous mode [ 79.994102][ T8262] veth1_vlan: entered promiscuous mode [ 80.030390][ T8262] veth0_macvtap: entered promiscuous mode [ 80.100532][ T8262] veth1_macvtap: entered promiscuous mode [ 80.112006][ T8262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.129829][ T8262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.150884][ T4366] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.178712][ T4363] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.209565][ T4363] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.237338][ T4363] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.289175][ T8481] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 80.330393][ T8481] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 80.370737][ T8502] pim6reg: left allmulticast mode [ 80.807382][ T8543] pim6reg: entered allmulticast mode [ 80.831066][ T8543] pim6reg: left allmulticast mode [ 81.056092][ T8568] __nla_validate_parse: 6 callbacks suppressed [ 81.056185][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2083'. [ 81.181753][ T8578] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2088'. [ 81.194310][ T8578] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2088'. [ 81.290148][ T8589] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 81.366525][ T8598] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 81.476720][ T8616] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 81.657093][ T8637] validate_nla: 1 callbacks suppressed [ 81.657183][ T8637] netlink: 'syz.0.2116': attribute type 21 has an invalid length. [ 81.671392][ T8637] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2116'. [ 81.704417][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2118'. [ 81.741694][ T8645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2120'. [ 81.750766][ T8645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2120'. [ 81.774120][ T8652] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 81.796990][ T8651] IPVS: stopping master sync thread 8652 ... [ 81.899849][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2125'. [ 82.042111][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2141'. [ 82.069110][ T8675] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2 [ 82.093877][ T8678] serio: Serial port ptm1 [ 82.627173][ T8729] netlink: 'syz.3.2158': attribute type 30 has an invalid length. [ 82.917072][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 82.917088][ T29] audit: type=1400 audit(82.405:2935): avc: denied { setopt } for pid=8755 comm="syz.3.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.969783][ T29] audit: type=1400 audit(82.452:2936): avc: denied { read write } for pid=8757 comm="syz.0.2172" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.970230][ T8758] program syz.0.2172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.993170][ T29] audit: type=1400 audit(82.452:2937): avc: denied { open } for pid=8757 comm="syz.0.2172" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.004669][ T8758] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 83.027746][ T29] audit: type=1400 audit(82.452:2938): avc: denied { ioctl } for pid=8757 comm="syz.0.2172" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.064826][ T29] audit: type=1326 audit(82.546:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8759 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 83.087986][ T29] audit: type=1326 audit(82.546:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8759 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 83.112608][ T29] audit: type=1326 audit(82.546:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8759 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 83.135478][ T29] audit: type=1326 audit(82.546:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8759 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 83.158226][ T29] audit: type=1326 audit(82.546:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8759 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 83.181201][ T29] audit: type=1326 audit(82.546:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8759 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 83.789553][ T8828] netlink: 'syz.3.2202': attribute type 2 has an invalid length. [ 83.846411][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810464d600: rx timeout, send abort [ 84.380986][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810418f000: rx timeout, send abort [ 84.389388][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810464d600: abort rx timeout. Force session deactivation [ 84.696553][ T8877] 9pnet_fd: Insufficient options for proto=fd [ 84.923751][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810418f000: abort rx timeout. Force session deactivation [ 85.129038][ T8922] netlink: 'syz.6.2243': attribute type 10 has an invalid length. [ 85.157899][ T8922] team0: Device hsr_slave_0 failed to register rx_handler [ 85.261831][ T8945] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 85.349999][ T8961] netem: change failed [ 85.629597][ T8985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.640717][ T8985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.023213][ T9011] syzkaller1: entered promiscuous mode [ 86.028722][ T9011] syzkaller1: entered allmulticast mode [ 86.088625][ T9017] net_ratelimit: 46 callbacks suppressed [ 86.088639][ T9017] openvswitch: netlink: Message has 6 unknown bytes. [ 86.553273][ T9055] __nla_validate_parse: 10 callbacks suppressed [ 86.553293][ T9055] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2306'. [ 86.568688][ T9055] netem: unknown loss type 13 [ 86.573364][ T9055] netem: change failed [ 86.725826][ T9062] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2309'. [ 86.736511][ T9062] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 86.744249][ T9062] 0ªî{X¹¦: entered allmulticast mode [ 86.750641][ T9062] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 86.901851][ T9068] netlink: 'syz.6.2312': attribute type 10 has an invalid length. [ 86.919344][ T9068] team0: Device hsr_slave_0 failed to register rx_handler [ 87.126324][ T9094] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9094 comm=syz.2.2324 [ 87.138887][ T9094] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9094 comm=syz.2.2324 [ 87.363547][ T9124] rdma_op ffff888103f9d580 conn xmit_rdma 0000000000000000 [ 87.445880][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2346'. [ 87.503069][ T9150] 9pnet_fd: Insufficient options for proto=fd [ 87.540579][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119f66800: rx timeout, send abort [ 87.552177][ T9158] lo speed is unknown, defaulting to 1000 [ 87.558545][ T9158] lo speed is unknown, defaulting to 1000 [ 87.564515][ T9158] lo speed is unknown, defaulting to 1000 [ 87.571804][ T9158] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 87.583875][ T9158] lo speed is unknown, defaulting to 1000 [ 87.590423][ T9158] lo speed is unknown, defaulting to 1000 [ 87.596641][ T9158] lo speed is unknown, defaulting to 1000 [ 87.604015][ T9158] lo speed is unknown, defaulting to 1000 [ 87.610401][ T9158] lo speed is unknown, defaulting to 1000 [ 87.616565][ T9158] lo speed is unknown, defaulting to 1000 [ 87.824600][ T9200] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2374'. [ 87.836384][ T9200] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2374'. [ 87.905119][ T9212] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2379'. [ 87.926988][ T9212] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 87.938158][ T9212] 0ªî{X¹¦: entered allmulticast mode [ 87.944197][ T9212] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 88.004781][ T9222] siw: device registration error -23 [ 88.053899][ T9229] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2388'. [ 88.059518][ T9230] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 88.075135][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119f67400: rx timeout, send abort [ 88.083868][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119f66800: abort rx timeout. Force session deactivation [ 88.130797][ T9240] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2393'. [ 88.139943][ T9240] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2393'. [ 88.172737][ T9243] loop9: detected capacity change from 0 to 7 [ 88.249590][ T9253] hub 9-0:1.0: USB hub found [ 88.272363][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 88.272378][ T29] audit: type=1400 audit(87.419:3186): avc: denied { connect } for pid=9257 comm="syz.0.2402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.274117][ T9253] hub 9-0:1.0: 8 ports detected [ 88.302973][ T29] audit: type=1400 audit(87.428:3187): avc: denied { write } for pid=9257 comm="syz.0.2402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.400187][ T9259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2401'. [ 88.481179][ T29] audit: type=1400 audit(87.606:3188): avc: denied { mounton } for pid=9242 comm="syz.6.2394" path="/proc/783/task" dev="proc" ino=25812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 88.515640][ T29] audit: type=1326 audit(87.644:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.3.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 88.538758][ T29] audit: type=1326 audit(87.644:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.3.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 88.561634][ T29] audit: type=1326 audit(87.644:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.3.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 88.584611][ T29] audit: type=1326 audit(87.644:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.3.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 88.607426][ T29] audit: type=1326 audit(87.644:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.3.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 88.617907][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119f67400: abort rx timeout. Force session deactivation [ 88.630271][ T29] audit: type=1326 audit(87.644:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.3.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 88.663124][ T29] audit: type=1326 audit(87.644:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.3.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe400dfebe9 code=0x7ffc0000 [ 89.088872][ T9353] smc: net device bond0 erased user defined pnetid SYZ0 [ 89.232264][ T9385] hub 9-0:1.0: USB hub found [ 89.238697][ T9385] hub 9-0:1.0: 8 ports detected [ 89.396093][ T9411] hub 9-0:1.0: USB hub found [ 89.401036][ T9411] hub 9-0:1.0: 8 ports detected [ 89.579249][ T9425] SELinux: failed to load policy [ 89.592706][ T9413] ================================================================== [ 89.600899][ T9413] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 89.609499][ T9413] [ 89.611830][ T9413] write to 0xffff88810c5e35e8 of 8 bytes by task 9421 on cpu 1: [ 89.619449][ T9413] shmem_file_splice_read+0x470/0x600 [ 89.624863][ T9413] splice_direct_to_actor+0x26f/0x680 [ 89.630266][ T9413] do_splice_direct+0xda/0x150 [ 89.635037][ T9413] do_sendfile+0x380/0x650 [ 89.639468][ T9413] __x64_sys_sendfile64+0x105/0x150 [ 89.644678][ T9413] x64_sys_call+0x2bb0/0x2ff0 [ 89.649357][ T9413] do_syscall_64+0xd2/0x200 [ 89.653866][ T9413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.659797][ T9413] [ 89.662115][ T9413] write to 0xffff88810c5e35e8 of 8 bytes by task 9413 on cpu 0: [ 89.669738][ T9413] shmem_file_splice_read+0x470/0x600 [ 89.675122][ T9413] splice_direct_to_actor+0x26f/0x680 [ 89.680503][ T9413] do_splice_direct+0xda/0x150 [ 89.685257][ T9413] do_sendfile+0x380/0x650 [ 89.689682][ T9413] __x64_sys_sendfile64+0x105/0x150 [ 89.694886][ T9413] x64_sys_call+0x2bb0/0x2ff0 [ 89.699571][ T9413] do_syscall_64+0xd2/0x200 [ 89.704084][ T9413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.709980][ T9413] [ 89.712298][ T9413] value changed: 0x00000000000126a2 -> 0x00000000000126d6 [ 89.719408][ T9413] [ 89.721749][ T9413] Reported by Kernel Concurrency Sanitizer on: [ 89.727929][ T9413] CPU: 0 UID: 0 PID: 9413 Comm: syz.3.2473 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 89.739220][ T9413] Tainted: [W]=WARN [ 89.743020][ T9413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.753076][ T9413] ==================================================================