last executing test programs: 40.84239588s ago: executing program 0 (id=1834): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 40.810866842s ago: executing program 0 (id=1835): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) 40.794743143s ago: executing program 0 (id=1836): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 40.695198111s ago: executing program 0 (id=1838): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) 40.58518181s ago: executing program 0 (id=1842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x4, 0x6071, 0x0, 0xe7, {[@generic={0x5, 0x2}]}}}}}}}, 0x0) 40.289565884s ago: executing program 0 (id=1852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) 40.289306694s ago: executing program 32 (id=1852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) 36.906862846s ago: executing program 3 (id=1979): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) 36.906671936s ago: executing program 3 (id=1980): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) 36.842651231s ago: executing program 3 (id=1981): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaa0022c0"], 0x0) 36.842227241s ago: executing program 3 (id=1982): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBndpNJ7iySwkoEB7SwOm6vtckiOThMpaRQC128O5AkCHew4CkGK1sbSz+BINj5JWwEP4DgB7DzioNXJpkh2btJsoHLrX9+vyL77Lzv877POzPZPyzz7sevziZ3i7j/9Ze/R7ebxdEgBvE4i34cRS2llGJl8G0AAP9mj1OKP9PSJVMG5UsWEd3DlgYAHMje3/9/OnhJAMCBvff+B++cjkbDd4uiG7dn35yPy9/sy4/L9tP78WlM417cjF48Wf4toP5poXy9nVKat4pSP96Yzc/HZebso1+q8U/riU6iF/1FdDH/zmh4Uiyt5c/LOq5X8w/K+W9FL15umP/OaHirIT/Gebz5+lr9N6IXv34Sn8U07i6KWOV/dVIUb6fv/vriw7K8Mj+bn487i34r6fjFXRUAAAAAAAAAAAAAAAAAAAAAAP7rblR753RisX9Peajaf+f4SflJO4pa/+L+PMv8rB7oqf2B5im+T6nTihgNbxZFkaqOq/xWvNKK1tWsGgAAAAAAAAAAAAAAAAAAAP5ZHn7+aHI2nd570BD8dj1iQ9OGoN4NoH6sf0fW8aamwdqR1+LR5KyzecC1pqMq3DJpHNd9soity4lWux65v9dJ2D+4tqnmH37cd8Du7j7tbefn+QT13TU5y6KxTyfqI936mv683iePS86Vb2pKu2+/tSBvbOrtvfb8pUUw39Insm2FvfXH8sxVR7KnV5EvzmpjenttN47me6P5Wmx6pzwjW7yt8+f3xQcAAAAAAAAAAAAAAAAAALhg9dDvM03XdqQepc7BygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF2r1///3COZV8iU65/Hg4RUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//QSRWPA==") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_clone(0x108200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000cc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 36.652918466s ago: executing program 3 (id=1988): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x10}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}}, 0x10) 36.321665623s ago: executing program 3 (id=1997): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r1, 0x1) 36.321499933s ago: executing program 33 (id=1997): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r1, 0x1) 5.893476676s ago: executing program 6 (id=3344): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) 5.893194776s ago: executing program 6 (id=3345): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e0095e5028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}}, 0x0) 5.802820154s ago: executing program 6 (id=3349): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 5.709153951s ago: executing program 6 (id=3352): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='hugetlbfs\x00', 0x16, 0x0) 5.696532932s ago: executing program 6 (id=3354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000400)="2e9b233c0792c71ae7a8189e7fa19df15b0007", 0x13}], 0x1) 5.628800458s ago: executing program 6 (id=3358): syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffffffffffc, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001880)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x5, 0x4, 0x7, 0x1, 0x8, 0x8}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x0) 5.615541349s ago: executing program 34 (id=3358): syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffffffffffc, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001880)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x5, 0x4, 0x7, 0x1, 0x8, 0x8}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x0) 2.849235681s ago: executing program 2 (id=3478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4044040}, 0x8842) r2 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2.772807127s ago: executing program 2 (id=3481): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x111044, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) 2.692887484s ago: executing program 2 (id=3486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @dev={0xfe, 0x80, '\x00', 0x27}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4811}, 0x2008c014) 2.626697819s ago: executing program 2 (id=3492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = io_uring_setup(0xf07, &(0x7f0000000580)={0x0, 0x400826e, 0x1, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) 2.60914429s ago: executing program 2 (id=3493): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) 1.921630405s ago: executing program 2 (id=3510): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="fca3d74d27d688c805b546eecdf4a81b142a2efc380b06984846", 0x1a}, {&(0x7f0000001680)="39ca9a6bf0cc2a897e7f7efcf6095f693a2b5a8f03d5ec1c46f43795a35de3e5155257afdaffd194eb9b", 0x2a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="16", 0x1}], 0x1}}], 0x2, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 1.444223614s ago: executing program 5 (id=3525): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) 1.37302339s ago: executing program 5 (id=3528): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000440)="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", 0xfd}, {&(0x7f00000002c0)="2cc3b9fe2184efd916a73cf86b41c779290ae86705a88432ee7423abcdf19af1a4d48d6a9cb103932f018ec566f360f7bd", 0x31}, {&(0x7f0000000600)="0c1987acb0bf7406ffc67af950adaf35f8d66f8a7c074ae858848b285413213670a87dc07dfcd7acd454e649e8ad14fb19bf1480d662202561a57eb7de7c22fcf09833a193aa164c339c3b4d", 0x4c}, {0x0}, {&(0x7f0000001f40)="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", 0x5ef}, {0x0}], 0x6}}], 0x1, 0x4048884) 1.013351939s ago: executing program 4 (id=3546): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)={0x2c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0) 992.16324ms ago: executing program 4 (id=3547): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x2014, 0xfffe, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) stat(0x0, 0x0) 861.594861ms ago: executing program 4 (id=3548): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x5) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="66480cfc8f3e9ff204540d4113fd1f15f54d9dfbe0d4f31bce2d6b955e68c98db1ca5f2b4ffd4a3f6ec90a7e83851880e0b489d065", 0x35, 0xc084, 0x0, 0x0) 549.587756ms ago: executing program 5 (id=3561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) 531.690357ms ago: executing program 5 (id=3562): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, 0x0, 0x30b, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) 472.873342ms ago: executing program 5 (id=3563): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 472.586712ms ago: executing program 5 (id=3564): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="fca3d74d27d688", 0x7}, {&(0x7f0000001680)="39ca9a6bf0cc2a897e7f7efcf6095f693a2b5a8f03d5ec1c46f43795a35de3e5155257afdaffd194eb9b6a66f8519a5be8fef4e58b7c7b1abb4a7e33a7d782f3b8", 0x41}, {0x0}, {0x0}], 0x4}}], 0x1, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 307.121165ms ago: executing program 1 (id=3570): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xd6c8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 306.664075ms ago: executing program 1 (id=3572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) 274.844578ms ago: executing program 1 (id=3574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 197.492924ms ago: executing program 1 (id=3576): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4, @remote}, 0x10) r1 = memfd_create(&(0x7f0000000300)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xde', 0x0) write(r1, &(0x7f0000000140)='/', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) 197.246834ms ago: executing program 1 (id=3577): r0 = socket(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x8, 0x401}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 185.571385ms ago: executing program 1 (id=3578): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x108100, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="14000000100001"], 0x1874}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4}, './control\x00'}) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000280)='net/rt_acct\x00') r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000011140100000000000000000008004a00d2417b218f749c24c6eacd8bc23ab579c634bb23680fefbb9e737eb763f232db91cda2e91fbb8ed63f0800b33dd5ecffc2758b1ec8f2a772487516b89af9be94a9b16d62cd05c938b21d44365cb408cdab6801e54601004dd8accceba633cc09169a99ae62eee6ff91f430d9dc8ca1e90a8b76fa0a8d177e6ccb2868579797f238ec272b463af1ba46f2e7d9ae17eec8209c9bfa409bff9ce452eda16f525ef27504ff3777f29f755b2c3b8de4f1ccae58c335704e2c"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001cc0)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='fsi_master_acf_poll_response_busy\x00', r7, 0x0, 0xfffffffff7ffffe9}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ppoll(&(0x7f0000000000)=[{r8, 0x2078}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lseek(0xffffffffffffffff, 0x4, 0x1) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 165.132947ms ago: executing program 7 (id=3580): r0 = fsopen(&(0x7f0000001900)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 101.559652ms ago: executing program 7 (id=3581): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc"], 0x50) 101.310162ms ago: executing program 7 (id=3582): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 91.876263ms ago: executing program 7 (id=3583): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 73.194524ms ago: executing program 7 (id=3584): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5.351749ms ago: executing program 4 (id=3585): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 0b 90 49 81 ff f8 07 00 00 75 e3 49 81 c6 00 08 00 00 31 db 49 [ 106.476941][ T37] RSP: 0018:ffffc90000143c78 EFLAGS: 00010293 [ 106.483254][ T37] RAX: ffffffff84c77630 RBX: ffff888109960000 RCX: ffff888101551080 [ 106.491385][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810ac4c000 [ 106.499489][ T37] RBP: ffffffff86c93920 R08: 0001ffff86847f7f R09: 0000000000000000 [ 106.507521][ T37] R10: 0000000000000000 R11: 0000000000000800 R12: ffffffff86c93940 [ 106.515562][ T37] R13: ffff888109960028 R14: ffff88810ac4c000 R15: 0000000000000000 [ 106.523665][ T37] FS: 0000000000000000(0000) GS:ffff8882aee44000(0000) knlGS:0000000000000000 [ 106.532731][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.539491][ T37] CR2: 0000001b32f23ffc CR3: 000000010a0e0000 CR4: 00000000003506f0 [ 106.547598][ T37] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 106.555810][ T37] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 106.564284][ T37] Call Trace: [ 106.567719][ T37] [ 106.570845][ T37] ops_undo_list+0x27b/0x410 [ 106.575559][ T37] cleanup_net+0x2de/0x4d0 [ 106.580098][ T37] process_scheduled_works+0x4cb/0x9d0 [ 106.585626][ T37] worker_thread+0x582/0x770 [ 106.590270][ T37] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 106.596146][ T37] kthread+0x489/0x510 [ 106.600402][ T37] ? finish_task_switch+0xad/0x2b0 [ 106.605568][ T37] ? __pfx_worker_thread+0x10/0x10 [ 106.610751][ T37] ? __pfx_kthread+0x10/0x10 [ 106.615437][ T37] ret_from_fork+0xda/0x150 [ 106.620041][ T37] ? __pfx_kthread+0x10/0x10 [ 106.624672][ T37] ret_from_fork_asm+0x1a/0x30 [ 106.629585][ T37] [ 106.632646][ T37] ---[ end trace 0000000000000000 ]--- [ 106.639118][ T37] ------------[ cut here ]------------ [ 106.644587][ T37] WARNING: CPU: 0 PID: 37 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0xd5/0x100 [ 106.654645][ T37] Modules linked in: [ 106.658585][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G W 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 106.672928][ T37] Tainted: [W]=WARN [ 106.676877][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.687022][ T37] Workqueue: netns cleanup_net [ 106.692172][ T37] RIP: 0010:xfrm6_tunnel_net_exit+0xd5/0x100 [ 106.698309][ T37] Code: 51 54 ab fc 49 83 3c 1e 00 75 19 e8 05 83 90 fc 48 81 fb f8 07 00 00 74 1d e8 f7 82 90 fc 48 83 c3 08 eb d7 e8 ec 82 90 fc 90 <0f> 0b 90 48 81 fb f8 07 00 00 75 e3 e8 da 82 90 fc 5b 41 5e 41 5f [ 106.718230][ T37] RSP: 0018:ffffc90000143c78 EFLAGS: 00010293 [ 106.724663][ T37] RAX: ffffffff84c77674 RBX: 0000000000000008 RCX: ffff888101551080 [ 106.732923][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810ac4c808 [ 106.741104][ T37] RBP: ffffffff86c93920 R08: 0001ffff86847f7f R09: 0000000000000000 [ 106.749356][ T37] R10: 0000000000000000 R11: 0000000000000800 R12: ffffffff86c93940 [ 106.757428][ T37] R13: ffff888109960028 R14: ffff88810ac4c800 R15: 00000000000007f8 [ 106.765482][ T37] FS: 0000000000000000(0000) GS:ffff8882aee44000(0000) knlGS:0000000000000000 [ 106.774459][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.781175][ T37] CR2: 0000001b32f23ffc CR3: 000000010a0e0000 CR4: 00000000003506f0 [ 106.789291][ T37] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 106.797429][ T37] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 106.805649][ T37] Call Trace: [ 106.809067][ T37] [ 106.812102][ T37] ops_undo_list+0x27b/0x410 [ 106.816732][ T37] cleanup_net+0x2de/0x4d0 [ 106.821213][ T37] process_scheduled_works+0x4cb/0x9d0 [ 106.826767][ T37] worker_thread+0x582/0x770 [ 106.831509][ T37] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 106.837714][ T37] kthread+0x489/0x510 [ 106.841851][ T37] ? finish_task_switch+0xad/0x2b0 [ 106.847033][ T37] ? __pfx_worker_thread+0x10/0x10 [ 106.852418][ T37] ? __pfx_kthread+0x10/0x10 [ 106.857133][ T37] ret_from_fork+0xda/0x150 [ 106.861714][ T37] ? __pfx_kthread+0x10/0x10 [ 106.866463][ T37] ret_from_fork_asm+0x1a/0x30 [ 106.871364][ T37] [ 106.874398][ T37] ---[ end trace 0000000000000000 ]--- [ 106.888224][ T9137] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 106.910380][ T9137] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 106.913894][ T37] ------------[ cut here ]------------ [ 106.922746][ T37] WARNING: CPU: 1 PID: 37 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x179/0x1f0 [ 106.932215][ T37] Modules linked in: [ 106.936298][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G W 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 106.950790][ T37] Tainted: [W]=WARN [ 106.954646][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.964913][ T37] Workqueue: netns cleanup_net [ 106.969847][ T37] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 106.975433][ T37] Code: 48 8d bb 30 0e 00 00 e8 b5 00 bd fc 48 8b bb 30 0e 00 00 e8 79 81 c9 fc 5b 41 5e 41 5f 5d e9 ce 83 b3 00 cc e8 08 43 a2 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 fa 42 a2 fc 90 0f 0b 90 4c 89 f7 e8 7e [ 106.995323][ T37] RSP: 0018:ffffc90000143c60 EFLAGS: 00010293 [ 107.001538][ T37] RAX: ffffffff84b5b658 RBX: ffff888109960000 RCX: ffff888101551080 [ 107.009882][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888109960e00 [ 107.017963][ T37] RBP: ffffffff86c8b7a0 R08: 0001ffff86847f7f R09: 0000000000000000 [ 107.025960][ T37] R10: ffffc90000143be8 R11: 0001c90000143be8 R12: ffffffff86c8b7c0 [ 107.034190][ T37] R13: ffff888109960028 R14: ffff888109960e00 R15: ffff888109960000 [ 107.042737][ T37] FS: 0000000000000000(0000) GS:ffff8882aef44000(0000) knlGS:0000000000000000 [ 107.051875][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.058518][ T37] CR2: 00007fd2def856c0 CR3: 0000000006834000 CR4: 00000000003506f0 [ 107.066621][ T37] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.074746][ T37] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 107.082909][ T37] Call Trace: [ 107.086210][ T37] [ 107.089188][ T37] xfrm_net_exit+0x2d/0x60 [ 107.093794][ T37] ops_undo_list+0x27b/0x410 [ 107.098499][ T37] cleanup_net+0x2de/0x4d0 [ 107.103294][ T37] process_scheduled_works+0x4cb/0x9d0 [ 107.109016][ T37] worker_thread+0x582/0x770 [ 107.113687][ T37] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 107.119694][ T37] kthread+0x489/0x510 [ 107.123788][ T37] ? finish_task_switch+0xad/0x2b0 [ 107.128988][ T37] ? __pfx_worker_thread+0x10/0x10 [ 107.134231][ T37] ? __pfx_kthread+0x10/0x10 [ 107.138900][ T37] ret_from_fork+0xda/0x150 [ 107.143566][ T37] ? __pfx_kthread+0x10/0x10 [ 107.148260][ T37] ret_from_fork_asm+0x1a/0x30 [ 107.153080][ T37] [ 107.156175][ T37] ---[ end trace 0000000000000000 ]--- [ 107.183018][ T9137] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 107.208105][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 107.208191][ T29] audit: type=1400 audit(1755571448.923:10614): avc: denied { ioctl } for pid=9563 comm="syz.4.2037" path="socket:[22911]" dev="sockfs" ino=22911 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.294730][ T29] audit: type=1400 audit(1755571448.973:10615): avc: denied { read } for pid=9565 comm="syz.1.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.321116][ T9137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.321513][ T29] audit: type=1400 audit(1755571449.043:10616): avc: denied { map } for pid=9577 comm="syz.4.2040" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.334438][ T9137] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.386434][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.393590][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.405668][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.412904][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.441214][ T9588] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 107.449959][ T9137] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.461502][ T9137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.543633][ T9596] SELinux: failed to load policy [ 107.582000][ T9137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.645802][ T1033] hid_parser_main: 17 callbacks suppressed [ 107.645826][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 107.659364][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 107.666879][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 107.674683][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 107.682315][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 107.690000][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 107.697443][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 107.704933][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 107.712478][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 107.720098][ T1033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 107.738485][ T1033] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 107.792414][ T29] audit: type=1400 audit(1755571449.513:10617): avc: denied { write } for pid=9633 comm="syz.2.2051" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 107.852319][ T29] audit: type=1400 audit(1755571449.573:10618): avc: denied { ioctl } for pid=9647 comm="syz.4.2056" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 107.852978][ T9137] veth0_vlan: entered promiscuous mode [ 107.905629][ T9137] veth1_vlan: entered promiscuous mode [ 107.922649][ T29] audit: type=1400 audit(1755571449.633:10619): avc: denied { setopt } for pid=9653 comm="syz.1.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.942613][ T29] audit: type=1400 audit(1755571449.633:10620): avc: denied { connect } for pid=9653 comm="syz.1.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.951859][ T9137] veth0_macvtap: entered promiscuous mode [ 107.962678][ T29] audit: type=1400 audit(1755571449.633:10621): avc: denied { read } for pid=9653 comm="syz.1.2059" laddr=fe80::64e9:89ff:feae:78ae lport=7 faddr=ff02::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.976769][ T9137] veth1_macvtap: entered promiscuous mode [ 108.003059][ T9652] netlink: 'syz.2.2058': attribute type 12 has an invalid length. [ 108.010993][ T9652] netlink: 'syz.2.2058': attribute type 29 has an invalid length. [ 108.014107][ T29] audit: type=1400 audit(1755571449.743:10622): avc: denied { block_suspend } for pid=9657 comm="syz.4.2061" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.018953][ T9652] __nla_validate_parse: 3 callbacks suppressed [ 108.018969][ T9652] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2058'. [ 108.056385][ T9652] netlink: 'syz.2.2058': attribute type 1 has an invalid length. [ 108.089556][ T9137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.101930][ T9137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.115181][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.125413][ T9664] loop5: detected capacity change from 0 to 164 [ 108.134574][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.152803][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.170082][ T29] audit: type=1400 audit(1755571449.893:10623): avc: denied { mount } for pid=9663 comm="syz.5.2062" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 108.194026][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.207506][ T9671] loop4: detected capacity change from 0 to 512 [ 108.214288][ T9671] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 108.326210][ T9702] loop5: detected capacity change from 0 to 512 [ 108.350194][ T9702] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.370102][ T9702] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.491582][ T8359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.566147][ T9750] loop5: detected capacity change from 0 to 2048 [ 108.610689][ T9750] Alternate GPT is invalid, using primary GPT. [ 108.617733][ T9750] loop5: p2 p3 p7 [ 108.668625][ T9777] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2098'. [ 109.069519][ T9826] syzkaller1: entered promiscuous mode [ 109.075060][ T9826] syzkaller1: entered allmulticast mode [ 109.216732][ T9836] SELinux: failed to load policy [ 109.371949][ T9858] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 109.459429][ T9870] SELinux: policydb version 11 does not match my version range 15-35 [ 109.477670][ T9870] SELinux: failed to load policy [ 109.496800][ T9880] loop5: detected capacity change from 0 to 256 [ 109.533965][ T9892] loop5: detected capacity change from 0 to 128 [ 109.544477][ T9892] FAT-fs (loop5): Directory bread(block 32) failed [ 109.551728][ T9892] FAT-fs (loop5): Directory bread(block 33) failed [ 109.558383][ T9892] FAT-fs (loop5): Directory bread(block 34) failed [ 109.565156][ T9892] FAT-fs (loop5): Directory bread(block 35) failed [ 109.572301][ T9892] FAT-fs (loop5): Directory bread(block 36) failed [ 109.579586][ T9892] FAT-fs (loop5): Directory bread(block 37) failed [ 109.586124][ T9892] FAT-fs (loop5): Directory bread(block 38) failed [ 109.597903][ T9892] FAT-fs (loop5): Directory bread(block 39) failed [ 109.604483][ T9892] FAT-fs (loop5): Directory bread(block 40) failed [ 109.615332][ T9899] loop4: detected capacity change from 0 to 512 [ 109.623157][ T9892] FAT-fs (loop5): Directory bread(block 41) failed [ 109.630254][ T9899] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.659423][ T9899] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 109.667578][ T9899] System zones: 0-2, 18-18, 34-34 [ 109.681069][ T9899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.684273][ T9892] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 109.694227][ T9899] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.702450][ T9892] FAT-fs (loop5): Filesystem has been set read-only [ 109.728064][ T9899] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 109.744487][ T9899] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32896 with max blocks 1 with error 28 [ 109.757233][ T9899] EXT4-fs (loop4): This should not happen!! Data will be lost [ 109.757233][ T9899] [ 109.767365][ T9899] EXT4-fs (loop4): Total free blocks count 0 [ 109.773487][ T9899] EXT4-fs (loop4): Free/Dirty block details [ 109.779936][ T9899] EXT4-fs (loop4): free_blocks=39626 [ 109.785495][ T9899] EXT4-fs (loop4): dirty_blocks=1 [ 109.790602][ T9899] EXT4-fs (loop4): Block reservation details [ 109.796605][ T9899] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 109.814403][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.937004][ T9940] loop4: detected capacity change from 0 to 8192 [ 109.995764][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2164'. [ 110.138843][ T3393] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 110.180356][ T9974] SELinux: Context is not valid (left unmapped). [ 110.453667][T10002] lo speed is unknown, defaulting to 1000 [ 110.487575][T10002] lo speed is unknown, defaulting to 1000 [ 110.494083][T10002] lo speed is unknown, defaulting to 1000 [ 110.567230][T10033] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 110.683208][T10041] loop5: detected capacity change from 0 to 256 [ 110.768531][ T1033] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.153291][T10116] netlink: 'syz.2.2217': attribute type 3 has an invalid length. [ 111.183078][T10118] loop4: detected capacity change from 0 to 764 [ 111.266721][T10142] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 111.290971][T10143] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2224'. [ 111.301894][T10134] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2224'. [ 111.312069][T10147] netlink: 'syz.5.2229': attribute type 1 has an invalid length. [ 111.313289][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2230'. [ 111.372623][T10153] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 111.379309][T10153] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 111.387056][T10153] vhci_hcd vhci_hcd.0: Device attached [ 111.396520][T10154] vhci_hcd: connection closed [ 111.396987][ T37] vhci_hcd: stop threads [ 111.406178][ T37] vhci_hcd: release socket [ 111.410661][ T37] vhci_hcd: disconnect device [ 111.421842][T10160] IPv6: Can't replace route, no match found [ 111.530307][T10181] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2245'. [ 111.561422][T10185] 9pnet_fd: Insufficient options for proto=fd [ 111.607273][T10192] loop6: detected capacity change from 0 to 512 [ 111.629581][T10192] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 111.637565][T10192] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 111.650829][T10192] System zones: 0-1, 15-15, 18-18, 34-34 [ 111.657457][T10192] EXT4-fs (loop6): orphan cleanup on readonly fs [ 111.664582][T10192] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 111.679273][T10192] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 111.692945][T10192] EXT4-fs (loop6): 1 truncate cleaned up [ 111.708494][T10192] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.752843][ T9137] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.774471][T10220] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2261'. [ 111.783645][T10220] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2261'. [ 111.792983][T10220] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2261'. [ 111.824242][T10225] netlink: 'syz.1.2264': attribute type 6 has an invalid length. [ 111.852383][ T3359] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 112.222897][ T29] kauditd_printk_skb: 510 callbacks suppressed [ 112.222923][ T29] audit: type=1326 audit(1755571453.949:11133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10284 comm="syz.4.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de22ebe9 code=0x7ffc0000 [ 112.278768][ T29] audit: type=1326 audit(1755571453.989:11134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10284 comm="syz.4.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fd2de22ebe9 code=0x7ffc0000 [ 112.302430][ T29] audit: type=1326 audit(1755571453.989:11135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10284 comm="syz.4.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de22ebe9 code=0x7ffc0000 [ 112.326336][ T29] audit: type=1326 audit(1755571453.989:11136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10284 comm="syz.4.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de22ebe9 code=0x7ffc0000 [ 112.350896][ T29] audit: type=1400 audit(1755571454.079:11137): avc: denied { read write } for pid=10289 comm="syz.2.2290" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 112.375760][T10293] loop4: detected capacity change from 0 to 512 [ 112.376411][ T29] audit: type=1400 audit(1755571454.079:11138): avc: denied { open } for pid=10289 comm="syz.2.2290" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 112.405973][ T29] audit: type=1326 audit(1755571454.079:11139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10288 comm="syz.1.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54254ebe9 code=0x7ffc0000 [ 112.429740][ T29] audit: type=1326 audit(1755571454.079:11140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10288 comm="syz.1.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54254ebe9 code=0x7ffc0000 [ 112.453744][ T29] audit: type=1326 audit(1755571454.109:11141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10288 comm="syz.1.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fa54254ebe9 code=0x7ffc0000 [ 112.478086][ T29] audit: type=1326 audit(1755571454.109:11142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10288 comm="syz.1.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54254ebe9 code=0x7ffc0000 [ 112.561566][T10311] netlink: 'syz.4.2298': attribute type 7 has an invalid length. [ 112.585011][T10313] block device autoloading is deprecated and will be removed. [ 112.699126][T10338] loop2: detected capacity change from 0 to 1024 [ 112.712977][T10345] loop4: detected capacity change from 0 to 1024 [ 112.720650][T10345] EXT4-fs: Ignoring removed nobh option [ 112.732056][T10345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.745180][T10338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 112.757663][T10338] ext4 filesystem being mounted at /568/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.774074][T10338] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.2308: lblock 3 mapped to illegal pblock 3 (length 3) [ 112.789982][T10338] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 112.802502][T10338] EXT4-fs (loop2): This should not happen!! Data will be lost [ 112.802502][T10338] [ 112.819005][T10338] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.2308: lblock 0 mapped to illegal pblock 0 (length 3) [ 112.844669][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.854213][ T37] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 112.886905][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 112.899273][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 112.899273][ T37] [ 112.942461][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 112.993325][T10378] loop4: detected capacity change from 0 to 512 [ 113.003955][T10383] loop5: detected capacity change from 0 to 256 [ 113.011436][T10381] loop6: detected capacity change from 0 to 512 [ 113.030727][T10378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.045457][T10378] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.045624][T10381] EXT4-fs (loop6): 1 orphan inode deleted [ 113.062410][ T126] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 1 [ 113.074628][T10381] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.098423][T10381] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.111487][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.149312][ T12] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 1 [ 113.162289][ T9137] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.205858][T10409] loop6: detected capacity change from 0 to 512 [ 113.214428][T10409] EXT4-fs (loop6): filesystem is read-only [ 113.223420][T10409] EXT4-fs (loop6): filesystem is read-only [ 113.229711][T10409] EXT4-fs (loop6): orphan cleanup on readonly fs [ 113.236541][T10409] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.2329: bad orphan inode 16 [ 113.237630][T10413] loop5: detected capacity change from 0 to 1024 [ 113.247980][T10409] ext4_test_bit(bit=15, block=3) = 0 [ 113.259157][T10409] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 113.272758][T10413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.290728][T10413] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2330: Allocating blocks 497-513 which overlap fs metadata [ 113.305199][ T9137] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.308774][T10413] EXT4-fs (loop5): pa ffff8881072327e0: logic 256, phys. 369, len 9 [ 113.322392][T10413] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 113.332553][T10413] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 113.393216][T10422] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 113.411269][ T8359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.433868][T10428] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 113.448894][T10428] bond0: entered promiscuous mode [ 113.453979][T10428] bond_slave_0: entered promiscuous mode [ 113.460077][T10428] bond_slave_1: entered promiscuous mode [ 113.467321][T10428] hsr1: entered allmulticast mode [ 113.473363][T10428] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 113.481048][T10428] bond0: entered allmulticast mode [ 113.483977][T10434] loop6: detected capacity change from 0 to 128 [ 113.486314][T10428] bond_slave_0: entered allmulticast mode [ 113.495459][T10434] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.498327][T10428] bond_slave_1: entered allmulticast mode [ 113.519954][T10434] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.550353][ T9137] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.576436][T10442] TCP: tcp_parse_options: Illegal window scaling value 149 > 14 received [ 113.621858][T10454] loop6: detected capacity change from 0 to 128 [ 113.624577][T10452] loop5: detected capacity change from 0 to 1024 [ 113.640387][T10452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.672796][ T8359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.694691][T10464] loop5: detected capacity change from 0 to 128 [ 113.773183][T10477] loop5: detected capacity change from 0 to 1024 [ 113.780308][T10477] EXT4-fs: Ignoring removed oldalloc option [ 113.787631][T10477] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 113.800297][T10482] openvswitch: netlink: Message has 6 unknown bytes. [ 113.810137][T10477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.854097][ T8359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.864525][T10490] IPv6: Can't replace route, no match found [ 113.882371][T10492] loop2: detected capacity change from 0 to 512 [ 113.893205][T10492] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.918432][T10492] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.2356: invalid indirect mapped block 4294967295 (level 0) [ 113.935429][T10492] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.2356: invalid indirect mapped block 4294967295 (level 1) [ 113.952075][T10492] EXT4-fs (loop2): 1 orphan inode deleted [ 113.958070][T10492] EXT4-fs (loop2): 1 truncate cleaned up [ 113.968421][T10492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.996877][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.120205][T10563] loop6: detected capacity change from 0 to 128 [ 114.143049][T10563] FAT-fs (loop6): error, corrupted file size (i_pos 548, 512) [ 114.150708][T10563] FAT-fs (loop6): Filesystem has been set read-only [ 114.161341][T10569] netlink: 'syz.1.2376': attribute type 13 has an invalid length. [ 114.169364][T10569] __nla_validate_parse: 4 callbacks suppressed [ 114.169380][T10569] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.2376'. [ 114.220614][T10575] loop5: detected capacity change from 0 to 764 [ 114.228252][T10575] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 114.347300][T10595] IPv6: Can't replace route, no match found [ 114.382367][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2387'. [ 114.523140][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2399'. [ 114.624312][T10636] SELinux: failed to load policy [ 114.661857][T10641] loop5: detected capacity change from 0 to 1024 [ 114.669694][T10641] EXT4-fs: Ignoring removed bh option [ 114.679243][T10641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 114.709575][ T8359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 114.882001][T10666] loop4: detected capacity change from 0 to 2048 [ 114.902730][T10666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.915402][T10669] netlink: 'syz.5.2419': attribute type 1 has an invalid length. [ 114.926862][T10666] ext4 filesystem being mounted at /400/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.942784][T10675] lo: entered allmulticast mode [ 114.967315][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.005262][T10688] loop5: detected capacity change from 0 to 128 [ 115.023084][T10688] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 115.038246][T10688] System zones: 1-3, 19-19, 35-36 [ 115.043881][T10688] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 115.059632][T10688] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.093764][T10688] EXT4-fs warning (device loop5): verify_group_input:156: Last group not full [ 115.113586][ T8359] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.147163][T10699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2432'. [ 115.162453][T10707] syzkaller1: entered promiscuous mode [ 115.168204][T10707] syzkaller1: entered allmulticast mode [ 115.221132][T10716] usb usb1: usbfs: process 10716 (syz.6.2436) did not claim interface 0 before use [ 115.348485][T10740] SELinux: Context is not valid (left unmapped). [ 115.420861][T10750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.432484][T10750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.485841][T10763] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2457'. [ 115.496823][T10763] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2457'. [ 115.573709][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2462'. [ 115.591432][ T10] IPVS: starting estimator thread 0... [ 115.651457][T10787] sctp: [Deprecated]: syz.2.2469 (pid 10787) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.651457][T10787] Use struct sctp_sack_info instead [ 115.679283][T10777] IPVS: using max 2352 ests per chain, 117600 per kthread [ 115.726043][T10799] loop2: detected capacity change from 0 to 512 [ 115.740601][T10799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.754370][T10799] ext4 filesystem being mounted at /599/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.772200][T10799] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 115.787463][T10799] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1029 with max blocks 1 with error 28 [ 115.800028][T10799] EXT4-fs (loop2): This should not happen!! Data will be lost [ 115.800028][T10799] [ 115.809722][T10799] EXT4-fs (loop2): Total free blocks count 0 [ 115.815725][T10799] EXT4-fs (loop2): Free/Dirty block details [ 115.821723][T10799] EXT4-fs (loop2): free_blocks=65280 [ 115.827100][T10799] EXT4-fs (loop2): dirty_blocks=1 [ 115.832299][T10799] EXT4-fs (loop2): Block reservation details [ 115.838392][T10799] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 115.861255][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.993322][T10819] loop4: detected capacity change from 0 to 128 [ 116.054974][T10828] rdma_op ffff8881190e3180 conn xmit_rdma 0000000000000000 [ 116.138292][T10840] netlink: 'syz.2.2490': attribute type 2 has an invalid length. [ 116.215537][T10852] loop4: detected capacity change from 0 to 512 [ 116.255151][T10852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.290057][T10852] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.345672][T10878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.368044][T10878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.456861][T10888] netlink: 'syz.1.2508': attribute type 12 has an invalid length. [ 116.464863][T10888] netlink: 'syz.1.2508': attribute type 29 has an invalid length. [ 116.472853][T10888] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2508'. [ 116.482049][T10888] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2508'. [ 116.507930][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.574719][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2511'. [ 116.623078][T10907] loop6: detected capacity change from 0 to 512 [ 116.630441][T10907] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 116.642817][T10907] EXT4-fs (loop6): 1 truncate cleaned up [ 116.649235][T10907] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.678661][ T9137] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.739819][T10927] IPVS: Error connecting to the multicast addr [ 116.782973][T10934] netlink: 'syz.6.2527': attribute type 21 has an invalid length. [ 116.882022][T10946] loop4: detected capacity change from 0 to 2048 [ 116.911049][T10946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.931567][T10946] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.957119][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.184800][T10980] loop4: detected capacity change from 0 to 2048 [ 117.256191][ T29] kauditd_printk_skb: 535 callbacks suppressed [ 117.256223][ T29] audit: type=1400 audit(1755571458.979:11676): avc: denied { create } for pid=10992 comm="syz.5.2545" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 117.284782][ T29] audit: type=1400 audit(1755571458.989:11677): avc: denied { write } for pid=10992 comm="syz.5.2545" name="file0" dev="tmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 117.307713][ T29] audit: type=1400 audit(1755571458.989:11678): avc: denied { open } for pid=10992 comm="syz.5.2545" path="/120/file0" dev="tmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 117.330636][ T29] audit: type=1400 audit(1755571458.989:11679): avc: denied { ioctl } for pid=10992 comm="syz.5.2545" path="/120/file0" dev="tmpfs" ino=646 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 117.372874][ T29] audit: type=1400 audit(1755571459.039:11680): avc: denied { unlink } for pid=8359 comm="syz-executor" name="file0" dev="tmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 117.413724][ T29] audit: type=1400 audit(1755571459.139:11681): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop2" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.437383][ T29] audit: type=1400 audit(1755571459.139:11682): avc: denied { open } for pid=3306 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.439095][T11004] loop2: detected capacity change from 0 to 512 [ 117.460763][ T29] audit: type=1400 audit(1755571459.139:11683): avc: denied { ioctl } for pid=3306 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=783 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.493801][T11004] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.501828][T11004] ext4: Unknown parameter 'noquota"errors' [ 117.512997][ T29] audit: type=1400 audit(1755571459.239:11684): avc: denied { recv } for pid=11001 comm="syz.2.2550" saddr=10.128.0.163 src=30036 daddr=10.128.1.45 dest=58286 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 117.538760][ T29] audit: type=1400 audit(1755571459.239:11685): avc: denied { read write } for pid=11001 comm="syz.2.2550" name="loop2" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.736525][T11040] loop6: detected capacity change from 0 to 512 [ 117.783388][T11040] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.797300][T11040] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.812600][T11040] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2567: corrupted inode contents [ 117.826326][T11040] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2567: mark_inode_dirty error [ 117.843849][T11040] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2567: corrupted inode contents [ 117.856994][T11040] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.2567: mark_inode_dirty error [ 117.896086][ T9137] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.929217][T11068] loop6: detected capacity change from 0 to 2048 [ 118.318956][T11140] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 118.346024][ T36] hid_parser_main: 63 callbacks suppressed [ 118.346040][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 118.361677][ T36] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 118.766893][T11196] loop5: detected capacity change from 0 to 1024 [ 118.779413][T11196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.800371][T11196] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 118.831906][ T8359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.850975][T11204] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 118.980726][T11216] loop5: detected capacity change from 0 to 8192 [ 119.404073][T11258] binfmt_misc: register: failed to install interpreter file ./bus [ 119.430634][T11260] hub 9-0:1.0: USB hub found [ 119.435380][T11260] hub 9-0:1.0: 8 ports detected [ 119.566067][T11268] loop2: detected capacity change from 0 to 128 [ 119.661680][T11279] loop2: detected capacity change from 0 to 1024 [ 119.669001][T11279] EXT4-fs: Ignoring removed nobh option [ 119.681077][T11279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.681629][T11282] loop6: detected capacity change from 0 to 512 [ 119.714155][T11282] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.714774][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.728019][T11282] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.775185][ T9137] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.834717][T11305] __nla_validate_parse: 4 callbacks suppressed [ 119.834798][T11305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2665'. [ 119.890897][T11313] SELinux: security policydb version 17 (MLS) not backwards compatible [ 119.899765][T11313] SELinux: failed to load policy [ 119.967076][T11327] loop5: detected capacity change from 0 to 1024 [ 119.976752][T11327] EXT4-fs: Ignoring removed nobh option [ 120.040222][T11339] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2677'. [ 120.096174][T11349] loop4: detected capacity change from 0 to 512 [ 120.109219][T11349] EXT4-fs (loop4): filesystem is read-only [ 120.115104][T11361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2685'. [ 120.134135][T11349] EXT4-fs (loop4): filesystem is read-only [ 120.140304][T11349] EXT4-fs (loop4): orphan cleanup on readonly fs [ 120.152287][T11349] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.2681: bad orphan inode 16 [ 120.163955][T11349] ext4_test_bit(bit=15, block=3) = 0 [ 120.210757][T11375] loop2: detected capacity change from 0 to 512 [ 120.266066][T11375] EXT4-fs (loop2): 1 orphan inode deleted [ 120.275205][T11375] ext4 filesystem being mounted at /632/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.286616][ T3434] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 1 [ 120.316509][ T3434] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 1 [ 120.389908][T11411] loop2: detected capacity change from 0 to 512 [ 120.398512][T11411] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 120.412395][T11411] EXT4-fs (loop2): 1 truncate cleaned up [ 120.473286][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 120.494027][ T36] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 120.603195][T11440] hid-generic 0000:0000:0000.0007: pid 11440 passed too short report [ 120.611574][T11439] loop6: detected capacity change from 0 to 1024 [ 120.642612][T11439] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2709: Allocating blocks 497-513 which overlap fs metadata [ 120.664546][T11439] EXT4-fs (loop6): pa ffff888107232770: logic 256, phys. 369, len 9 [ 120.672637][T11439] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 120.683101][T11439] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 120.773991][T11462] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.781208][T11462] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.822340][T11462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.832010][T11462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.873762][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2715'. [ 120.932759][T11471] loop6: detected capacity change from 0 to 1024 [ 120.939774][T11471] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.083153][T11487] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 121.091261][T11487] bond0: entered promiscuous mode [ 121.096349][T11487] bond_slave_0: entered promiscuous mode [ 121.102266][T11487] bond_slave_1: entered promiscuous mode [ 121.108638][T11487] debugfs: 'hsr1' already exists in 'hsr' [ 121.114498][T11487] Cannot create hsr debugfs directory [ 121.120187][T11487] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 121.130536][T11487] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 121.134905][T11491] loop4: detected capacity change from 0 to 164 [ 121.140693][T11487] hsr1: entered allmulticast mode [ 121.140741][T11487] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 121.140759][T11487] bond0: entered allmulticast mode [ 121.152967][T11491] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 121.159654][T11487] bond_slave_0: entered allmulticast mode [ 121.159680][T11487] bond_slave_1: entered allmulticast mode [ 121.207255][T11491] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 121.217109][T11491] Symlink component flag not implemented [ 121.222838][T11491] Symlink component flag not implemented [ 121.230955][T11491] Symlink component flag not implemented (7) [ 121.237012][T11491] Symlink component flag not implemented (116) [ 121.304892][T11510] loop6: detected capacity change from 0 to 164 [ 121.320597][T11510] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 121.339626][T11510] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 121.349511][T11510] Symlink component flag not implemented [ 121.355440][T11510] Symlink component flag not implemented [ 121.368066][T11510] Symlink component flag not implemented (7) [ 121.374361][T11510] Symlink component flag not implemented (116) [ 121.437352][T11520] loop6: detected capacity change from 0 to 2048 [ 121.448832][T11523] loop4: detected capacity change from 0 to 764 [ 121.456731][T11523] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 121.488795][T11520] loop6: p1 < > p4 [ 121.499201][T11520] loop6: p4 size 8388608 extends beyond EOD, truncated [ 121.544756][T11537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2737'. [ 121.836740][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2751'. [ 121.944847][T11582] loop5: detected capacity change from 0 to 512 [ 121.968374][T11582] EXT4-fs: Ignoring removed oldalloc option [ 121.977324][T11582] EXT4-fs (loop5): 1 truncate cleaned up [ 122.138589][T11604] loop5: detected capacity change from 0 to 128 [ 122.150557][T11604] FAT-fs (loop5): error, corrupted file size (i_pos 548, 512) [ 122.158148][T11604] FAT-fs (loop5): Filesystem has been set read-only [ 122.208298][T11611] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.215586][T11611] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.260232][T11611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.270942][T11611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.319139][ T36] lo speed is unknown, defaulting to 1000 [ 122.325190][ T36] sz1: Port: 1 Link DOWN [ 122.338481][ T1033] lo speed is unknown, defaulting to 1000 [ 122.426166][ T29] kauditd_printk_skb: 474 callbacks suppressed [ 122.426199][ T29] audit: type=1400 audit(1755571464.149:12158): avc: denied { write } for pid=11639 comm="syz.4.2779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 122.482224][ T29] audit: type=1400 audit(1755571464.149:12159): avc: denied { ioctl } for pid=11639 comm="syz.4.2779" path="socket:[28860]" dev="sockfs" ino=28860 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 122.511564][T11646] syz_tun: entered allmulticast mode [ 122.549210][ T29] audit: type=1326 audit(1755571464.279:12160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11652 comm="syz.4.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de22ebe9 code=0x7ffc0000 [ 122.598108][ T29] audit: type=1326 audit(1755571464.299:12161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11652 comm="syz.4.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd2de22ebe9 code=0x7ffc0000 [ 122.622024][ T29] audit: type=1326 audit(1755571464.299:12162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11652 comm="syz.4.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de22ebe9 code=0x7ffc0000 [ 122.645780][ T29] audit: type=1326 audit(1755571464.299:12163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11652 comm="syz.4.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de22ebe9 code=0x7ffc0000 [ 122.669580][ T29] audit: type=1326 audit(1755571464.299:12164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11652 comm="syz.4.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2de22ebe9 code=0x7ffc0000 [ 122.693701][ T29] audit: type=1326 audit(1755571464.299:12165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11652 comm="syz.4.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de22ebe9 code=0x7ffc0000 [ 122.717570][ T29] audit: type=1326 audit(1755571464.299:12166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11652 comm="syz.4.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2de22ebe9 code=0x7ffc0000 [ 122.741270][ T29] audit: type=1326 audit(1755571464.299:12167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11652 comm="syz.4.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2de22ebe9 code=0x7ffc0000 [ 122.956231][T11709] can0: slcan on ttyS3. [ 122.982433][T11709] can0 (unregistered): slcan off ttyS3. [ 123.053197][T11729] usb usb1: usbfs: process 11729 (syz.1.2818) did not claim interface 0 before use [ 123.113685][T11735] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 123.129051][T11741] netlink: 'syz.1.2823': attribute type 298 has an invalid length. [ 123.181189][T11749] loop4: detected capacity change from 0 to 512 [ 123.201916][T11749] ext4 filesystem being mounted at /486/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.352502][T11780] netlink: 'syz.4.2840': attribute type 1 has an invalid length. [ 123.415497][T11792] loop5: detected capacity change from 0 to 128 [ 123.430993][T11792] vfat: Unknown parameter '' [ 123.446304][T11795] ip6gretap1: entered promiscuous mode [ 123.452081][T11795] ip6gretap1: entered allmulticast mode [ 124.369682][T11847] loop6: detected capacity change from 0 to 1024 [ 124.377337][T11847] EXT4-fs: Ignoring removed bh option [ 124.531290][T11881] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 124.600334][T11886] loop5: detected capacity change from 0 to 8192 [ 124.646028][T11899] loop6: detected capacity change from 0 to 128 [ 124.653054][T11899] EXT4-fs: Ignoring removed nobh option [ 124.660368][T11899] ext4 filesystem being mounted at /178/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.696133][T11907] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 124.696133][T11907] program syz.6.2884 not setting count and/or reply_len properly [ 124.729279][T11909] loop6: detected capacity change from 0 to 512 [ 124.740719][T11909] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.757568][T11916] netlink: 'syz.2.2887': attribute type 6 has an invalid length. [ 124.766727][T11909] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 124.915343][T11944] SELinux: policydb version 0 does not match my version range 15-35 [ 124.924078][T11944] SELinux: failed to load policy [ 125.041418][T11964] tipc: Started in network mode [ 125.046352][T11964] tipc: Node identity 6a0593818211, cluster identity 4711 [ 125.053797][T11964] tipc: Enabled bearer , priority 0 [ 125.066879][T11964] tipc: Disabling bearer [ 125.177416][T11998] loop2: detected capacity change from 0 to 512 [ 125.189687][T11998] ext4 filesystem being mounted at /662/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.204670][T11998] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 125.222010][T12008] loop6: detected capacity change from 0 to 128 [ 125.232973][T12008] ext4 filesystem being mounted at /188/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.381622][T12038] lo speed is unknown, defaulting to 1000 [ 125.398338][T12043] loop5: detected capacity change from 0 to 1024 [ 125.444406][T12038] lo speed is unknown, defaulting to 1000 [ 125.451262][T12038] lo speed is unknown, defaulting to 1000 [ 125.453064][T12043] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2933: Allocating blocks 449-513 which overlap fs metadata [ 125.493517][T12040] EXT4-fs (loop5): pa ffff888107232850: logic 48, phys. 177, len 21 [ 125.501831][T12040] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 125.660966][T12099] IPv6: Can't replace route, no match found [ 125.699098][T12102] loop2: detected capacity change from 0 to 1024 [ 125.807181][T12122] loop2: detected capacity change from 0 to 128 [ 125.823424][T12122] ext4 filesystem being mounted at /674/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.916819][T12142] loop2: detected capacity change from 0 to 2048 [ 125.960451][T12142] Alternate GPT is invalid, using primary GPT. [ 125.966739][T12142] loop2: p1 p2 p3 [ 126.063261][T12170] loop2: detected capacity change from 0 to 512 [ 126.070409][T12170] EXT4-fs: Ignoring removed orlov option [ 126.096217][T12170] ext4 filesystem being mounted at /678/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.140267][T12182] tipc: Started in network mode [ 126.145325][T12182] tipc: Node identity 320b2ecc988c, cluster identity 4711 [ 126.152716][T12182] tipc: Enabled bearer , priority 0 [ 126.171744][T12182] tipc: Disabling bearer [ 126.181262][T12194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2975'. [ 126.223644][T12204] loop2: detected capacity change from 0 to 128 [ 126.614877][T12213] loop5: detected capacity change from 0 to 1024 [ 126.628358][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2984'. [ 126.909168][T12238] loop5: detected capacity change from 0 to 1024 [ 126.915989][T12238] EXT4-fs: Ignoring removed bh option [ 126.921860][T12238] EXT4-fs: inline encryption not supported [ 126.928733][T12238] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 126.940299][T12238] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 126.950920][T12238] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.2993: lblock 2 mapped to illegal pblock 2 (length 1) [ 126.965221][T12238] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2993: lblock 0 mapped to illegal pblock 48 (length 1) [ 126.979808][T12238] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.2993: Failed to acquire dquot type 0 [ 126.992164][T12238] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 127.006440][T12238] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.2993: mark_inode_dirty error [ 127.024949][T12238] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 127.035515][T12238] EXT4-fs (loop5): 1 orphan inode deleted [ 127.049272][ T126] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.070456][ T126] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 127.090930][T12238] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2993: lblock 0 mapped to illegal pblock 48 (length 1) [ 127.107377][T12238] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 127.121985][T12253] loop6: detected capacity change from 0 to 512 [ 127.129619][T12253] EXT4-fs: Ignoring removed bh option [ 127.136606][T12253] EXT4-fs error (device loop6): __ext4_iget:5464: inode #15: block 1803188595: comm syz.6.2998: invalid block [ 127.148843][T12253] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2998: couldn't read orphan inode 15 (err -117) [ 127.260748][T12266] tipc: Enabled bearer , priority 0 [ 127.268729][T12266] tipc: Disabling bearer [ 127.292879][T12274] loop5: detected capacity change from 0 to 1024 [ 127.300019][T12274] EXT4-fs: inline encryption not supported [ 127.301136][T12276] loop6: detected capacity change from 0 to 512 [ 127.305886][T12274] EXT4-fs: Ignoring removed i_version option [ 127.338030][T12276] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.350627][T12274] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 127.463276][T12302] loop5: detected capacity change from 0 to 512 [ 127.471753][T12302] EXT4-fs: quotafile must be on filesystem root [ 127.516475][ T29] kauditd_printk_skb: 406 callbacks suppressed [ 127.516493][ T29] audit: type=1400 audit(1755571469.239:12570): avc: denied { setopt } for pid=12314 comm="syz.1.3016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.563434][T12318] loop4: detected capacity change from 0 to 1024 [ 127.574345][T12318] EXT4-fs: inline encryption not supported [ 127.580519][T12318] EXT4-fs: Ignoring removed i_version option [ 127.608936][T12328] loop5: detected capacity change from 0 to 764 [ 127.620151][T12318] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 127.702898][ T29] audit: type=1326 audit(1755571469.429:12571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.6.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5fdcebe9 code=0x7ffc0000 [ 127.748180][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3025'. [ 127.770550][ T29] audit: type=1326 audit(1755571469.459:12572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.6.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6a5fdcebe9 code=0x7ffc0000 [ 127.794609][ T29] audit: type=1326 audit(1755571469.459:12573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.6.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5fdcebe9 code=0x7ffc0000 [ 127.818836][ T29] audit: type=1326 audit(1755571469.459:12574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.6.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5fdcebe9 code=0x7ffc0000 [ 127.842862][ T29] audit: type=1326 audit(1755571469.469:12575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.6.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6a5fdcebe9 code=0x7ffc0000 [ 127.867096][ T29] audit: type=1326 audit(1755571469.469:12576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.6.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5fdcebe9 code=0x7ffc0000 [ 127.891028][ T29] audit: type=1326 audit(1755571469.469:12577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.6.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5fdcebe9 code=0x7ffc0000 [ 127.914983][ T29] audit: type=1326 audit(1755571469.469:12578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.6.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a5fdcebe9 code=0x7ffc0000 [ 127.938963][ T29] audit: type=1326 audit(1755571469.469:12579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.6.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5fdcebe9 code=0x7ffc0000 [ 128.058798][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3044'. [ 128.074161][T12366] loop4: detected capacity change from 0 to 1024 [ 128.074985][T12365] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3044'. [ 128.138553][T12379] loop4: detected capacity change from 0 to 512 [ 128.160631][T12379] ext4 filesystem being mounted at /512/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.160732][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3039'. [ 128.553963][T12404] loop4: detected capacity change from 0 to 1024 [ 128.560712][T12404] EXT4-fs: Ignoring removed bh option [ 128.566139][T12404] EXT4-fs: inline encryption not supported [ 128.573126][T12404] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 128.585855][T12404] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 128.596026][T12404] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.3048: lblock 2 mapped to illegal pblock 2 (length 1) [ 128.611466][T12404] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.3048: lblock 0 mapped to illegal pblock 48 (length 1) [ 128.625993][T12404] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.3048: Failed to acquire dquot type 0 [ 128.637585][T12404] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 128.647193][T12404] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.3048: mark_inode_dirty error [ 128.658650][T12404] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 128.669325][T12404] EXT4-fs (loop4): 1 orphan inode deleted [ 128.683447][ T12] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 128.698560][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 128.710743][T12404] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.3048: lblock 0 mapped to illegal pblock 48 (length 1) [ 128.726347][T12404] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 128.834390][T12425] loop4: detected capacity change from 0 to 128 [ 128.861268][T12430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3054'. [ 128.870576][T12430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3054'. [ 128.881919][T12432] loop4: detected capacity change from 0 to 512 [ 128.899813][T12432] ext4 filesystem being mounted at /518/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.920163][T12437] loop2: detected capacity change from 0 to 1024 [ 128.973057][T12448] loop2: detected capacity change from 0 to 764 [ 129.064505][T12460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3070'. [ 129.074468][T12460] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3070'. [ 129.164127][T12475] loop5: detected capacity change from 0 to 512 [ 129.180695][T12475] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.400698][T12510] loop6: detected capacity change from 0 to 512 [ 129.401000][T12508] loop5: detected capacity change from 0 to 128 [ 129.453309][T12510] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.551624][T12531] loop6: detected capacity change from 0 to 1024 [ 129.569227][T12531] EXT4-fs: Ignoring removed nobh option [ 129.597739][T12531] EXT4-fs warning (device loop6): ext4_rename_delete:3731: inode #12: comm syz.6.3086: Deleting old file: nlink 2, error=-2 [ 129.635386][T12547] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 129.809761][T12580] loop4: detected capacity change from 0 to 1024 [ 129.818296][T12580] EXT4-fs: Ignoring removed bh option [ 129.826119][T12580] EXT4-fs: inline encryption not supported [ 129.833444][T12580] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.844595][T12580] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 129.855114][T12580] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.3104: lblock 2 mapped to illegal pblock 2 (length 1) [ 129.870485][T12580] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.3104: lblock 0 mapped to illegal pblock 48 (length 1) [ 129.885535][T12580] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.3104: Failed to acquire dquot type 0 [ 129.897198][T12580] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 129.907897][T12580] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.3104: mark_inode_dirty error [ 129.927930][T12580] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 129.939941][T12580] EXT4-fs (loop4): 1 orphan inode deleted [ 129.958293][ T37] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 129.975482][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 129.990955][T12599] blktrace: Concurrent blktraces are not allowed on sg0 [ 130.019190][ T3299] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 130.032419][ T3299] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 130.042127][ T3299] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 130.152547][T12622] loop6: detected capacity change from 0 to 512 [ 130.171219][T12622] EXT4-fs (loop6): too many log groups per flexible block group [ 130.179063][T12622] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 130.194866][T12631] lo speed is unknown, defaulting to 1000 [ 130.213709][T12622] EXT4-fs (loop6): mount failed [ 130.235234][T12638] loop2: detected capacity change from 0 to 512 [ 130.243015][T12631] lo speed is unknown, defaulting to 1000 [ 130.250088][T12631] lo speed is unknown, defaulting to 1000 [ 130.279195][T12638] ext4 filesystem being mounted at /693/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.308989][T12652] loop9: detected capacity change from 0 to 7 [ 130.330082][T12652] Buffer I/O error on dev loop9, logical block 0, async page read [ 130.345949][T12652] Buffer I/O error on dev loop9, logical block 0, async page read [ 130.353898][T12652] loop9: unable to read partition table [ 130.359838][T12652] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 130.359838][T12652] ) failed (rc=-5) [ 130.415520][T12688] hub 9-0:1.0: USB hub found [ 130.420683][T12688] hub 9-0:1.0: 8 ports detected [ 130.637551][T12732] loop2: detected capacity change from 0 to 164 [ 130.645688][T12733] loop5: detected capacity change from 0 to 512 [ 130.679340][T12733] EXT4-fs mount: 66 callbacks suppressed [ 130.679361][T12733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.698435][T12733] ext4 filesystem being mounted at /259/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.817376][ T8359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.931437][T12778] loop2: detected capacity change from 0 to 512 [ 130.959326][T12778] EXT4-fs (loop2): too many log groups per flexible block group [ 130.967228][T12778] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 130.974496][T12778] EXT4-fs (loop2): mount failed [ 131.181371][T12808] loop5: detected capacity change from 0 to 512 [ 131.194673][T12808] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.3169: error while reading EA inode 32 err=-116 [ 131.207432][T12808] EXT4-fs (loop5): Remounting filesystem read-only [ 131.214046][T12808] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 131.227410][T12808] EXT4-fs (loop5): 1 orphan inode deleted [ 131.234344][T12808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.248086][T12808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.261351][T12813] loop2: detected capacity change from 0 to 8192 [ 131.303861][T12820] __nla_validate_parse: 2 callbacks suppressed [ 131.303880][T12820] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3173'. [ 131.366873][T12836] 9pnet_fd: Insufficient options for proto=fd [ 131.537321][T12862] sg_write: data in/out 1048540/10 bytes for SCSI command 0xc0-- guessing data in; [ 131.537321][T12862] program syz.1.3188 not setting count and/or reply_len properly [ 131.665174][T12887] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3197'. [ 131.683219][T12885] usb usb8: usbfs: process 12885 (syz.5.3196) did not claim interface 0 before use [ 131.723815][T12889] syzkaller1: entered promiscuous mode [ 131.729680][T12889] syzkaller1: entered allmulticast mode [ 131.894909][T12907] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3203'. [ 131.905598][T12907] x_tables: ip_tables: udp match: only valid for protocol 17 [ 131.935199][T12914] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3205'. [ 132.002932][T12926] syzkaller1: entered promiscuous mode [ 132.008737][T12926] syzkaller1: entered allmulticast mode [ 132.163917][T12954] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3221'. [ 132.180037][T12954] xt_policy: neither incoming nor outgoing policy selected [ 132.199727][T12958] syzkaller1: entered promiscuous mode [ 132.205264][T12958] syzkaller1: entered allmulticast mode [ 132.319033][T12980] SELinux: failed to load policy [ 132.357952][T12983] lo speed is unknown, defaulting to 1000 [ 132.427613][T12983] lo speed is unknown, defaulting to 1000 [ 132.440285][T12983] lo speed is unknown, defaulting to 1000 [ 132.490500][T12995] loop4: detected capacity change from 0 to 8192 [ 132.596126][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3228'. [ 132.705568][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3235'. [ 132.762719][T13046] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3237'. [ 132.852852][T13056] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3240'. [ 132.890131][T13059] loop5: detected capacity change from 0 to 512 [ 132.910877][T13059] EXT4-fs error (device loop5): ext4_init_orphan_info:585: comm syz.5.3241: inode #0: comm syz.5.3241: iget: illegal inode # [ 132.915708][T13065] loop4: detected capacity change from 0 to 1024 [ 132.940655][T13059] EXT4-fs (loop5): get orphan inode failed [ 132.946773][T13059] EXT4-fs (loop5): mount failed [ 132.948371][T13065] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.981335][T13065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.999785][T13075] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3244'. [ 133.018753][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.070334][T13085] loop4: detected capacity change from 0 to 128 [ 133.075778][T13080] lo speed is unknown, defaulting to 1000 [ 133.128743][T13080] lo speed is unknown, defaulting to 1000 [ 133.170366][T13080] lo speed is unknown, defaulting to 1000 [ 133.315563][T13104] lo speed is unknown, defaulting to 1000 [ 133.413266][T13104] lo speed is unknown, defaulting to 1000 [ 133.436445][T13104] lo speed is unknown, defaulting to 1000 [ 133.638514][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 133.638531][ T29] audit: type=1400 audit(1755571475.369:12900): avc: denied { write } for pid=13177 comm="syz.4.3267" lport=52404 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 133.687053][ T29] audit: type=1326 audit(1755571475.399:12901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz.5.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda26aebe9 code=0x7ffc0000 [ 133.704299][T13186] bridge0: port 1(macvlan0) entered blocking state [ 133.710872][ T29] audit: type=1326 audit(1755571475.399:12902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz.5.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda26aebe9 code=0x7ffc0000 [ 133.717500][T13186] bridge0: port 1(macvlan0) entered disabled state [ 133.741482][ T29] audit: type=1326 audit(1755571475.399:12903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz.5.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fbda26aebe9 code=0x7ffc0000 [ 133.750297][T13186] macvlan0: entered allmulticast mode [ 133.771908][ T29] audit: type=1326 audit(1755571475.399:12904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz.5.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda26aebe9 code=0x7ffc0000 [ 133.777495][T13186] bridge0: entered allmulticast mode [ 133.813660][T13186] macvlan0: left allmulticast mode [ 133.818986][T13186] bridge0: left allmulticast mode [ 133.853465][T13191] lo speed is unknown, defaulting to 1000 [ 133.865523][T13203] netlink: 'syz.5.3271': attribute type 6 has an invalid length. [ 133.912532][T13191] lo speed is unknown, defaulting to 1000 [ 133.920931][T13191] lo speed is unknown, defaulting to 1000 [ 134.019546][ T29] audit: type=1400 audit(1755571475.739:12905): avc: denied { setopt } for pid=13221 comm="syz.4.3283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.039296][ T29] audit: type=1400 audit(1755571475.739:12906): avc: denied { write } for pid=13221 comm="syz.4.3283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.059986][T13224] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 134.138462][ T29] audit: type=1400 audit(1755571475.869:12907): avc: denied { read write } for pid=13251 comm="syz.2.3289" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 134.162897][ T29] audit: type=1400 audit(1755571475.869:12908): avc: denied { open } for pid=13251 comm="syz.2.3289" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 134.215752][T13254] bridge0: port 3(macvlan2) entered blocking state [ 134.222423][T13254] bridge0: port 3(macvlan2) entered disabled state [ 134.244913][T13258] loop6: detected capacity change from 0 to 128 [ 134.253164][T13254] macvlan2: entered allmulticast mode [ 134.258697][T13254] bridge0: entered allmulticast mode [ 134.266253][T13254] macvlan2: left allmulticast mode [ 134.271521][T13254] bridge0: left allmulticast mode [ 134.279853][T13258] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.306002][T13258] ext4 filesystem being mounted at /251/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.352872][ T29] audit: type=1400 audit(1755571476.079:12909): avc: denied { setattr } for pid=13257 comm="syz.6.3290" path="/251/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 134.543947][T13291] lo speed is unknown, defaulting to 1000 [ 134.588842][T13311] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 134.633975][T13291] lo speed is unknown, defaulting to 1000 [ 134.649939][T13291] lo speed is unknown, defaulting to 1000 [ 134.680619][T13316] bridge0: port 3(macvlan0) entered blocking state [ 134.687639][T13316] bridge0: port 3(macvlan0) entered disabled state [ 134.711476][T13316] macvlan0: entered allmulticast mode [ 134.717180][T13316] bridge0: entered allmulticast mode [ 134.726203][ T9137] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.746595][T13316] macvlan0: left allmulticast mode [ 134.752106][T13316] bridge0: left allmulticast mode [ 134.790219][ T126] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.824880][ T126] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.850212][ T126] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.877142][ T126] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.001959][T13373] loop5: detected capacity change from 0 to 128 [ 135.168129][T13402] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 135.174802][T13402] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 135.182425][T13402] vhci_hcd vhci_hcd.0: Device attached [ 135.190045][T13403] vhci_hcd: connection closed [ 135.190150][ T126] vhci_hcd: stop threads [ 135.199251][ T126] vhci_hcd: release socket [ 135.203684][ T126] vhci_hcd: disconnect device [ 135.241376][T13411] SELinux: failed to load policy [ 135.285208][T13419] loop2: detected capacity change from 0 to 512 [ 135.292056][T13419] EXT4-fs: Ignoring removed bh option [ 135.298778][T13419] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 135.307986][T13419] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 135.317385][T13419] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 135.326891][T13419] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 135.336326][T13419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.378423][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.457781][T13444] bridge0: port 3(macvlan2) entered blocking state [ 135.464733][T13444] bridge0: port 3(macvlan2) entered disabled state [ 135.472778][T13444] macvlan2: entered allmulticast mode [ 135.478306][T13444] bridge0: entered allmulticast mode [ 135.484486][T13444] macvlan2: left allmulticast mode [ 135.489694][T13444] bridge0: left allmulticast mode [ 135.858557][T13502] netlink: 'syz.5.3366': attribute type 3 has an invalid length. [ 135.896484][T13507] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 135.922245][T13510] can0: slcan on ptm0. [ 135.929767][T13490] lo speed is unknown, defaulting to 1000 [ 135.978238][T13509] can0 (unregistered): slcan off ptm0. [ 136.000975][T13490] lo speed is unknown, defaulting to 1000 [ 136.010941][T13490] lo speed is unknown, defaulting to 1000 [ 136.157143][T13490] chnl_net:caif_netlink_parms(): no params data found [ 136.179159][T13649] loop5: detected capacity change from 0 to 1024 [ 136.185997][T13649] journal_path: Non-blockdev passed as './bus' [ 136.192618][T13649] EXT4-fs: error: could not find journal device path [ 136.213386][T13490] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.220629][T13490] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.228247][T13490] bridge_slave_0: entered allmulticast mode [ 136.234845][T13490] bridge_slave_0: entered promiscuous mode [ 136.242047][T13490] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.249286][T13490] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.256684][T13490] bridge_slave_1: entered allmulticast mode [ 136.263503][T13490] bridge_slave_1: entered promiscuous mode [ 136.295192][T13490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.313811][T13490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.340044][T13490] team0: Port device team_slave_0 added [ 136.346521][T13490] team0: Port device team_slave_1 added [ 136.364573][T13490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.371614][T13490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.397589][T13490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.409566][T13490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.416610][T13490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.442899][T13490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.488171][T13490] hsr_slave_0: entered promiscuous mode [ 136.494340][T13490] hsr_slave_1: entered promiscuous mode [ 136.501558][T13490] debugfs: 'hsr0' already exists in 'hsr' [ 136.507328][T13490] Cannot create hsr debugfs directory [ 136.590660][T13490] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 136.600927][T13490] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 136.610348][T13490] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 136.620936][T13490] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 136.644195][T13490] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.651418][T13490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.658811][T13490] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.666111][T13490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.700363][T13490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.713725][T13490] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.723053][ T1438] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.732313][ T1438] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.745553][T13910] loop5: detected capacity change from 0 to 1764 [ 136.750016][ T1438] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.752785][T13910] iso9660: Unknown parameter 'nojoli%t' [ 136.759252][ T1438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.783015][ T1438] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.790150][ T1438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.820790][T13910] loop5: detected capacity change from 0 to 8192 [ 136.828714][T13910] FAT-fs (loop5): bogus sectors per cluster 0 [ 136.834938][T13910] FAT-fs (loop5): Can't find a valid FAT filesystem [ 136.869040][T13490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.976987][T13944] netlink: 'syz.1.3398': attribute type 13 has an invalid length. [ 137.013363][T13944] gretap0: refused to change device tx_queue_len [ 137.028482][T13944] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 137.047889][ T9] lo speed is unknown, defaulting to 1000 [ 137.053658][ T9] sz1: Port: 1 Link ACTIVE [ 137.069948][ T3409] lo speed is unknown, defaulting to 1000 [ 137.136021][T13490] veth0_vlan: entered promiscuous mode [ 137.140278][T13964] __nla_validate_parse: 12 callbacks suppressed [ 137.140297][T13964] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3405'. [ 137.144891][T13490] veth1_vlan: entered promiscuous mode [ 137.178749][T13490] veth0_macvtap: entered promiscuous mode [ 137.192919][T13490] veth1_macvtap: entered promiscuous mode [ 137.242113][T13980] syzkaller1: entered promiscuous mode [ 137.247680][T13980] syzkaller1: entered allmulticast mode [ 137.255588][T13490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.270104][T13490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.281388][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.296351][ T1438] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.312144][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.322594][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.373108][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3360'. [ 137.685864][T14062] loop5: detected capacity change from 0 to 164 [ 137.694790][T14062] bio_check_eod: 104 callbacks suppressed [ 137.694807][T14062] syz.5.3433: attempt to access beyond end of device [ 137.694807][T14062] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 137.714866][T14062] syz.5.3433: attempt to access beyond end of device [ 137.714866][T14062] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 137.847407][T14093] netlink: 272 bytes leftover after parsing attributes in process `syz.7.3443'. [ 137.877215][ T3409] kernel write not supported for file /25/clear_refs (pid: 3409 comm: kworker/0:4) [ 137.964446][T14120] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3452'. [ 137.973689][T14120] netlink: 'syz.7.3452': attribute type 20 has an invalid length. [ 137.985618][T14120] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3452'. [ 137.985643][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.994680][T14120] netlink: 'syz.7.3452': attribute type 20 has an invalid length. [ 138.021548][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.050539][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.065566][ T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.188019][T14151] loop4: detected capacity change from 0 to 512 [ 138.200379][T14151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.202655][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3456'. [ 138.213555][T14151] ext4 filesystem being mounted at /573/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.222411][T14132] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3456'. [ 138.301231][T14164] netlink: 67 bytes leftover after parsing attributes in process `syz.7.3463'. [ 138.333180][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.575879][T14203] loop4: detected capacity change from 0 to 8192 [ 138.664986][T14227] hub 6-0:1.0: USB hub found [ 138.674146][T14227] hub 6-0:1.0: 8 ports detected [ 138.822462][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 138.822482][ T29] audit: type=1326 audit(1755571480.549:13084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.5.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda26aebe9 code=0x7ffc0000 [ 138.892504][ T29] audit: type=1326 audit(1755571480.549:13085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.5.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda26aebe9 code=0x7ffc0000 [ 138.916457][ T29] audit: type=1326 audit(1755571480.549:13086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.5.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbda26aebe9 code=0x7ffc0000 [ 138.940185][ T29] audit: type=1326 audit(1755571480.549:13087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.5.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda26aebe9 code=0x7ffc0000 [ 138.963857][ T29] audit: type=1326 audit(1755571480.549:13088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.5.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda26aebe9 code=0x7ffc0000 [ 138.987708][ T29] audit: type=1326 audit(1755571480.549:13089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.5.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbda26aebe9 code=0x7ffc0000 [ 139.011558][ T29] audit: type=1326 audit(1755571480.549:13090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.5.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda26aebe9 code=0x7ffc0000 [ 139.036030][ T29] audit: type=1326 audit(1755571480.549:13091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.5.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda26aebe9 code=0x7ffc0000 [ 139.059801][ T29] audit: type=1326 audit(1755571480.549:13092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.5.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbda26aebe9 code=0x7ffc0000 [ 139.083575][ T29] audit: type=1326 audit(1755571480.549:13093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.5.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda26aebe9 code=0x7ffc0000 [ 139.231798][T14278] loop5: detected capacity change from 0 to 512 [ 139.272059][T14278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.321708][T14278] ext4 filesystem being mounted at /353/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.347689][ T8359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.432933][T14304] loop7: detected capacity change from 0 to 1024 [ 139.454483][T14304] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.480627][T14304] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 139.505386][T14302] hub 6-0:1.0: USB hub found [ 139.513315][T14302] hub 6-0:1.0: 8 ports detected [ 139.514894][T14304] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 139.530835][T14304] EXT4-fs (loop7): This should not happen!! Data will be lost [ 139.530835][T14304] [ 139.540796][T14304] EXT4-fs (loop7): Total free blocks count 0 [ 139.546807][T14304] EXT4-fs (loop7): Free/Dirty block details [ 139.552846][T14304] EXT4-fs (loop7): free_blocks=20480 [ 139.558314][T14304] EXT4-fs (loop7): dirty_blocks=64 [ 139.563455][T14304] EXT4-fs (loop7): Block reservation details [ 139.569580][T14304] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 139.592458][ T126] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 139.747065][T14337] netlink: 'syz.1.3519': attribute type 6 has an invalid length. [ 140.186476][T14385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3537'. [ 140.330585][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3545'. [ 140.759296][T14435] loop7: detected capacity change from 0 to 512 [ 140.766447][T14435] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 140.780892][T14435] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.793702][T14435] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.898954][T13490] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.926679][T14450] loop7: detected capacity change from 0 to 512 [ 140.934055][T14450] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 140.945700][T14450] EXT4-fs (loop7): 1 truncate cleaned up [ 140.952031][T14450] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.965496][T14450] sg_write: data in/out 11329/120 bytes for SCSI command 0x14-- guessing data in; [ 140.965496][T14450] program syz.7.3565 not setting count and/or reply_len properly [ 140.995905][T13490] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.099431][T14479] pimreg: entered allmulticast mode [ 141.106773][T14479] pimreg: left allmulticast mode [ 141.305742][T14504] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 141.334560][T14508] loop7: detected capacity change from 0 to 1024 [ 141.341377][T14508] EXT4-fs: Ignoring removed orlov option [ 141.349909][T14508] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.427194][T14516] ================================================================== [ 141.435327][T14516] BUG: KCSAN: data-race in filemap_read / filemap_read [ 141.442246][T14516] [ 141.444599][T14516] read to 0xffff8881045cebe8 of 8 bytes by task 14508 on cpu 1: [ 141.452490][T14516] filemap_read+0x6f/0xa00 [ 141.456961][T14516] generic_file_read_iter+0x79/0x330 [ 141.462305][T14516] ext4_file_read_iter+0x1cc/0x290 [ 141.467601][T14516] copy_splice_read+0x442/0x660 [ 141.472505][T14516] splice_direct_to_actor+0x290/0x680 [ 141.478037][T14516] do_splice_direct+0xda/0x150 [ 141.482923][T14516] do_sendfile+0x380/0x650 [ 141.487410][T14516] __x64_sys_sendfile64+0x105/0x150 [ 141.492676][T14516] x64_sys_call+0x2bb0/0x2ff0 [ 141.497386][T14516] do_syscall_64+0xd2/0x200 [ 141.501940][T14516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.507961][T14516] [ 141.510396][T14516] write to 0xffff8881045cebe8 of 8 bytes by task 14516 on cpu 0: [ 141.518327][T14516] filemap_read+0x974/0xa00 [ 141.522970][T14516] generic_file_read_iter+0x79/0x330 [ 141.528291][T14516] ext4_file_read_iter+0x1cc/0x290 [ 141.533470][T14516] copy_splice_read+0x442/0x660 [ 141.538424][T14516] splice_direct_to_actor+0x290/0x680 [ 141.544014][T14516] do_splice_direct+0xda/0x150 [ 141.548916][T14516] do_sendfile+0x380/0x650 [ 141.553378][T14516] __x64_sys_sendfile64+0x105/0x150 [ 141.558713][T14516] x64_sys_call+0x2bb0/0x2ff0 [ 141.563428][T14516] do_syscall_64+0xd2/0x200 [ 141.567983][T14516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.573910][T14516] [ 141.576253][T14516] value changed: 0x000000000000011b -> 0x000000000000011c [ 141.583464][T14516] [ 141.585849][T14516] Reported by Kernel Concurrency Sanitizer on: [ 141.592032][T14516] CPU: 0 UID: 0 PID: 14516 Comm: syz.7.3586 Tainted: G W 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 141.606159][T14516] Tainted: [W]=WARN [ 141.609979][T14516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.620067][T14516] ================================================================== [ 141.643583][T13490] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.