last executing test programs: 54.246571412s ago: executing program 0 (id=250): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 53.972283456s ago: executing program 0 (id=260): r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000, 0x0, {0x0, r3}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 53.833177908s ago: executing program 0 (id=264): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="170000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 53.63286828s ago: executing program 0 (id=268): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1054, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x5, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 52.480096876s ago: executing program 0 (id=281): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x28, r2, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}}, 0x28}}, 0x0) 51.54400328s ago: executing program 0 (id=287): perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000040) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="01000020109b"}) 51.5438559s ago: executing program 32 (id=287): perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000040) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="01000020109b"}) 24.251510971s ago: executing program 5 (id=963): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 24.172407762s ago: executing program 5 (id=965): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x32) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0xc, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 24.075287713s ago: executing program 5 (id=966): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52e, &(0x7f0000000e00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) r3 = open(&(0x7f00000002c0)='./file2\x00', 0x189242, 0x0) fallocate(r3, 0x10, 0x2, 0x7000000) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x3920e, r1, 0x0, 0x0, 0x8, 0x8010000}) 23.724451918s ago: executing program 5 (id=971): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x891018, 0x0) 23.492171592s ago: executing program 5 (id=974): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xe) 22.219328599s ago: executing program 5 (id=994): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) listen(r0, 0xfffffffe) r2 = eventfd2(0x4, 0x80801) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r3, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) shutdown(r0, 0x0) 22.16570662s ago: executing program 33 (id=994): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) listen(r0, 0xfffffffe) r2 = eventfd2(0x4, 0x80801) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r3, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) shutdown(r0, 0x0) 8.456126611s ago: executing program 1 (id=1313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r3, 0x3, '\x00', 0x0, r2, 0x3, 0x80, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 8.430653152s ago: executing program 1 (id=1315): recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000040, &(0x7f0000000580)={0x0, 0x3938700}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', 0x0}) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 8.182942186s ago: executing program 1 (id=1317): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file2\x00', 0x90, &(0x7f0000000340)={[{@dioread_lock}, {@noquota}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000c, 0x6, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 8.136455296s ago: executing program 1 (id=1318): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x1000) 8.106085016s ago: executing program 1 (id=1320): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close(r2) 7.989763558s ago: executing program 1 (id=1322): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xcad7f8d921d48bf2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 7.989392008s ago: executing program 34 (id=1322): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xcad7f8d921d48bf2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.020673105s ago: executing program 2 (id=1523): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8f, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) process_mrelease(0xffffffffffffffff, 0x700000000000000) 1.011164245s ago: executing program 6 (id=1526): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x2000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x13, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 876.446487ms ago: executing program 2 (id=1530): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0xf0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r0, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 831.825098ms ago: executing program 6 (id=1532): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) close(r2) 787.386979ms ago: executing program 2 (id=1534): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 786.873679ms ago: executing program 3 (id=1535): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYBLOB="d83abcbae7a7e94a1ba78ddec3639a33d0", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x21d0}}, 0x4c000) 757.096529ms ago: executing program 3 (id=1537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r2, 0x0, 0xfffffffff7fffffe}, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 744.914899ms ago: executing program 6 (id=1538): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 719.9439ms ago: executing program 6 (id=1539): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r2) close(r2) 702.01952ms ago: executing program 6 (id=1540): unshare(0x40020000) sched_setscheduler(0x0, 0x2, 0x0) timer_create(0x2, 0x0, &(0x7f0000044000)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xffffd000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') 667.385221ms ago: executing program 3 (id=1541): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1, 0x0, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @loopback={0x30000000000}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x6}}) 662.955ms ago: executing program 2 (id=1542): recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x2, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 507.878003ms ago: executing program 2 (id=1544): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffe}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) rt_sigsuspend(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 476.281623ms ago: executing program 4 (id=1546): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 436.263104ms ago: executing program 4 (id=1547): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r0) 410.215714ms ago: executing program 2 (id=1548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/117, 0x75}], 0x1, 0xff, 0xb26) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) 381.289314ms ago: executing program 4 (id=1550): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r3, r2) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) 341.509205ms ago: executing program 3 (id=1551): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) 294.584586ms ago: executing program 4 (id=1552): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}, 0x24048850) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x100e, 0x0, &(0x7f0000000c40)="63bd998e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 256.908336ms ago: executing program 3 (id=1554): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="74000000100001040000", @ANYRES32=r0], 0x74}}, 0x0) flistxattr(r0, &(0x7f0000000180)=""/133, 0x85) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100), 0x2, 0x50e, &(0x7f0000000f40)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) rt_sigprocmask(0x0, &(0x7f0000000300)={[0xfffffffffffffff9]}, 0x0, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) rename(&(0x7f0000000780)='./file1\x00', &(0x7f00000002c0)='./file0/file0\x00') 256.143276ms ago: executing program 7 (id=1555): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r4 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xf6c447fee59251f4}) close_range(r2, r3, 0x0) 231.291736ms ago: executing program 6 (id=1556): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1}, 0x0, 0x0) 199.219427ms ago: executing program 7 (id=1557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) 101.591838ms ago: executing program 4 (id=1558): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000001881600a843500140600fe80000000000000000000", @ANYBLOB], 0x0) 101.330498ms ago: executing program 4 (id=1559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xe803}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 100.645428ms ago: executing program 7 (id=1560): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 67.645879ms ago: executing program 7 (id=1561): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) write(r1, 0x0, 0x0) 26.117109ms ago: executing program 7 (id=1562): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet(r0, &(0x7f0000001700)=[{{&(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) 10.54331ms ago: executing program 3 (id=1563): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000000)={0x5e}, 0x8) sendmmsg$inet6(r2, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 0s ago: executing program 7 (id=1564): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000600)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) timer_create(0x9, 0x0, &(0x7f0000000500)=0x0) timer_gettime(r2, &(0x7f0000000000)) kernel console output (not intermixed with test programs): =1400 audit(1747070877.911:418): avc: denied { open } for pid=4143 comm="syz.1.245" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 42.526630][ T4144] sd 0:0:1:0: device reset [ 42.531515][ T29] audit: type=1400 audit(1747070877.961:419): avc: denied { ioctl } for pid=4143 comm="syz.1.245" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 42.632546][ T4149] bridge0: entered promiscuous mode [ 42.638046][ T4149] macvlan2: entered promiscuous mode [ 42.644850][ T4149] bridge0: port 4(macvlan2) entered blocking state [ 42.651438][ T4149] bridge0: port 4(macvlan2) entered disabled state [ 42.658779][ T4149] macvlan2: entered allmulticast mode [ 42.664241][ T4149] bridge0: entered allmulticast mode [ 42.683297][ T4149] macvlan2: left allmulticast mode [ 42.688611][ T4149] bridge0: left allmulticast mode [ 42.705346][ T4149] bridge0: left promiscuous mode [ 43.136701][ T4206] syzkaller0: refused to change device tx_queue_len [ 43.341593][ T4223] loop0: detected capacity change from 0 to 512 [ 43.348822][ T4224] mmap: syz.3.266 (4224) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.383901][ T4223] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 43.402876][ T4223] EXT4-fs (loop0): invalid journal inode [ 43.416234][ T4223] EXT4-fs (loop0): can't get journal size [ 43.462201][ T4223] EXT4-fs (loop0): 1 truncate cleaned up [ 43.508917][ T4223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.638602][ T4223] loop0: detected capacity change from 512 to 0 [ 43.669329][ T4223] syz.0.268: attempt to access beyond end of device [ 43.669329][ T4223] loop0: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 43.682910][ T4223] syz.0.268: attempt to access beyond end of device [ 43.682910][ T4223] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 43.696773][ T4223] syz.0.268: attempt to access beyond end of device [ 43.696773][ T4223] loop0: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 43.715592][ T4223] syz.0.268: attempt to access beyond end of device [ 43.715592][ T4223] loop0: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 43.774436][ T4236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.272'. [ 43.783528][ T4223] syz.0.268: attempt to access beyond end of device [ 43.783528][ T4223] loop0: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 43.783642][ T4223] syz.0.268: attempt to access beyond end of device [ 43.783642][ T4223] loop0: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 43.783699][ T4223] syz.0.268: attempt to access beyond end of device [ 43.783699][ T4223] loop0: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 43.783749][ T4223] syz.0.268: attempt to access beyond end of device [ 43.783749][ T4223] loop0: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 43.783777][ T4223] syz.0.268: attempt to access beyond end of device [ 43.783777][ T4223] loop0: rw=12288, sector=16, nr_sectors = 2 limit=0 [ 43.783825][ T4223] EXT4-fs error (device loop0): ext4_get_inode_loc:4588: inode #15: block 8: comm syz.0.268: unable to read itable block [ 43.783933][ T4223] syz.0.268: attempt to access beyond end of device [ 43.783933][ T4223] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 43.783958][ T4223] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 43.783974][ T4223] EXT4-fs (loop0): I/O error while writing superblock [ 43.784098][ T4223] EXT4-fs error (device loop0): ext4_get_inode_loc:4588: inode #15: block 8: comm syz.0.268: unable to read itable block [ 43.920114][ T4223] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 43.957777][ T4223] EXT4-fs (loop0): I/O error while writing superblock [ 43.964669][ T4223] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: IO failure [ 43.999063][ T4223] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 44.046474][ T4223] EXT4-fs (loop0): I/O error while writing superblock [ 44.053367][ T4223] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #15: comm syz.0.268: mark_inode_dirty error [ 44.140084][ T4223] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 44.159721][ T4223] EXT4-fs (loop0): I/O error while writing superblock [ 44.195213][ T4223] EXT4-fs error (device loop0): ext4_get_inode_loc:4588: inode #15: block 8: comm syz.0.268: unable to read itable block [ 44.261058][ T4223] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 44.270539][ T4223] EXT4-fs (loop0): I/O error while writing superblock [ 44.277449][ T4223] EXT4-fs error (device loop0): ext4_get_max_inline_size:121: inode #15: comm syz.0.268: can't get inode location 15 [ 44.318465][ T4223] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 44.326972][ T4223] EXT4-fs (loop0): I/O error while writing superblock [ 44.347536][ T4223] EXT4-fs error (device loop0): ext4_get_inode_loc:4588: inode #15: block 8: comm syz.0.268: unable to read itable block [ 44.379408][ T4223] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 44.396611][ T4223] EXT4-fs (loop0): I/O error while writing superblock [ 44.449097][ T3316] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1053: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 44.488089][ T3316] EXT4-fs error (device loop0): ext4_get_inode_loc:4588: inode #2: block 5: comm syz-executor: unable to read itable block [ 44.548450][ T3316] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 44.577098][ T3316] EXT4-fs (loop0): I/O error while writing superblock [ 44.584059][ T3316] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: IO failure [ 44.593219][ T3392] usb 7-1: enqueue for inactive port 0 [ 44.603023][ T3392] usb 7-1: enqueue for inactive port 0 [ 44.638460][ T3316] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 44.658964][ T3316] EXT4-fs (loop0): I/O error while writing superblock [ 44.665789][ T3316] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz-executor: mark_inode_dirty error [ 44.688585][ T3392] vhci_hcd: vhci_device speed not set [ 44.727808][ T3316] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 45.124330][ T4266] loop3: detected capacity change from 0 to 512 [ 45.174852][ T4266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.218879][ T4266] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.240656][ T3560] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.323344][ T3560] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.421385][ T3560] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.440850][ T4272] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 45.485667][ T3560] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.514730][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.614410][ T3560] bridge_slave_1: left allmulticast mode [ 45.616412][ T4285] ALSA: seq fatal error: cannot create timer (-19) [ 45.620128][ T3560] bridge_slave_1: left promiscuous mode [ 45.632407][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.649112][ T3560] bridge_slave_0: left allmulticast mode [ 45.654860][ T3560] bridge_slave_0: left promiscuous mode [ 45.660667][ T3560] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.810958][ T3560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.839822][ T3560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.851065][ T3560] bond0 (unregistering): Released all slaves [ 45.905740][ T3560] hsr_slave_0: left promiscuous mode [ 45.920590][ T3560] hsr_slave_1: left promiscuous mode [ 45.935615][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.943445][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.979727][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.987480][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.038955][ T4337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'. [ 46.048918][ T3560] veth1_macvtap: left promiscuous mode [ 46.055907][ T3560] veth0_macvtap: left promiscuous mode [ 46.071315][ T3560] veth1_vlan: left promiscuous mode [ 46.086138][ T3560] veth0_vlan: left promiscuous mode [ 46.112253][ T4349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.302'. [ 46.197951][ T3560] team0 (unregistering): Port device team_slave_1 removed [ 46.217696][ T3560] team0 (unregistering): Port device team_slave_0 removed [ 46.231925][ T4363] ref_ctr_offset mismatch. inode: 0xdf offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 46.268918][ T4355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.305'. [ 46.306424][ T4366] loop3: detected capacity change from 0 to 256 [ 46.488622][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 46.488637][ T29] audit: type=1400 audit(1747070881.931:456): avc: denied { read } for pid=4379 comm="syz.3.314" name="/" dev="configfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 46.516751][ T29] audit: type=1400 audit(1747070881.931:457): avc: denied { open } for pid=4379 comm="syz.3.314" path="/" dev="configfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 46.524816][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 46.559596][ T29] audit: type=1400 audit(1747070881.981:458): avc: denied { read } for pid=4375 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.617655][ T4384] loop4: detected capacity change from 0 to 512 [ 46.674034][ T4384] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.694298][ T4400] loop1: detected capacity change from 0 to 128 [ 46.703718][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.710858][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.722346][ T4400] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.749667][ T4384] EXT4-fs (loop4): 1 truncate cleaned up [ 46.755635][ T4276] bridge_slave_0: entered allmulticast mode [ 46.764947][ T4384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.785764][ T4276] bridge_slave_0: entered promiscuous mode [ 46.793683][ T4400] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.807641][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.814979][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.830221][ T4384] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 46.855982][ T29] audit: type=1400 audit(1747070882.271:459): avc: denied { remove_name } for pid=4383 comm="syz.4.315" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.878542][ T29] audit: type=1400 audit(1747070882.271:460): avc: denied { unlink } for pid=4383 comm="syz.4.315" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.913113][ T3502] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.922880][ T4276] bridge_slave_1: entered allmulticast mode [ 46.932531][ T4384] EXT4-fs (loop4): Remounting filesystem read-only [ 46.936846][ T4276] bridge_slave_1: entered promiscuous mode [ 46.957260][ T4384] EXT4-fs warning (device loop4): ext4_evict_inode:279: xattr delete (err -30) [ 46.987429][ T29] audit: type=1400 audit(1747070882.411:461): avc: denied { watch watch_reads } for pid=4412 comm="syz.1.320" path="/43" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 47.031205][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.042515][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.078818][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.133790][ T4276] team0: Port device team_slave_0 added [ 47.154810][ T4426] lo speed is unknown, defaulting to 1000 [ 47.161620][ T4276] team0: Port device team_slave_1 added [ 47.167515][ T4426] lo speed is unknown, defaulting to 1000 [ 47.186348][ T4426] lo speed is unknown, defaulting to 1000 [ 47.193075][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.200130][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.226143][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.238881][ T4426] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 47.264019][ T4426] lo speed is unknown, defaulting to 1000 [ 47.270528][ T4426] lo speed is unknown, defaulting to 1000 [ 47.276856][ T4426] lo speed is unknown, defaulting to 1000 [ 47.283514][ T4426] lo speed is unknown, defaulting to 1000 [ 47.298576][ T29] audit: type=1400 audit(1747070882.731:462): avc: denied { mounton } for pid=4433 comm="syz.4.327" path="/proc/150/task" dev="proc" ino=6868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 47.323568][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.330608][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.356616][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.395568][ T4426] lo speed is unknown, defaulting to 1000 [ 47.450653][ T4276] hsr_slave_0: entered promiscuous mode [ 47.456677][ T4276] hsr_slave_1: entered promiscuous mode [ 47.695637][ T4276] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.717833][ T4276] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 47.744766][ T4276] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 47.765501][ T4276] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 47.862187][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.884756][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.919573][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.926758][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.002039][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.009170][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.057850][ T4276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.068382][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.129304][ T4491] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.143542][ T29] audit: type=1400 audit(1747070883.581:463): avc: denied { ioctl } for pid=4490 comm="syz.3.343" path="socket:[8199]" dev="sockfs" ino=8199 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.223431][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.557576][ T4276] veth0_vlan: entered promiscuous mode [ 48.564891][ T4536] loop2: detected capacity change from 0 to 128 [ 48.603570][ T4276] veth1_vlan: entered promiscuous mode [ 48.639495][ T4276] veth0_macvtap: entered promiscuous mode [ 48.661311][ T4276] veth1_macvtap: entered promiscuous mode [ 48.684681][ T4544] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.785061][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.795594][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.805677][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.816358][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.826246][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.836726][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.846599][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.857080][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.877403][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.889407][ T4560] loop2: detected capacity change from 0 to 512 [ 48.896829][ T4558] tipc: Started in network mode [ 48.901831][ T4558] tipc: Node identity ac14140f, cluster identity 4711 [ 48.909217][ T4560] EXT4-fs (loop2): orphan cleanup on readonly fs [ 48.916100][ T4560] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.354: bad orphan inode 13 [ 48.927347][ T4560] ext4_test_bit(bit=12, block=18) = 1 [ 48.931036][ T4558] tipc: New replicast peer: 255.255.255.255 [ 48.932828][ T4560] is_bad_inode(inode)=0 [ 48.932836][ T4560] NEXT_ORPHAN(inode)=2130706432 [ 48.938976][ T4558] tipc: Enabled bearer , priority 10 [ 48.942888][ T4560] max_ino=32 [ 48.942897][ T4560] i_nlink=1 [ 48.960708][ T4560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.984372][ T29] audit: type=1400 audit(1747070884.421:464): avc: denied { execute } for pid=4559 comm="syz.2.354" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.984556][ T4544] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.019310][ T4560] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 49.045379][ T4563] loop4: detected capacity change from 0 to 512 [ 49.052475][ T4560] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.354: bg 0: block 248: padding at end of block bitmap is not set [ 49.067766][ T4560] Quota error (device loop2): write_blk: dquota write failed [ 49.067842][ T4563] EXT4-fs: Ignoring removed oldalloc option [ 49.075306][ T4560] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.354: Failed to acquire dquot type 1 [ 49.081433][ T4563] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.101482][ T4560] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.120305][ T4563] EXT4-fs (loop4): orphan cleanup on readonly fs [ 49.128158][ T4563] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.355: Failed to acquire dquot type 1 [ 49.132411][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.149883][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.159789][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.170257][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.180100][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.190637][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.200515][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.210951][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.221151][ T4563] EXT4-fs (loop4): 1 truncate cleaned up [ 49.223899][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.235390][ T4563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.266015][ T4544] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.281531][ T4560] syz.2.354 (4560) used greatest stack depth: 9584 bytes left [ 49.316102][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.327753][ T4276] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.336591][ T4276] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.345458][ T4276] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.354292][ T4276] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.365897][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.374957][ T4577] hub 2-0:1.0: USB hub found [ 49.375055][ T4577] hub 2-0:1.0: 8 ports detected [ 49.436394][ T4544] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.468555][ T4588] wireguard0: entered promiscuous mode [ 49.474110][ T4588] wireguard0: entered allmulticast mode [ 49.570661][ T4544] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.583964][ T4544] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.600270][ T4544] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.630298][ T4604] wireguard0: entered promiscuous mode [ 49.635834][ T4604] wireguard0: entered allmulticast mode [ 49.655665][ T4544] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.720188][ T4610] bridge0: entered promiscuous mode [ 49.736240][ T4610] macvlan2: entered promiscuous mode [ 49.750653][ T4610] bridge0: port 3(macvlan2) entered blocking state [ 49.757228][ T4610] bridge0: port 3(macvlan2) entered disabled state [ 49.794953][ T4610] macvlan2: entered allmulticast mode [ 49.800471][ T4610] bridge0: entered allmulticast mode [ 49.817345][ T4610] macvlan2: left allmulticast mode [ 49.822723][ T4610] bridge0: left allmulticast mode [ 49.828883][ T4610] bridge0: left promiscuous mode [ 49.892000][ T4630] loop1: detected capacity change from 0 to 128 [ 49.958499][ T4626] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 49.967194][ T4626] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 50.018077][ T4641] loop2: detected capacity change from 0 to 164 [ 50.058400][ T3391] tipc: Node number set to 2886997007 [ 50.193498][ T4659] tipc: Started in network mode [ 50.198479][ T4659] tipc: Node identity ac14140f, cluster identity 4711 [ 50.205735][ T4659] tipc: New replicast peer: 255.255.255.255 [ 50.211944][ T4659] tipc: Enabled bearer , priority 10 [ 50.325828][ T4673] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 50.412750][ T4677] loop5: detected capacity change from 0 to 512 [ 50.467560][ T4677] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 50.478029][ T4679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'. [ 50.537608][ T4677] EXT4-fs (loop5): 1 truncate cleaned up [ 50.553831][ T4677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.632707][ T4662] netlink: 'syz.1.383': attribute type 21 has an invalid length. [ 50.640767][ T4662] netlink: 'syz.1.383': attribute type 1 has an invalid length. [ 50.648503][ T4662] netlink: 144 bytes leftover after parsing attributes in process `syz.1.383'. [ 50.791085][ T4703] loop2: detected capacity change from 0 to 128 [ 50.967015][ T4709] loop4: detected capacity change from 0 to 164 [ 50.984637][ T4709] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 51.018148][ T4709] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 51.034717][ T4709] Symlink component flag not implemented [ 51.040532][ T4709] Symlink component flag not implemented [ 51.058322][ T4709] Symlink component flag not implemented (7) [ 51.064507][ T4709] Symlink component flag not implemented (116) [ 51.167315][ T4724] loop4: detected capacity change from 0 to 512 [ 51.198728][ T4724] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.267775][ T4724] EXT4-fs (loop4): 1 truncate cleaned up [ 51.276030][ T4276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.287891][ T4724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.339778][ T3393] tipc: Node number set to 2886997007 [ 51.437585][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.495013][ T4744] loop1: detected capacity change from 0 to 128 [ 51.552449][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 51.552465][ T29] audit: type=1326 audit(1747070886.991:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 51.595192][ T29] audit: type=1326 audit(1747070886.991:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 51.618787][ T29] audit: type=1326 audit(1747070886.991:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 51.642189][ T29] audit: type=1326 audit(1747070886.991:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 51.665547][ T29] audit: type=1326 audit(1747070886.991:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 51.688871][ T29] audit: type=1326 audit(1747070886.991:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 51.712110][ T29] audit: type=1326 audit(1747070886.991:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 51.735354][ T29] audit: type=1326 audit(1747070886.991:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 51.758655][ T29] audit: type=1326 audit(1747070886.991:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 51.781946][ T29] audit: type=1326 audit(1747070887.001:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 51.846520][ T4758] ip6gre1: entered allmulticast mode [ 51.928473][ T4763] IPv4: Oversized IP packet from 127.202.26.0 [ 51.968728][ T4756] SELinux: failed to load policy [ 51.995754][ T4767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.426'. [ 52.095397][ T4779] Driver unsupported XDP return value 0 on prog (id 336) dev N/A, expect packet loss! [ 52.106989][ T4781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.430'. [ 52.297690][ T4798] loop1: detected capacity change from 0 to 512 [ 52.319345][ T4798] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.342344][ T4798] EXT4-fs (loop1): 1 truncate cleaned up [ 52.372287][ T4798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.388535][ T4797] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 52.396695][ T4797] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 52.453884][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.688169][ T4820] bridge0: entered promiscuous mode [ 52.708722][ T4820] macvlan2: entered promiscuous mode [ 52.725909][ T4820] bridge0: port 3(macvlan2) entered blocking state [ 52.732589][ T4820] bridge0: port 3(macvlan2) entered disabled state [ 52.747400][ T4824] loop3: detected capacity change from 0 to 1024 [ 52.757126][ T4820] macvlan2: entered allmulticast mode [ 52.762744][ T4820] bridge0: entered allmulticast mode [ 52.773933][ T4820] macvlan2: left allmulticast mode [ 52.779246][ T4820] bridge0: left allmulticast mode [ 52.786109][ T4820] bridge0: left promiscuous mode [ 52.841978][ T4824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.861497][ T4824] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 52.934467][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.962294][ T4833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.980282][ T4833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.029864][ T4846] -1: renamed from syzkaller0 [ 53.065773][ T4850] wireguard0: entered promiscuous mode [ 53.071378][ T4850] wireguard0: entered allmulticast mode [ 53.269469][ T4862] bridge0: port 3(gretap0) entered blocking state [ 53.275941][ T4862] bridge0: port 3(gretap0) entered disabled state [ 53.318734][ T4862] gretap0: entered allmulticast mode [ 53.324579][ T4862] gretap0: entered promiscuous mode [ 53.335909][ T4862] bridge0: port 3(gretap0) entered blocking state [ 53.342451][ T4862] bridge0: port 3(gretap0) entered forwarding state [ 53.357910][ T4866] bridge0: entered promiscuous mode [ 53.363729][ T4866] macvlan2: entered promiscuous mode [ 53.370422][ T4866] bridge0: port 3(macvlan2) entered blocking state [ 53.377004][ T4866] bridge0: port 3(macvlan2) entered disabled state [ 53.384258][ T4866] macvlan2: entered allmulticast mode [ 53.389708][ T4866] bridge0: entered allmulticast mode [ 53.395602][ T4866] macvlan2: left allmulticast mode [ 53.400932][ T4866] bridge0: left allmulticast mode [ 53.406512][ T4866] bridge0: left promiscuous mode [ 53.415069][ T4864] gretap0: left allmulticast mode [ 53.420391][ T4864] gretap0: left promiscuous mode [ 53.425872][ T4864] bridge0: port 3(gretap0) entered disabled state [ 53.546983][ T4879] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.624115][ T4879] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.701916][ T4879] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.732228][ T4879] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.803041][ T4879] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.815836][ T4879] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.830575][ T4879] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.842396][ T4896] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.879954][ T4879] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.929208][ T4896] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.980567][ T4901] lo speed is unknown, defaulting to 1000 [ 54.004540][ T4908] loop5: detected capacity change from 0 to 1024 [ 54.013183][ T4908] EXT4-fs: Ignoring removed oldalloc option [ 54.020780][ T4908] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 54.041055][ T4896] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.073414][ T4908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.091540][ T4896] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.169824][ T4896] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.187399][ T4276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.194852][ T4896] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.209226][ T4896] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.221999][ T4896] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.263077][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.270957][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.278889][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.286870][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.294687][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.302489][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.310389][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.318246][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.326067][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.334016][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.341846][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.349688][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.357453][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.365250][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.373060][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.380911][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.388717][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.396479][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.404264][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.412047][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.419926][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.427811][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.435692][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.443699][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.451524][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.459306][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.467072][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.474933][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.482748][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.490543][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.498307][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.506153][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.513959][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.521903][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.529690][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.537447][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.545246][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.553058][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.560872][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.568719][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.576514][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.584394][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.592388][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 54.608562][ T3391] hid-generic 0000:007F:FFFFFFFE.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 54.655590][ T4938] fido_id[4938]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 54.836749][ T4957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'. [ 54.901626][ T4962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'. [ 55.281413][ T4990] netlink: 132 bytes leftover after parsing attributes in process `syz.2.519'. [ 55.486190][ T5007] loop4: detected capacity change from 0 to 1024 [ 55.547791][ T5007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.610050][ T5007] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 55.661605][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.800953][ T5027] loop4: detected capacity change from 0 to 1024 [ 55.831388][ T5027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.848189][ T5027] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.530: Allocating blocks 385-513 which overlap fs metadata [ 55.865748][ T5026] EXT4-fs (loop4): pa ffff88810695e0e0: logic 16, phys. 129, len 24 [ 55.873823][ T5026] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 55.901763][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.963905][ T5035] netlink: 'syz.2.533': attribute type 4 has an invalid length. [ 55.967482][ T5033] pim6reg1: entered promiscuous mode [ 56.159132][ T5039] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l0 [ 56.282650][ T5052] loop3: detected capacity change from 0 to 128 [ 56.296047][ T5051] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 56.303961][ T5051] FAT-fs (loop3): Filesystem has been set read-only [ 56.311047][ T5051] bio_check_eod: 67 callbacks suppressed [ 56.311062][ T5051] syz.3.539: attempt to access beyond end of device [ 56.311062][ T5051] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 56.330598][ T5051] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 56.338450][ T5051] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 56.348165][ T5052] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 56.358083][ T5052] syz.3.539: attempt to access beyond end of device [ 56.358083][ T5052] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 56.374044][ T5052] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 56.382144][ T5052] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 56.391535][ T5052] syz.3.539: attempt to access beyond end of device [ 56.391535][ T5052] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.406662][ T5052] syz.3.539: attempt to access beyond end of device [ 56.406662][ T5052] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.421617][ T5052] syz.3.539: attempt to access beyond end of device [ 56.421617][ T5052] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.435251][ T5052] syz.3.539: attempt to access beyond end of device [ 56.435251][ T5052] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.598421][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 56.598437][ T29] audit: type=1326 audit(1747070892.031:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b4b6e969 code=0x7ffc0000 [ 56.630679][ T29] audit: type=1326 audit(1747070892.041:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b4b6e969 code=0x7ffc0000 [ 56.654102][ T29] audit: type=1326 audit(1747070892.071:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34b4b6e969 code=0x7ffc0000 [ 56.677401][ T29] audit: type=1326 audit(1747070892.071:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b4b6e969 code=0x7ffc0000 [ 56.700765][ T29] audit: type=1326 audit(1747070892.071:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b4b6e969 code=0x7ffc0000 [ 56.724079][ T29] audit: type=1326 audit(1747070892.071:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34b4b6e969 code=0x7ffc0000 [ 56.747340][ T29] audit: type=1326 audit(1747070892.071:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b4b6e969 code=0x7ffc0000 [ 56.770711][ T29] audit: type=1326 audit(1747070892.071:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b4b6e969 code=0x7ffc0000 [ 56.794104][ T29] audit: type=1326 audit(1747070892.071:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34b4b6e969 code=0x7ffc0000 [ 56.817514][ T29] audit: type=1326 audit(1747070892.071:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b4b6e969 code=0x7ffc0000 [ 56.857477][ T5078] capability: warning: `syz.1.549' uses 32-bit capabilities (legacy support in use) [ 56.927068][ T5082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.551'. [ 56.948028][ T5082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.551'. [ 58.055971][ T5135] random: crng reseeded on system resumption [ 58.840773][ T5178] serio: Serial port ptm0 [ 58.863378][ T5180] lo speed is unknown, defaulting to 1000 [ 58.952592][ T5187] lo speed is unknown, defaulting to 1000 [ 59.247800][ T5198] loop4: detected capacity change from 0 to 512 [ 59.277887][ T5198] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.315712][ T5198] EXT4-fs (loop4): 1 truncate cleaned up [ 59.331024][ T5198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.454421][ T5209] tipc: Enabling of bearer rejected, already enabled [ 59.811249][ T5259] netlink: 24 bytes leftover after parsing attributes in process `syz.5.612'. [ 60.026073][ T5263] syzkaller1: entered promiscuous mode [ 60.031634][ T5263] syzkaller1: entered allmulticast mode [ 60.148169][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.399896][ T5296] block device autoloading is deprecated and will be removed. [ 60.436948][ T5298] netlink: 24 bytes leftover after parsing attributes in process `syz.4.623'. [ 60.479041][ T5298] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 60.806679][ T5330] loop4: detected capacity change from 0 to 512 [ 60.834676][ T5330] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.859261][ T5330] EXT4-fs (loop4): 1 truncate cleaned up [ 60.882275][ T5330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.102751][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.438102][ T5378] pim6reg1: entered promiscuous mode [ 61.443599][ T5378] pim6reg1: entered allmulticast mode [ 61.615139][ T5387] lo speed is unknown, defaulting to 1000 [ 61.892831][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 61.892851][ T29] audit: type=1400 audit(1747070897.331:677): avc: denied { connect } for pid=5426 comm="syz.2.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 61.929109][ T5428] pim6reg1: entered promiscuous mode [ 61.934553][ T5428] pim6reg1: entered allmulticast mode [ 61.962286][ T29] audit: type=1326 audit(1747070897.401:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 61.990718][ T29] audit: type=1326 audit(1747070897.401:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 62.014255][ T29] audit: type=1326 audit(1747070897.421:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 62.037654][ T29] audit: type=1326 audit(1747070897.421:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 62.153383][ T5461] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 62.300115][ T5486] netlink: 24 bytes leftover after parsing attributes in process `syz.5.678'. [ 62.323768][ T29] audit: type=1400 audit(1747070897.761:682): avc: denied { watch } for pid=5487 comm="syz.2.679" path="/164/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 62.324146][ T5486] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 62.410507][ T5498] pim6reg1: entered promiscuous mode [ 62.415866][ T5498] pim6reg1: entered allmulticast mode [ 62.512138][ T4752] IPVS: starting estimator thread 0... [ 62.513006][ T5505] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 62.582451][ T5517] lo speed is unknown, defaulting to 1000 [ 62.589014][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'. [ 62.597906][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'. [ 62.616356][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'. [ 62.625587][ T5514] IPVS: using max 1872 ests per chain, 93600 per kthread [ 62.634407][ T29] audit: type=1326 audit(1747070898.081:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5521 comm="syz.3.690" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb54605e969 code=0x0 [ 62.666048][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'. [ 62.674900][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'. [ 62.683943][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'. [ 62.723998][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'. [ 62.732924][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'. [ 62.747326][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'. [ 63.047392][ T29] audit: type=1326 audit(1747070898.481:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 63.070857][ T29] audit: type=1326 audit(1747070898.481:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 63.101986][ T29] audit: type=1326 audit(1747070898.541:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 63.157451][ T5575] syzkaller1: entered promiscuous mode [ 63.163137][ T5575] syzkaller1: entered allmulticast mode [ 63.180285][ T5577] tipc: Enabling of bearer rejected, already enabled [ 63.415464][ T5608] loop4: detected capacity change from 0 to 512 [ 63.468759][ T5608] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.477863][ T5608] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 63.494897][ T5608] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 63.506907][ T5608] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 63.519868][ T5608] System zones: 0-2, 18-18, 34-35 [ 63.525682][ T5608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.579996][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.857216][ T5644] loop5: detected capacity change from 0 to 128 [ 63.890139][ T5644] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.943529][ T5644] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.036449][ T4276] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.108763][ T5669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5669 comm=syz.5.728 [ 64.123847][ T5662] loop3: detected capacity change from 0 to 2048 [ 64.163238][ T5662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.263707][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.332347][ T5683] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 64.340252][ T3394] IPVS: starting estimator thread 0... [ 64.428485][ T5690] IPVS: using max 2160 ests per chain, 108000 per kthread [ 64.448412][ T5694] ALSA: seq fatal error: cannot create timer (-19) [ 64.595188][ T5704] loop5: detected capacity change from 0 to 128 [ 64.603555][ T5704] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 64.635013][ T5704] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 64.642964][ T5704] FAT-fs (loop5): Filesystem has been set read-only [ 64.650447][ T5704] syz.5.742: attempt to access beyond end of device [ 64.650447][ T5704] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.689490][ T5710] loop3: detected capacity change from 0 to 512 [ 64.696400][ T5710] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.705609][ T5710] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 64.714706][ T5710] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 64.724109][ T5710] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 64.732239][ T5710] System zones: 0-2, 18-18, 34-35 [ 64.737793][ T5710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.795274][ T5713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.804007][ T5713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.804574][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.987818][ T5727] SELinux: failed to load policy [ 65.052232][ T5738] Invalid ELF header magic: != ELF [ 65.437690][ T4752] kernel write not supported for file /398/attr/exec (pid: 4752 comm: kworker/1:5) [ 65.487796][ T5769] team0 (unregistering): Port device team_slave_0 removed [ 65.522594][ T5769] team0 (unregistering): Port device team_slave_1 removed [ 65.543432][ T5776] netlink: 'syz.3.774': attribute type 5 has an invalid length. [ 65.557257][ T5783] Invalid ELF header magic: != ELF [ 65.680039][ T5794] vhci_hcd: invalid port number 96 [ 65.685235][ T5794] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 65.879938][ T5817] lo speed is unknown, defaulting to 1000 [ 66.269090][ T5843] netlink: 'syz.2.800': attribute type 32 has an invalid length. [ 66.395988][ T5855] loop4: detected capacity change from 0 to 2048 [ 66.433287][ T5855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.459296][ T5855] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.618111][ T3502] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:11: bg 0: block 345: padding at end of block bitmap is not set [ 66.637949][ T3502] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 130 with error 117 [ 66.650666][ T3502] EXT4-fs (loop4): This should not happen!! Data will be lost [ 66.650666][ T3502] [ 66.773089][ T5879] lo speed is unknown, defaulting to 1000 [ 67.129454][ T5889] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.171751][ T5889] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.229969][ T5889] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.295503][ T5903] loop3: detected capacity change from 0 to 1024 [ 67.305740][ T5903] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.319661][ T5889] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.331620][ T5903] EXT4-fs: Ignoring removed nobh option [ 67.337266][ T5903] EXT4-fs: Ignoring removed bh option [ 67.394967][ T5889] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.407099][ T5889] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.418526][ T5889] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.428589][ T5903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.456220][ T5889] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.465636][ T5903] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.822: inode #327696: comm syz.3.822: iget: illegal inode # [ 67.481757][ T5903] EXT4-fs (loop3): Remounting filesystem read-only [ 67.488484][ T5903] EXT4-fs warning (device loop3): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.3.822: cleanup dec ref error -30 [ 67.501366][ T5903] EXT4-fs warning (device loop3): ext4_xattr_block_set:2190: inode #18: comm syz.3.822: dec ref error=-30 [ 67.527427][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.940781][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 67.940871][ T29] audit: type=1400 audit(1747070903.381:781): avc: denied { shutdown } for pid=5942 comm="syz.2.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.973734][ T5941] __nla_validate_parse: 27 callbacks suppressed [ 67.973797][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.840'. [ 68.157754][ T5941] bond1: entered promiscuous mode [ 68.164441][ T5941] bond1: entered allmulticast mode [ 68.178596][ T5941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.428461][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.477548][ T5972] lo speed is unknown, defaulting to 1000 [ 68.565571][ T5977] SELinux: failed to load policy [ 68.932086][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'. [ 68.941021][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'. [ 69.058602][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.070146][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.5.873'. [ 69.105316][ T5801] syz.4.782 (5801) used greatest stack depth: 8232 bytes left [ 69.150883][ T6018] team0 (unregistering): Port device team_slave_0 removed [ 69.158840][ T5855] syz.4.805 (5855) used greatest stack depth: 5952 bytes left [ 69.174129][ T6018] team0 (unregistering): Port device team_slave_1 removed [ 69.174182][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.289021][ T29] audit: type=1400 audit(1747070904.721:782): avc: denied { accept } for pid=6030 comm="syz.5.880" lport=33220 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.311972][ T29] audit: type=1400 audit(1747070904.721:783): avc: denied { setopt } for pid=6030 comm="syz.5.880" lport=33220 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 69.416398][ T29] audit: type=1326 audit(1747070904.851:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 69.439819][ T29] audit: type=1326 audit(1747070904.851:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 69.463143][ T29] audit: type=1326 audit(1747070904.851:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 69.469019][ T4752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.486421][ T29] audit: type=1326 audit(1747070904.851:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 69.517944][ T29] audit: type=1326 audit(1747070904.851:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 69.541232][ T29] audit: type=1326 audit(1747070904.851:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 69.564594][ T29] audit: type=1326 audit(1747070904.851:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5c50e969 code=0x7ffc0000 [ 69.609996][ T6046] loop4: detected capacity change from 0 to 512 [ 69.626849][ T6046] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.664080][ T6046] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.886: invalid indirect mapped block 4294967295 (level 1) [ 69.698148][ T6046] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.886: invalid indirect mapped block 4294967295 (level 1) [ 69.718725][ T6061] program syz.1.892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.729429][ T6046] EXT4-fs (loop4): 2 truncates cleaned up [ 69.735793][ T6046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.786013][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.799850][ T6067] vlan2: entered promiscuous mode [ 69.804939][ T6067] bridge0: entered promiscuous mode [ 69.810454][ T6067] vlan2: entered allmulticast mode [ 69.815673][ T6067] bridge0: entered allmulticast mode [ 69.870909][ T6067] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.878186][ T6067] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.914043][ T6074] hub 4-0:1.0: USB hub found [ 69.919033][ T6074] hub 4-0:1.0: 8 ports detected [ 69.935165][ T6067] bridge_slave_0: left allmulticast mode [ 69.941454][ T6067] bridge_slave_0: left promiscuous mode [ 69.947153][ T6067] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.952444][ T6076] SELinux: failed to load policy [ 69.998224][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 70.015137][ T6067] bridge_slave_1: left allmulticast mode [ 70.021037][ T6067] bridge_slave_1: left promiscuous mode [ 70.026703][ T6067] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.073683][ T6067] bond0: (slave bond_slave_0): Releasing backup interface [ 70.092052][ T6067] bond0: (slave bond_slave_1): Releasing backup interface [ 70.100273][ T6082] sd 0:0:1:0: device reset [ 70.112120][ T6067] team0: Port device team_slave_0 removed [ 70.120898][ T6067] team0: Port device team_slave_1 removed [ 70.128078][ T6067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.138332][ T6067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.147516][ T6067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.158028][ T6067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.192724][ T6067] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.201838][ T6067] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.210933][ T6067] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.219842][ T6067] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.233161][ T6067] vlan2: left promiscuous mode [ 70.237974][ T6067] bridge0: left promiscuous mode [ 70.243754][ T6067] vlan2: left allmulticast mode [ 70.248809][ T6067] bridge0: left allmulticast mode [ 70.269572][ T6078] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.377205][ T6080] bond1: entered promiscuous mode [ 70.383149][ T6080] bond1: entered allmulticast mode [ 70.392233][ T6080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.417748][ T6078] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.481548][ T6078] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.499724][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.541976][ T6078] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.611575][ T6078] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.658535][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.680131][ T6078] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.706110][ T6078] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.726186][ T6078] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.813558][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.919'. [ 70.980659][ T6155] bond1: entered promiscuous mode [ 70.986458][ T6155] bond1: entered allmulticast mode [ 70.997386][ T6155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.108657][ T6182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6182 comm=syz.5.924 [ 71.137640][ T6185] SELinux: failed to load policy [ 71.298553][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.326366][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.936'. [ 71.357510][ T6215] loop5: detected capacity change from 0 to 512 [ 71.391003][ T6215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.417377][ T6215] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.439676][ T6215] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.937: corrupted inode contents [ 71.452716][ T6215] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.937: mark_inode_dirty error [ 71.469776][ T6215] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.937: corrupted inode contents [ 71.492097][ T6213] bond1: entered promiscuous mode [ 71.498926][ T6213] bond1: entered allmulticast mode [ 71.506748][ T6213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.525721][ T6221] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.937: corrupted inode contents [ 71.537701][ T6221] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.937: mark_inode_dirty error [ 71.552709][ T6221] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.937: corrupted inode contents [ 71.564452][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.584138][ T6221] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.937: mark_inode_dirty error [ 71.619519][ T6221] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.937: corrupted inode contents [ 71.688506][ T6221] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.937: mark_inode_dirty error [ 71.734992][ T4276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.095835][ T6256] Falling back ldisc for ptm0. [ 72.150175][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.578548][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.666073][ T6280] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 72.797052][ T6292] lo speed is unknown, defaulting to 1000 [ 72.841749][ T6301] loop3: detected capacity change from 0 to 512 [ 72.861352][ T6303] loop5: detected capacity change from 0 to 512 [ 72.908693][ T6301] EXT4-fs: Mount option(s) incompatible with ext2 [ 72.938297][ T6303] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.947601][ T6303] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 72.982290][ T6303] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 73.032809][ T6303] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 73.057210][ T6303] System zones: 0-2, 18-18, 34-34 [ 73.078892][ T6303] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 73.128456][ T6303] EXT4-fs (loop5): 1 truncate cleaned up [ 73.141381][ T6303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.220716][ T4752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.229095][ T4276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.370675][ T6325] syzkaller0: entered promiscuous mode [ 73.377248][ T6325] syzkaller0: entered allmulticast mode [ 73.628584][ T4752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.704182][ T6407] vlan2: entered promiscuous mode [ 73.709379][ T6407] bridge0: entered promiscuous mode [ 73.714854][ T6407] vlan2: entered allmulticast mode [ 73.720261][ T6407] bridge0: entered allmulticast mode [ 73.865092][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.872474][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.911218][ T6407] bridge_slave_0: left allmulticast mode [ 73.917054][ T6407] bridge_slave_0: left promiscuous mode [ 73.922976][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.943148][ T6407] bridge_slave_1: left allmulticast mode [ 73.948976][ T6407] bridge_slave_1: left promiscuous mode [ 73.954858][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.972581][ T6407] bond0: (slave bond_slave_0): Releasing backup interface [ 74.002137][ T6235] syz.2.946 (6235) used greatest stack depth: 5784 bytes left [ 74.011612][ T6407] bond0: (slave bond_slave_1): Releasing backup interface [ 74.025378][ T6407] team0: Port device team_slave_0 removed [ 74.035878][ T6407] team0: Port device team_slave_1 removed [ 74.044486][ T6407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.054080][ T6407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.064126][ T6407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.073670][ T6407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.112884][ T6407] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.121492][ T6407] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.129975][ T6407] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.138713][ T6407] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.155188][ T6407] bond1: left promiscuous mode [ 74.160414][ T6407] bond1: left allmulticast mode [ 74.165765][ T6407] vlan2: left promiscuous mode [ 74.170592][ T6407] bridge0: left promiscuous mode [ 74.175662][ T6407] vlan2: left allmulticast mode [ 74.180728][ T6407] bridge0: left allmulticast mode [ 74.188594][ T3391] lo speed is unknown, defaulting to 1000 [ 74.194674][ T3391] syz0: Port: 1 Link DOWN [ 74.263084][ T6416] SELinux: failed to load policy [ 74.269262][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 74.269277][ T29] audit: type=1400 audit(1747070909.711:826): avc: denied { ioctl } for pid=6417 comm="syz.3.980" path="socket:[13113]" dev="sockfs" ino=13113 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 74.275698][ T6418] loop3: detected capacity change from 0 to 512 [ 74.326460][ T6418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.339589][ T6418] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.357412][ T6421] netlink: 'syz.4.981': attribute type 3 has an invalid length. [ 74.379534][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.456620][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.985'. [ 74.475839][ T29] audit: type=1400 audit(1747070909.891:827): avc: denied { setopt } for pid=6429 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.498701][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.653334][ T29] audit: type=1400 audit(1747070910.091:828): avc: denied { create } for pid=6443 comm="syz.4.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.674070][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.718827][ T29] audit: type=1400 audit(1747070910.121:829): avc: denied { write } for pid=6443 comm="syz.4.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.758546][ T6450] netlink: 'syz.1.992': attribute type 16 has an invalid length. [ 74.766456][ T6450] netlink: 'syz.1.992': attribute type 17 has an invalid length. [ 74.834122][ T6450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.851492][ T6450] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.871456][ T6450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.997494][ T6453] lo speed is unknown, defaulting to 1000 [ 75.065613][ T6456] lo speed is unknown, defaulting to 1000 [ 75.178556][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'. [ 75.236191][ T6456] chnl_net:caif_netlink_parms(): no params data found [ 75.359096][ T6456] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.366260][ T6456] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.376046][ T6456] bridge_slave_0: entered allmulticast mode [ 75.383387][ T6456] bridge_slave_0: entered promiscuous mode [ 75.393670][ T6456] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.400889][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.410190][ T6456] bridge_slave_1: entered allmulticast mode [ 75.416738][ T6456] bridge_slave_1: entered promiscuous mode [ 75.444231][ T6456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.472618][ T6456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.509398][ T6456] team0: Port device team_slave_0 added [ 75.516218][ T6456] team0: Port device team_slave_1 added [ 75.540219][ T6456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.547300][ T6456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.573330][ T6456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.586734][ T6456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.593801][ T6456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.619916][ T6456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.657043][ T6456] hsr_slave_0: entered promiscuous mode [ 75.664477][ T6456] hsr_slave_1: entered promiscuous mode [ 75.670645][ T6456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.678494][ T6456] Cannot create hsr debugfs directory [ 75.698534][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.816358][ T29] audit: type=1400 audit(1747070911.251:830): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop2" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.839896][ T6501] block device autoloading is deprecated and will be removed. [ 75.851219][ T3317] block device autoloading is deprecated and will be removed. [ 75.852706][ T6456] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 75.874920][ T6456] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 75.882315][ T29] audit: type=1400 audit(1747070911.251:831): avc: denied { open } for pid=3317 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.909416][ T6456] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 75.920204][ T6456] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 75.935948][ T6503] wireguard0: entered promiscuous mode [ 75.941846][ T6503] wireguard0: entered allmulticast mode [ 75.976430][ T29] audit: type=1400 audit(1747070911.411:832): avc: denied { create } for pid=6505 comm="syz.1.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 76.020936][ T6456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.030582][ T29] audit: type=1400 audit(1747070911.411:833): avc: denied { write } for pid=6505 comm="syz.1.1010" path="socket:[13807]" dev="sockfs" ino=13807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 76.072568][ T6456] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.095917][ T6510] vlan2: entered promiscuous mode [ 76.101196][ T6510] bridge0: entered promiscuous mode [ 76.106749][ T6510] vlan2: entered allmulticast mode [ 76.111957][ T6510] bridge0: entered allmulticast mode [ 76.130552][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.137820][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.178571][ T6510] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.185793][ T6510] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.210105][ T6510] bridge_slave_0: left allmulticast mode [ 76.215815][ T6510] bridge_slave_0: left promiscuous mode [ 76.221895][ T6510] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.233532][ T29] audit: type=1400 audit(1747070911.671:834): avc: denied { module_request } for pid=6517 comm="syz.2.1016" kmod="netdev-pim6reg1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 76.259375][ T6411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.272696][ T6510] bridge_slave_1: left allmulticast mode [ 76.278507][ T6510] bridge_slave_1: left promiscuous mode [ 76.284213][ T6510] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.295609][ T6510] bond0: (slave bond_slave_0): Releasing backup interface [ 76.306132][ T6510] bond0: (slave bond_slave_1): Releasing backup interface [ 76.317591][ T6510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.326235][ T6510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.336228][ T6510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.345064][ T6510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.369813][ T6510] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.378242][ T6510] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.386701][ T6510] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.395119][ T6510] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.406496][ T6510] bond1: left promiscuous mode [ 76.411486][ T6510] bond1: left allmulticast mode [ 76.416780][ T6510] vlan2: left promiscuous mode [ 76.421870][ T6510] bridge0: left promiscuous mode [ 76.427441][ T6510] vlan2: left allmulticast mode [ 76.432371][ T6510] bridge0: left allmulticast mode [ 76.437762][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.450288][ T6519] pim6reg1: entered promiscuous mode [ 76.455647][ T6519] pim6reg1: entered allmulticast mode [ 76.466782][ T6523] ipvlan2: entered promiscuous mode [ 76.472790][ T6523] bridge0: port 1(ipvlan2) entered blocking state [ 76.479274][ T6523] bridge0: port 1(ipvlan2) entered disabled state [ 76.496107][ T6523] ipvlan2: entered allmulticast mode [ 76.501521][ T6523] bridge0: entered allmulticast mode [ 76.515108][ T6523] ipvlan2: left allmulticast mode [ 76.520317][ T6523] bridge0: left allmulticast mode [ 76.531745][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.538936][ T3503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.578942][ T6456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.668466][ T29] audit: type=1400 audit(1747070912.101:835): avc: denied { firmware_load } for pid=6530 comm="syz.1.1020" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 76.741634][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.769562][ T6456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.915781][ T6556] loop2: detected capacity change from 0 to 2048 [ 76.955750][ T6556] ext4: Unknown parameter 'noacl' [ 77.027970][ T6456] veth0_vlan: entered promiscuous mode [ 77.057331][ T6456] veth1_vlan: entered promiscuous mode [ 77.098042][ T6456] veth0_macvtap: entered promiscuous mode [ 77.126692][ T6456] veth1_macvtap: entered promiscuous mode [ 77.161593][ T6456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.172307][ T6456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.182319][ T6456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.193101][ T6456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.205827][ T6456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.236475][ T6456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.247019][ T6456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.257051][ T6456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.267558][ T6456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.282224][ T6456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.354001][ T6456] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.362985][ T6456] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.371934][ T6456] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.380690][ T6456] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.628412][ T6584] Set syz1 is full, maxelem 65536 reached [ 77.778560][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.312191][ T6676] wireguard0: entered promiscuous mode [ 78.317824][ T6676] wireguard0: entered allmulticast mode [ 78.821382][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.927434][ T6770] geneve0: entered allmulticast mode [ 78.965402][ T6774] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1077'. [ 79.025890][ T1040] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 79.036571][ T6779] loop3: detected capacity change from 0 to 1024 [ 79.058093][ T1040] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 79.068518][ T6781] wireguard0: entered promiscuous mode [ 79.071195][ T6779] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.074114][ T6781] wireguard0: entered allmulticast mode [ 79.112309][ T6779] EXT4-fs: Mount option(s) incompatible with ext2 [ 79.225268][ T6792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1084'. [ 79.273226][ T6796] serio: Serial port ptm0 [ 79.298717][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.311649][ T6800] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1087'. [ 79.364967][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 79.364983][ T29] audit: type=1326 audit(1747070914.801:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.1.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b4b6e969 code=0x7ffc0000 [ 79.394616][ T29] audit: type=1326 audit(1747070914.801:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.1.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b4b6e969 code=0x7ffc0000 [ 79.426431][ T29] audit: type=1326 audit(1747070914.861:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.1.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34b4b6e969 code=0x7ffc0000 [ 79.450101][ T29] audit: type=1326 audit(1747070914.861:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.1.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b4b6e969 code=0x7ffc0000 [ 79.473618][ T29] audit: type=1326 audit(1747070914.861:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.1.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b4b6e969 code=0x7ffc0000 [ 79.520260][ T29] audit: type=1400 audit(1747070914.961:866): avc: denied { create } for pid=6811 comm="syz.2.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 79.543418][ T6812] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1092'. [ 79.606725][ T6816] 9pnet: p9_errstr2errno: server reported unknown error [ 79.615364][ T29] audit: type=1400 audit(1747070915.041:867): avc: denied { create } for pid=6817 comm="syz.1.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.824774][ T29] audit: type=1400 audit(1747070915.261:868): avc: denied { unmount } for pid=3327 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 79.847857][ T6831] netlink: 'syz.1.1100': attribute type 4 has an invalid length. [ 79.859835][ T6831] netlink: 'syz.1.1100': attribute type 4 has an invalid length. [ 79.871784][ T1040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.896394][ T29] audit: type=1400 audit(1747070915.321:869): avc: denied { setopt } for pid=6832 comm="syz.3.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.915940][ T29] audit: type=1400 audit(1747070915.321:870): avc: denied { name_bind } for pid=6832 comm="syz.3.1102" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 80.087489][ T6849] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.258513][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.276162][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.428157][ T6893] smc: net device bond0 applied user defined pnetid SYZ2 [ 80.445604][ T6893] smc: net device bond0 erased user defined pnetid SYZ2 [ 80.531829][ T6903] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.556462][ T6906] loop3: detected capacity change from 0 to 512 [ 80.583667][ T6906] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.612256][ T6906] EXT4-fs (loop3): 1 truncate cleaned up [ 80.618935][ T6903] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.630076][ T6906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.680077][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.692706][ T6903] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.761647][ T6903] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.884632][ T6903] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.905150][ T3535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.913935][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.935746][ T6903] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.949950][ T3513] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.964530][ T6903] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.985346][ T6903] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.995491][ T3513] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.102957][ T3513] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.211986][ T3513] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.260647][ T6978] loop3: detected capacity change from 0 to 512 [ 81.278015][ T6978] EXT4-fs: Ignoring removed orlov option [ 81.332151][ T3513] bridge_slave_1: left allmulticast mode [ 81.337872][ T3513] bridge_slave_1: left promiscuous mode [ 81.343688][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.357468][ T6988] loop6: detected capacity change from 0 to 512 [ 81.394889][ T3513] bridge_slave_0: left allmulticast mode [ 81.400795][ T3513] bridge_slave_0: left promiscuous mode [ 81.406570][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.427939][ T6988] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 81.469577][ T6978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.499429][ T6988] EXT4-fs (loop6): 1 truncate cleaned up [ 81.513583][ T6978] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.534097][ T6988] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.631950][ T3513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.645412][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.679803][ T3513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.710196][ T3513] bond0 (unregistering): Released all slaves [ 81.734517][ T3513] bond1 (unregistering): Released all slaves [ 81.770272][ T3513] tipc: Disabling bearer [ 81.775679][ T3513] tipc: Left network mode [ 81.811475][ T3513] hsr_slave_0: left promiscuous mode [ 81.848782][ T3513] hsr_slave_1: left promiscuous mode [ 81.854757][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.862249][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.896096][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.903809][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.930226][ T7035] loop9: detected capacity change from 0 to 7 [ 81.945013][ T3513] veth1_macvtap: left promiscuous mode [ 81.951264][ T3513] veth0_macvtap: left promiscuous mode [ 81.957598][ T7035] buffer_io_error: 3 callbacks suppressed [ 81.957614][ T7035] Buffer I/O error on dev loop9, logical block 0, async page read [ 81.977790][ T7035] Buffer I/O error on dev loop9, logical block 0, async page read [ 81.985748][ T7035] loop9: unable to read partition table [ 82.013609][ T3513] veth1_vlan: left promiscuous mode [ 82.016482][ T7035] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 82.016482][ T7035] U) failed (rc=-5) [ 82.019665][ T7043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.037783][ T6991] Buffer I/O error on dev loop9, logical block 0, async page read [ 82.051281][ T6991] Buffer I/O error on dev loop9, logical block 0, async page read [ 82.054519][ T3513] veth0_vlan: left promiscuous mode [ 82.059547][ T6991] Buffer I/O error on dev loop9, logical block 0, async page read [ 82.075343][ T6991] Buffer I/O error on dev loop9, logical block 0, async page read [ 82.114784][ T6991] Buffer I/O error on dev loop9, logical block 0, async page read [ 82.134303][ T6991] Buffer I/O error on dev loop9, logical block 0, async page read [ 82.158825][ T6991] Buffer I/O error on dev loop9, logical block 0, async page read [ 82.163342][ T7043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.185968][ T6991] Buffer I/O error on dev loop9, logical block 0, async page read [ 82.194887][ T6456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.561702][ T7086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1161'. [ 82.570782][ T7086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1161'. [ 82.710664][ T3513] IPVS: stop unused estimator thread 0... [ 82.771957][ T7107] netlink: 'syz.1.1165': attribute type 1 has an invalid length. [ 82.779775][ T7107] netlink: 'syz.1.1165': attribute type 2 has an invalid length. [ 82.805544][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1165'. [ 83.164723][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1171'. [ 83.768215][ T7142] netlink: 191080 bytes leftover after parsing attributes in process `wg1'. [ 83.777658][ T7142] netlink: zone id is out of range [ 83.783027][ T7142] netlink: zone id is out of range [ 83.788411][ T7142] netlink: zone id is out of range [ 83.853887][ T7152] loop4: detected capacity change from 0 to 1024 [ 83.912230][ T7152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.945418][ T7164] loop3: detected capacity change from 0 to 128 [ 83.957712][ T7152] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1176: bg 0: block 88: padding at end of block bitmap is not set [ 83.988217][ T7167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.006121][ T7167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.095258][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.329455][ T7194] block device autoloading is deprecated and will be removed. [ 84.367373][ T7194] syz.4.1186: attempt to access beyond end of device [ 84.367373][ T7194] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 84.430152][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 84.430171][ T29] audit: type=1326 audit(1747070919.871:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038f6de969 code=0x7ffc0000 [ 84.495437][ T7212] loop3: detected capacity change from 0 to 128 [ 84.501837][ T29] audit: type=1326 audit(1747070919.871:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038f6de969 code=0x7ffc0000 [ 84.525266][ T29] audit: type=1326 audit(1747070919.911:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f038f6de969 code=0x7ffc0000 [ 84.548702][ T29] audit: type=1326 audit(1747070919.911:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f038f6de9a3 code=0x7ffc0000 [ 84.572072][ T29] audit: type=1326 audit(1747070919.911:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f038f6de9a3 code=0x7ffc0000 [ 84.595269][ T29] audit: type=1326 audit(1747070919.911:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038f6de969 code=0x7ffc0000 [ 84.618681][ T29] audit: type=1326 audit(1747070919.911:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038f6de969 code=0x7ffc0000 [ 84.642113][ T29] audit: type=1326 audit(1747070919.931:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038f6de969 code=0x7ffc0000 [ 84.665533][ T29] audit: type=1326 audit(1747070919.931:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038f6de969 code=0x7ffc0000 [ 84.689264][ T29] audit: type=1326 audit(1747070919.931:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038f6de969 code=0x7ffc0000 [ 84.757363][ T7219] netlink: 'syz.3.1192': attribute type 11 has an invalid length. [ 84.765329][ T7219] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1192'. [ 84.916151][ T7222] SELinux: failed to load policy [ 84.925303][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1195'. [ 84.973880][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1199'. [ 85.061765][ T7246] vhci_hcd: invalid port number 96 [ 85.067043][ T7246] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 85.181150][ T7261] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 85.311058][ T7286] netlink: 'syz.2.1215': attribute type 4 has an invalid length. [ 85.398755][ T7297] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7297 comm=syz.1.1220 [ 85.411305][ T7297] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7297 comm=syz.1.1220 [ 85.445462][ T7295] vhci_hcd: invalid port number 96 [ 85.450720][ T7295] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 85.481365][ T7303] loop4: detected capacity change from 0 to 128 [ 85.514423][ T7309] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 85.524888][ T7303] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.539582][ T7303] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.569720][ T7309] vhci_hcd: default hub control req: 0531 v0000 i0000 l31125 [ 85.604310][ T3327] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.614799][ T7317] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 85.767803][ T7332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.794536][ T7332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.860390][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1238'. [ 85.888420][ T7342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1238'. [ 85.923813][ T7342] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1238'. [ 86.001101][ T7347] loop3: detected capacity change from 0 to 1024 [ 86.028875][ T7347] EXT4-fs: test_dummy_encryption option not supported [ 86.114930][ T7350] wg2: entered promiscuous mode [ 86.119911][ T7350] wg2: entered allmulticast mode [ 86.246378][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1246'. [ 86.339527][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1248'. [ 86.403465][ T7366] syzkaller0: entered promiscuous mode [ 86.409025][ T7366] syzkaller0: entered allmulticast mode [ 86.909506][ T7394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1261'. [ 86.936575][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1262'. [ 87.646751][ T7453] loop6: detected capacity change from 0 to 1024 [ 87.655198][ T7453] EXT4-fs: Ignoring removed bh option [ 87.660866][ T7453] EXT4-fs: inline encryption not supported [ 87.667591][ T7453] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.680762][ T7455] vhci_hcd: invalid port number 96 [ 87.685919][ T7455] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 87.703818][ T7453] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 87.730414][ T7453] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 2: comm syz.6.1286: lblock 2 mapped to illegal pblock 2 (length 1) [ 87.745985][ T7453] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 48: comm syz.6.1286: lblock 0 mapped to illegal pblock 48 (length 1) [ 87.760751][ T7453] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1286: Failed to acquire dquot type 0 [ 87.772946][ T7447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.781799][ T7453] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 87.791550][ T7447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.799944][ T7453] EXT4-fs error (device loop6): ext4_evict_inode:259: inode #11: comm syz.6.1286: mark_inode_dirty error [ 87.811454][ T7453] EXT4-fs warning (device loop6): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 87.822044][ T7453] EXT4-fs (loop6): 1 orphan inode deleted [ 87.828206][ T7453] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.845132][ T3513] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:21: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.861089][ T3513] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:21: Failed to release dquot type 0 [ 87.901209][ T6456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.920065][ T6456] EXT4-fs error (device loop6): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 87.941262][ T6456] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 87.950912][ T6456] EXT4-fs error (device loop6): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 88.206563][ T7494] batman_adv: batadv0: Adding interface: dummy0 [ 88.213055][ T7494] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.238570][ T7494] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 88.527704][ T7519] lo speed is unknown, defaulting to 1000 [ 88.909585][ T7530] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 89.030857][ T7532] lo speed is unknown, defaulting to 1000 [ 89.084714][ T7532] chnl_net:caif_netlink_parms(): no params data found [ 89.131420][ T7532] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.138617][ T7532] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.145809][ T7532] bridge_slave_0: entered allmulticast mode [ 89.152275][ T7532] bridge_slave_0: entered promiscuous mode [ 89.159182][ T7532] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.166272][ T7532] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.173587][ T7532] bridge_slave_1: entered allmulticast mode [ 89.181454][ T7532] bridge_slave_1: entered promiscuous mode [ 89.191594][ T7550] loop3: detected capacity change from 0 to 512 [ 89.198097][ T7550] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.205514][ T7550] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.225235][ T7532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.259504][ T7550] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 89.276786][ T7550] EXT4-fs (loop3): 1 truncate cleaned up [ 89.282859][ T7550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.317719][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.317877][ T39] bond0 (unregistering): Released all slaves [ 89.343902][ T7561] net_ratelimit: 33 callbacks suppressed [ 89.343917][ T7561] openvswitch: netlink: Message has 6 unknown bytes. [ 89.357944][ T7532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.386424][ T39] tipc: Disabling bearer [ 89.391739][ T39] tipc: Left network mode [ 89.399189][ T7532] team0: Port device team_slave_0 added [ 89.408684][ T39] hsr_slave_0: left promiscuous mode [ 89.414400][ T39] hsr_slave_1: left promiscuous mode [ 89.428605][ T7559] Falling back ldisc for ttyS3. [ 89.538280][ T7532] team0: Port device team_slave_1 added [ 89.563887][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.570944][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.596988][ T7532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.645503][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.652738][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.678737][ T7532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.807562][ T7532] hsr_slave_0: entered promiscuous mode [ 89.813946][ T7532] hsr_slave_1: entered promiscuous mode [ 89.874337][ T7582] loop4: detected capacity change from 0 to 128 [ 89.899523][ T7582] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 89.916330][ T7582] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.985523][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 89.985542][ T29] audit: type=1400 audit(1747070925.371:1271): avc: denied { create } for pid=7581 comm="syz.4.1338" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 90.002816][ T3327] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.033839][ T29] audit: type=1400 audit(1747070925.371:1272): avc: denied { rename } for pid=7581 comm="syz.4.1338" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 90.100683][ T7586] __nla_validate_parse: 5 callbacks suppressed [ 90.100778][ T7586] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1339'. [ 90.272594][ T7592] loop4: detected capacity change from 0 to 8192 [ 90.518670][ T7592] loop4: p1 p2 p3 [ 90.523388][ T7592] loop4: p2 start 3506442254 is beyond EOD, truncated [ 90.530239][ T7592] loop4: p3 size 49412 extends beyond EOD, truncated [ 90.727104][ T7599] SELinux: failed to load policy [ 90.897481][ T29] audit: type=1400 audit(1747070926.331:1273): avc: denied { create } for pid=7606 comm="syz.6.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 90.917175][ T29] audit: type=1400 audit(1747070926.331:1274): avc: denied { ioctl } for pid=7606 comm="syz.6.1348" path="socket:[17161]" dev="sockfs" ino=17161 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 91.069459][ T7578] Set syz1 is full, maxelem 65536 reached [ 91.112111][ T7532] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 91.127272][ T7532] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 91.150662][ T7532] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 91.167297][ T7618] program syz.6.1360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.185377][ T7532] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 91.269376][ T7532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.291965][ T7532] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.342307][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.349482][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.376276][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.383410][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.409575][ T29] audit: type=1326 audit(1747070926.841:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7632 comm="syz.3.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54605e969 code=0x7ffc0000 [ 91.433176][ T29] audit: type=1326 audit(1747070926.841:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7632 comm="syz.3.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54605e969 code=0x7ffc0000 [ 91.456633][ T29] audit: type=1326 audit(1747070926.841:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7632 comm="syz.3.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fb54605e969 code=0x7ffc0000 [ 91.480201][ T29] audit: type=1326 audit(1747070926.841:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7632 comm="syz.3.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54605e969 code=0x7ffc0000 [ 91.503797][ T29] audit: type=1326 audit(1747070926.841:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7632 comm="syz.3.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb54605e969 code=0x7ffc0000 [ 91.527385][ T29] audit: type=1326 audit(1747070926.841:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7632 comm="syz.3.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54605e969 code=0x7ffc0000 [ 91.534837][ T7532] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.561316][ T7532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.641347][ T7642] SELinux: Context system_u:object_r:etc_aliases_t:s0 is not valid (left unmapped). [ 91.695058][ T7648] netlink: 'syz.6.1363': attribute type 10 has an invalid length. [ 91.700552][ T7532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.706348][ T7648] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1363'. [ 91.783852][ T7648] team0: Port device geneve1 added [ 91.949471][ T7532] veth0_vlan: entered promiscuous mode [ 91.967949][ T7532] veth1_vlan: entered promiscuous mode [ 91.992715][ T7677] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 92.005337][ T7532] veth0_macvtap: entered promiscuous mode [ 92.008107][ T7677] vhci_hcd: invalid port number 96 [ 92.014272][ T7532] veth1_macvtap: entered promiscuous mode [ 92.016443][ T7677] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 92.028841][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.039724][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.049584][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.060060][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.084183][ T7532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.097403][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.107976][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.117942][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.128545][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.139581][ T7532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.148557][ T7532] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.155783][ T7686] netlink: 'syz.2.1376': attribute type 11 has an invalid length. [ 92.157315][ T7532] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.165327][ T7686] netlink: 448 bytes leftover after parsing attributes in process `syz.2.1376'. [ 92.173925][ T7532] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.191921][ T7532] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.228416][ T7692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7692 comm=syz.2.1377 [ 92.274140][ T7695] SELinux: syz.2.1378 (7695) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 92.423222][ T7710] ref_ctr_offset mismatch. inode: 0x506 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xffffffff00 [ 92.611755][ T7724] tipc: Started in network mode [ 92.616677][ T7724] tipc: Node identity 9af87b469694, cluster identity 4711 [ 92.624089][ T7724] tipc: Enabled bearer , priority 0 [ 92.645278][ T7724] tipc: Disabling bearer [ 92.679282][ T7736] Invalid ELF header magic: != ELF [ 92.756575][ T7746] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1402' sets config #1 [ 92.985953][ T7776] tipc: Started in network mode [ 92.991035][ T7776] tipc: Node identity 0e0540a5754b, cluster identity 4711 [ 92.998354][ T7776] tipc: Enabled bearer , priority 0 [ 93.014589][ T7776] tipc: Disabling bearer [ 93.022914][ T7778] program syz.7.1415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.032728][ T7778] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 93.221838][ T7807] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1430'. [ 93.277944][ T7815] tipc: Started in network mode [ 93.282965][ T7815] tipc: Node identity 1e0555302c8e, cluster identity 4711 [ 93.290250][ T7815] tipc: Enabled bearer , priority 0 [ 93.301005][ T7815] tipc: Disabling bearer [ 93.368310][ T7823] loop7: detected capacity change from 0 to 512 [ 93.376014][ T7823] EXT4-fs: Ignoring removed orlov option [ 93.391268][ T7823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.404426][ T7823] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.430530][ T7532] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.449496][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1439'. [ 93.459368][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1439'. [ 93.533510][ T7839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.545393][ T7839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.654001][ T7847] tipc: Started in network mode [ 93.659020][ T7847] tipc: Node identity c24c73bebe25, cluster identity 4711 [ 93.666289][ T7847] tipc: Enabled bearer , priority 0 [ 93.677213][ T7847] tipc: Disabling bearer [ 93.770540][ T7856] syz_tun: entered promiscuous mode [ 93.776216][ T7856] batadv_slave_0: entered promiscuous mode [ 93.782858][ T7856] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 93.793010][ T7856] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.803827][ T7856] hsr1: entered allmulticast mode [ 93.808964][ T7856] syz_tun: entered allmulticast mode [ 93.814265][ T7856] batadv_slave_0: entered allmulticast mode [ 93.975131][ T7874] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 94.033257][ T7882] loop4: detected capacity change from 0 to 512 [ 94.061316][ T7882] EXT4-fs (loop4): 1 orphan inode deleted [ 94.067545][ T7882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.080412][ T3534] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:41: Failed to release dquot type 1 [ 94.081942][ T7882] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.129307][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.144130][ T3534] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:41: Failed to release dquot type 1 [ 94.190966][ T7896] 9p: Unknown access argument a: -22 [ 94.253007][ T7899] SELinux: Context is not valid (left unmapped). [ 94.381537][ T7915] macvlan1: entered promiscuous mode [ 94.429463][ T7915] ipvlan0: entered promiscuous mode [ 94.435383][ T7915] ipvlan0: left promiscuous mode [ 94.468628][ T7915] macvlan1: left promiscuous mode [ 94.535809][ T7927] netlink: 'syz.2.1482': attribute type 10 has an invalid length. [ 94.545265][ T7927] bridge0: port 3(team0) entered disabled state [ 94.551715][ T7927] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.559041][ T7927] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.572403][ T7927] bridge0: port 3(team0) entered blocking state [ 94.578725][ T7927] bridge0: port 3(team0) entered forwarding state [ 94.585298][ T7927] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.592445][ T7927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.599756][ T7927] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.606910][ T7927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.635350][ T7929] loop7: detected capacity change from 0 to 1024 [ 94.642235][ T7929] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 94.661537][ T7927] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 94.671268][ T7931] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1484'. [ 94.681819][ T3516] ------------[ cut here ]------------ [ 94.687317][ T3516] RTNL: assertion failed at ./include/net/netdev_lock.h (56) [ 94.695431][ T3516] WARNING: CPU: 1 PID: 3516 at ./include/net/netdev_lock.h:56 __linkwatch_sync_dev+0x1f0/0x200 [ 94.705913][ T3516] Modules linked in: [ 94.709896][ T3516] CPU: 1 UID: 0 PID: 3516 Comm: kworker/u8:24 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 94.720900][ T3516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 94.731158][ T3516] Workqueue: bond0 bond_mii_monitor [ 94.736439][ T3516] RIP: 0010:__linkwatch_sync_dev+0x1f0/0x200 [ 94.742597][ T3516] Code: 55 50 d3 86 e8 61 19 26 fd c6 05 1f f7 87 02 01 90 48 c7 c7 01 1e 5a 86 48 c7 c6 72 06 46 86 ba 38 00 00 00 e8 91 44 d6 fc 90 <0f> 0b 90 90 e9 d6 fe ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 [ 94.762264][ T3516] RSP: 0018:ffffc90001eefb70 EFLAGS: 00010246 [ 94.768449][ T3516] RAX: 180aa10159721500 RBX: ffff88811992d000 RCX: ffff88811df23180 [ 94.776486][ T3516] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 94.784496][ T3516] RBP: 0000000000000000 R08: 0001c90001eef9ef R09: 0000000000000000 [ 94.792691][ T3516] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000000 [ 94.800708][ T3516] R13: ffffffff85922c30 R14: ffffffff85922c30 R15: 0000000000000000 [ 94.808752][ T3516] FS: 0000000000000000(0000) GS:ffff8882aef50000(0000) knlGS:0000000000000000 [ 94.817704][ T3516] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.824403][ T3516] CR2: 0000001b2f61dff8 CR3: 00000001434f0000 CR4: 00000000003506f0 [ 94.832721][ T3516] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.840737][ T3516] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 94.848753][ T3516] Call Trace: [ 94.852109][ T3516] [ 94.855066][ T3516] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 94.860797][ T3516] ethtool_op_get_link+0x15/0x50 [ 94.865765][ T3516] bond_check_dev_link+0x292/0x430 [ 94.871021][ T3516] bond_mii_monitor+0x2da/0x1770 [ 94.876147][ T3516] ? bond_alb_monitor+0x9f2/0xa40 [ 94.881359][ T3516] ? try_to_wake_up+0x212/0x630 [ 94.886234][ T3516] process_scheduled_works+0x4cb/0x9d0 [ 94.891835][ T3516] worker_thread+0x582/0x770 [ 94.896590][ T3516] kthread+0x486/0x510 [ 94.900726][ T3516] ? finish_task_switch+0xad/0x2b0 [ 94.905991][ T3516] ? __pfx_worker_thread+0x10/0x10 [ 94.911308][ T3516] ? __pfx_kthread+0x10/0x10 [ 94.915965][ T3516] ret_from_fork+0x4b/0x60 [ 94.920443][ T3516] ? __pfx_kthread+0x10/0x10 [ 94.925112][ T3516] ret_from_fork_asm+0x1a/0x30 [ 94.929933][ T3516] [ 94.933037][ T3516] ---[ end trace 0000000000000000 ]--- [ 94.988450][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 94.988468][ T29] audit: type=1326 audit(1747070930.421:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7939 comm="syz.7.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb759e969 code=0x7ffc0000 [ 95.018508][ T29] audit: type=1326 audit(1747070930.421:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7939 comm="syz.7.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb759e969 code=0x7ffc0000 [ 95.042110][ T29] audit: type=1326 audit(1747070930.421:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7939 comm="syz.7.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bb759e969 code=0x7ffc0000 [ 95.071232][ T7944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1490'. [ 95.092099][ T29] audit: type=1326 audit(1747070930.531:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7939 comm="syz.7.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb759e969 code=0x7ffc0000 [ 95.117242][ T29] audit: type=1326 audit(1747070930.561:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7939 comm="syz.7.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb759e969 code=0x7ffc0000 [ 95.271962][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 95.279293][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 95.286817][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 95.293849][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 95.301516][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 95.308057][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 95.344746][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 95.351240][ T7965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1500'. [ 95.366898][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 95.411029][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 95.454364][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 95.655695][ T7999] netlink: 'syz.6.1525': attribute type 1 has an invalid length. [ 95.689845][ T7999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.744191][ T7999] bond1: (slave veth5): Enslaving as an active interface with a down link [ 95.810457][ T7999] bond1: (slave veth0_to_bond): making interface the new active one [ 95.869714][ T7999] veth0_to_bond: entered promiscuous mode [ 95.878458][ T7999] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 96.252640][ T8051] lo speed is unknown, defaulting to 1000 [ 96.308580][ T29] audit: type=1400 audit(1747070931.751:1388): avc: denied { append } for pid=8057 comm="syz.4.1543" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 96.614553][ T8077] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1551'. [ 96.715815][ T8087] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1554'. [ 96.754856][ T8087] loop3: detected capacity change from 0 to 512 [ 96.790225][ T8087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 96.816565][ T8087] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.860209][ T8087] Quota error (device loop3): do_check_range: Getting dqdh_next_free 327680 out of range 0-7 [ 96.870682][ T8087] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 96.881203][ T8087] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1554: Failed to acquire dquot type 1 [ 96.884866][ T8104] tipc: Failed to remove unknown binding: 66,1,1/0:2659181773/2659181775 [ 96.931277][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 96.946331][ C0] ================================================================== [ 96.954440][ C0] BUG: KCSAN: data-race in do_select / pollwake [ 96.960703][ C0] [ 96.963022][ C0] read to 0xffffc9000cb27a00 of 4 bytes by task 8090 on cpu 1: [ 96.970561][ C0] do_select+0xe41/0xf40 [ 96.974809][ C0] core_sys_select+0x3b2/0x600 [ 96.979573][ C0] __se_sys_pselect6+0x216/0x280 [ 96.984514][ C0] __x64_sys_pselect6+0x78/0x90 [ 96.989372][ C0] x64_sys_call+0x1caa/0x2fb0 [ 96.994049][ C0] do_syscall_64+0xd0/0x1a0 [ 96.998552][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.004485][ C0] [ 97.006804][ C0] write to 0xffffc9000cb27a00 of 4 bytes by interrupt on cpu 0: [ 97.014609][ C0] pollwake+0xb6/0x100 [ 97.018697][ C0] __wake_up+0x63/0xb0 [ 97.022872][ C0] bpf_ringbuf_notify+0x22/0x30 [ 97.027739][ C0] irq_work_run+0xdf/0x2d0 [ 97.032178][ C0] __sysvec_irq_work+0x22/0x170 [ 97.037034][ C0] sysvec_irq_work+0x66/0x80 [ 97.041629][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 97.046562][ C0] native_apic_msr_write+0x3d/0x60 [ 97.051676][ C0] x2apic_send_IPI_self+0x10/0x20 [ 97.056701][ C0] arch_irq_work_raise+0x46/0x50 [ 97.061642][ C0] __irq_work_queue_local+0x80/0x1b0 [ 97.066930][ C0] irq_work_queue+0x70/0x100 [ 97.071526][ C0] bpf_ringbuf_discard+0xd3/0xf0 [ 97.076481][ C0] bpf_prog_fe0ed97373b08409+0x47/0x4b [ 97.081944][ C0] bpf_trace_run3+0x10c/0x1d0 [ 97.086615][ C0] kmem_cache_free+0x246/0x2f0 [ 97.091374][ C0] __fput+0x555/0x650 [ 97.095350][ C0] fput_close_sync+0x6e/0x120 [ 97.100019][ C0] __x64_sys_close+0x56/0xf0 [ 97.104606][ C0] x64_sys_call+0x2747/0x2fb0 [ 97.109313][ C0] do_syscall_64+0xd0/0x1a0 [ 97.113905][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.119796][ C0] [ 97.122113][ C0] value changed: 0x00000001 -> 0x00000000 [ 97.127818][ C0] [ 97.130131][ C0] Reported by Kernel Concurrency Sanitizer on: [ 97.136283][ C0] CPU: 0 UID: 0 PID: 3323 Comm: syz-executor Tainted: G W 6.15.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 97.148694][ C0] Tainted: [W]=WARN [ 97.152487][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 97.162539][ C0] ================================================================== [ 97.172579][ T29] audit: type=1326 audit(1747070932.621:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8107 comm="syz.7.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb759e969 code=0x7ffc0000 [ 97.203899][ T29] audit: type=1326 audit(1747070932.621:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8107 comm="syz.7.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb759e969 code=0x7ffc0000