last executing test programs: 5m54.901030786s ago: executing program 32 (id=1135): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x19, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 4m55.612166483s ago: executing program 33 (id=3148): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7, 0x8000, 0x8, 0x0, 0x806b}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) 4m52.50939796s ago: executing program 34 (id=3231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [], 'veth0_to_team\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x4, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 4m35.840229799s ago: executing program 35 (id=3253): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 4m8.957134802s ago: executing program 36 (id=4161): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000cbffffff00000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 4m4.739907765s ago: executing program 37 (id=4238): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x18, 0x2, 0xfffffff7, 0x0, 0x9}) 3m48.229378782s ago: executing program 38 (id=4267): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r1}) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) 3m32.661309296s ago: executing program 3 (id=4913): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close(0x3) 3m32.573241317s ago: executing program 3 (id=4930): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_ACT={0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9528}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 3m32.477152169s ago: executing program 3 (id=4923): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) fchdir(r1) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xecf86c37d53049c4) 3m32.416180709s ago: executing program 3 (id=4926): r0 = syz_io_uring_setup(0x507d, &(0x7f0000000480)={0x0, 0x2431, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x39, 0xa6e253e6046e0a6e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3m32.330619771s ago: executing program 3 (id=4928): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x1c43, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x1) 3m32.190270013s ago: executing program 3 (id=4932): r0 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r4, 0x0, 0x4ab}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x1, 0x2, 0x1, 0x0, 0x0) 3m17.184107707s ago: executing program 39 (id=4932): r0 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r4, 0x0, 0x4ab}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x1, 0x2, 0x1, 0x0, 0x0) 3m9.772087888s ago: executing program 0 (id=5320): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x4}}, './file0\x00'}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 3m9.704325649s ago: executing program 0 (id=5310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001300)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0xffff, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x8, 0x7, 0x3, 0x6, {0x4, 0x0, 0x1ff, 0x401, 0x8, 0x1ff}, {0x42, 0x0, 0x9, 0x6, 0x4, 0x400}, 0x0, 0x7, 0x8}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044841}, 0x20000000) 3m9.492832223s ago: executing program 0 (id=5314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0x7}}]}}]}, 0x3c}}, 0x24044094) 3m9.332917675s ago: executing program 0 (id=5329): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 3m9.302000405s ago: executing program 0 (id=5321): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x696, &(0x7f0000000140)="$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") r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3m8.842986432s ago: executing program 0 (id=5325): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100000004}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 3m8.838011472s ago: executing program 40 (id=5325): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100000004}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 1m23.923334823s ago: executing program 5 (id=8309): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x81e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 1m23.905832264s ago: executing program 5 (id=8310): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000400c) 1m23.618674198s ago: executing program 41 (id=8324): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x6}, 0x0, 0x5dd8, 0x3, 0x5, 0x3, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) ftruncate(0xffffffffffffffff, 0xc17a) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000400c) 40.812018619s ago: executing program 6 (id=9641): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="0002"], 0x20) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 39.935149282s ago: executing program 6 (id=9688): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 39.841383434s ago: executing program 6 (id=9679): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x700, 0x7800, 0x9, 0xffffffff, {{0x10, 0x4, 0x0, 0x28, 0x40, 0x68, 0x0, 0x7, 0x2b, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x19}, {[@timestamp_prespec={0x44, 0x4, 0x80, 0x3, 0x5}, @lsrr={0x83, 0x1f, 0xf, [@remote, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010100, @loopback, @local]}, @cipso={0x86, 0x6}, @generic={0x44, 0x3, "c0"}]}}}}}) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) 39.653624856s ago: executing program 6 (id=9686): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 39.621137577s ago: executing program 6 (id=9687): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x10}}, 0x0) 39.589295377s ago: executing program 6 (id=9689): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = dup2(r2, r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) 39.552184858s ago: executing program 42 (id=9689): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = dup2(r2, r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) 3.232835672s ago: executing program 4 (id=10867): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) setregid(0x0, 0x0) 3.200014732s ago: executing program 4 (id=10870): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 3.159444563s ago: executing program 4 (id=10874): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfe000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x5}, 0x18) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) 3.073697194s ago: executing program 4 (id=10877): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone3(&(0x7f00000014c0)={0x6361100, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) 3.072799835s ago: executing program 4 (id=10879): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000001c0), 0x44, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000001280)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x9) 2.612683741s ago: executing program 4 (id=10898): unshare(0x2040400) r0 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r0, 0x0, 0x0) 2.598151491s ago: executing program 43 (id=10898): unshare(0x2040400) r0 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r0, 0x0, 0x0) 2.490359103s ago: executing program 9 (id=10902): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x322, 0x0, 0x0, 0x4, 0xfd, @random="48bd00"}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.489674593s ago: executing program 9 (id=10910): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f00000001c0)={[{@minixdf}, {@user_xattr}, {@jqfmt_vfsv1}, {@noblock_validity}, {@usrjquota}]}, 0x1, 0x454, &(0x7f0000000400)="$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") r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x75, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) getsockname$packet(r1, 0x0, &(0x7f0000000680)) 1.36342643s ago: executing program 1 (id=10914): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x58, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000090}, 0x80) 1.36210764s ago: executing program 9 (id=10916): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@newsa={0x1a8, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}, {@in=@rand_addr=0x8000, 0x0, 0x32}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3}, {0x0, 0x1ff}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x6d, 0x14, {{'cmac(aes)\x00'}, 0x108, 0x0, "9da56218fafaee0188cd8ac6c286cdb9d07ba8b4e2e441d1bfc4cae13ce45e2080"}}]}, 0x1a8}}, 0x0) 1.297551141s ago: executing program 1 (id=10918): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 1.283373011s ago: executing program 9 (id=10905): r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ptrace$pokeuser(0x6, r0, 0x358, 0x0) 1.174946042s ago: executing program 9 (id=10908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 1.155463763s ago: executing program 1 (id=10917): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) socket$kcm(0x10, 0x400000002, 0x0) 1.121278194s ago: executing program 1 (id=10921): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x84000, 0x0) 1.095641684s ago: executing program 1 (id=10923): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000002500)='\f', 0x1}], 0x1) 832.617928ms ago: executing program 7 (id=10934): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2c3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x400, 0x0, 0x2}, 0x10) dup3(r2, r1, 0x0) 812.904158ms ago: executing program 7 (id=10935): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x0) 784.877849ms ago: executing program 7 (id=10936): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc/sys/net/\x00\x00\f\x89\xe2T\a\xcdu`\'a\xec\x97\x0f\xf0j\x00l'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0xd) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 763.867929ms ago: executing program 1 (id=10937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0x6, 0x0, 0x5, 0x0}) 763.165589ms ago: executing program 7 (id=10938): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 743.832949ms ago: executing program 44 (id=10937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0x6, 0x0, 0x5, 0x0}) 733.328999ms ago: executing program 2 (id=10940): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x2, 0x400100}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4004, @fd_index=0x1, 0x4, 0xc42f, 0x5, 0x10, 0x0, {0x3}}) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 717.059419ms ago: executing program 7 (id=10941): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 680.34466ms ago: executing program 7 (id=10942): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8804, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000080), 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) 629.962251ms ago: executing program 2 (id=10943): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='kmem_cache_free\x00', r1}, 0x10) 473.368383ms ago: executing program 8 (id=10944): unshare(0x22020600) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r0 = open(&(0x7f00000002c0)='./file2\x00', 0x189242, 0x0) fallocate(r0, 0x10, 0x2, 0x7000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x3920e, r1, 0x54, 0x0, 0x2}) 447.762803ms ago: executing program 2 (id=10945): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r2}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000580)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) 372.965615ms ago: executing program 9 (id=10946): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 362.723564ms ago: executing program 2 (id=10947): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x230, 0x30, 0x300, 0x71bd2a, 0x25dfdbff, {}, [{0x21c, 0x1, [@m_gact={0x17c, 0x17, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1ae8, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x65d6, 0x1, 0x4, 0x7, 0x3ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2b3a, 0x8, 0x4, 0x831}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x8, 0x0, 0xbd1c, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x583, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xaeb, 0x20000000}}]}, {0xe1, 0x6, "0f617356f0a663079abe295a350af32575b7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224474cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51ba59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9c6fc16198b2cfa20bc906e08c92c0642310e03f00a0ed12baa1df64f1bf0502f23ff4d6a5e05aa81fa19a9b88c32227231211d5d298a3c63d5549b1a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_tunnel_key={0x6c, 0x3, 0x0, 0x0, {{0xf}, {0x4}, {0x3a, 0x6, "fb09f84944896361640ba7522b34988d47d3c2b9cd0b718d5c7b63e60d21df8ef5a7fe0458ce70e848d77b1657aa8373b7ff569eb980"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040800) r0 = socket(0x10, 0x803, 0x0) r1 = msgget$private(0x0, 0x790) msgsnd(r1, &(0x7f0000000800)=ANY=[@ANYRES8], 0x401, 0x0) msgrcv(r1, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_RMID(r1, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 317.206656ms ago: executing program 8 (id=10948): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x31f, &(0x7f0000000080)={0x0, 0xcb45, 0x20, 0x0, 0x7d8}, &(0x7f0000ff0000), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x80000001}, 0x18) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 182.939757ms ago: executing program 2 (id=10949): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 182.486727ms ago: executing program 8 (id=10950): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24fc, &(0x7f0000000180)={0x0, 0x6386, 0x10580, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='1q'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 182.183217ms ago: executing program 8 (id=10951): pipe(0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r1, r1, 0x21) wait4(0x0, 0x0, 0x40000000, 0x0) 94.197469ms ago: executing program 8 (id=10952): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x30, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.7454ms ago: executing program 2 (id=10953): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) 0s ago: executing program 8 (id=10962): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) kernel console output (not intermixed with test programs): an invalid length. [ 370.547858][T28672] 0{X: refused to change device tx_queue_len [ 370.554464][T28672] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 370.702516][T28710] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28710 comm=syz.2.9302 [ 370.747863][T28716] bridge0: entered promiscuous mode [ 370.754882][T28716] bridge0: port 5(macvlan2) entered blocking state [ 370.761550][T28716] bridge0: port 5(macvlan2) entered disabled state [ 370.768374][T28716] macvlan2: entered allmulticast mode [ 370.773920][T28716] bridge0: entered allmulticast mode [ 370.793993][T28716] macvlan2: left allmulticast mode [ 370.799262][T28716] bridge0: left allmulticast mode [ 370.824579][T28716] bridge0: left promiscuous mode [ 370.887047][T28733] loop6: detected capacity change from 0 to 256 [ 370.895520][T28733] FAT-fs (loop6): bogus number of FAT sectors [ 370.901696][T28733] FAT-fs (loop6): Can't find a valid FAT filesystem [ 371.216908][T28761] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 371.435095][T28770] bridge0: port 3(macvlan2) entered blocking state [ 371.441838][T28770] bridge0: port 3(macvlan2) entered disabled state [ 371.480145][T28770] macvlan2: entered allmulticast mode [ 371.485676][T28770] bridge0: entered allmulticast mode [ 371.517001][T28770] macvlan2: left allmulticast mode [ 371.522245][T28770] bridge0: left allmulticast mode [ 371.685278][T28784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9326'. [ 371.758349][T28804] IPVS: Error connecting to the multicast addr [ 371.898532][T28827] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28827 comm=syz.9.9342 [ 372.093300][T28847] netlink: 'syz.2.9349': attribute type 13 has an invalid length. [ 372.192039][T28847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 372.564595][T28883] loop6: detected capacity change from 0 to 1024 [ 372.604547][T28887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9367'. [ 372.627366][T28883] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.667282][T28883] EXT4-fs (loop6): shut down requested (2) [ 372.691747][T28895] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 372.754992][T16226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.962033][T28932] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x1 [ 373.033556][T28940] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9385'. [ 373.042622][T28940] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9385'. [ 373.073686][T28944] loop4: detected capacity change from 0 to 1024 [ 373.104963][T28944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.109296][T28955] loop6: detected capacity change from 0 to 512 [ 373.132247][T28944] EXT4-fs (loop4): shut down requested (2) [ 373.153064][T24724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.176125][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.184330][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.192634][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.202028][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.210345][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.218569][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.226751][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.233280][T28955] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.234962][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.249116][T28955] ext4 filesystem being mounted at /773/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 373.255654][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.274164][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.282311][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.290472][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.298855][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.307028][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.315347][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.323513][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.331734][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.339878][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.343768][T28955] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.9390: corrupted inode contents [ 373.347979][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.348005][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.348154][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.361934][T28955] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.9390: mark_inode_dirty error [ 373.367971][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.378182][T28955] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.9390: corrupted inode contents [ 373.384062][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.396303][T28955] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.9390: mark_inode_dirty error [ 373.403365][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.442912][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.451078][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.459289][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.467532][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.475687][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: unknown main item tag 0x0 [ 373.485710][ T3392] hid-generic FFFF:FFFFFFFC:20000001.001C: hidraw0: HID va0.69 Device [syz0] on syz1 [ 373.521299][T16226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.682795][T29013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9405'. [ 373.702440][T29013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.710005][T29013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.734872][T29015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9406'. [ 373.752823][T29013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.760349][T29013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.771357][T29017] loop9: detected capacity change from 0 to 512 [ 373.811143][T29017] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.831857][T29017] ext4 filesystem being mounted at /1048/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 373.853033][T29017] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.9407: corrupted inode contents [ 373.865554][T29017] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #2: comm syz.9.9407: mark_inode_dirty error [ 373.895830][T29030] loop6: detected capacity change from 0 to 256 [ 373.907783][T29030] FAT-fs (loop6): bogus number of FAT sectors [ 373.913979][T29030] FAT-fs (loop6): Can't find a valid FAT filesystem [ 373.920856][T29017] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.9407: corrupted inode contents [ 373.938570][T29017] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.9407: mark_inode_dirty error [ 373.978856][T13241] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.016358][T29044] 9pnet_fd: Insufficient options for proto=fd [ 374.033854][T29048] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9417'. [ 374.058744][T29051] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 374.070059][T29050] IPVS: stopping master sync thread 29051 ... [ 374.103279][T29056] loop6: detected capacity change from 0 to 512 [ 374.152361][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 374.152380][ T29] audit: type=1400 audit(1748848047.797:12408): avc: denied { read } for pid=29068 comm="syz.2.9424" path="socket:[87359]" dev="sockfs" ino=87359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 374.215339][ T29] audit: type=1107 audit(1748848047.829:12409): pid=29067 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 374.238572][T29056] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.254226][T29056] ext4 filesystem being mounted at /778/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 374.254240][T29072] netlink: 'syz.1.9425': attribute type 13 has an invalid length. [ 374.293010][T29072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.309125][ T29] audit: type=1400 audit(1748848047.934:12410): avc: denied { create } for pid=29078 comm="syz.9.9427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 374.329230][ T29] audit: type=1400 audit(1748848047.944:12411): avc: denied { append } for pid=29053 comm="syz.6.9429" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 374.351724][ T29] audit: type=1400 audit(1748848047.944:12412): avc: denied { map } for pid=29053 comm="syz.6.9429" path="/778/bus/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 374.382741][T16226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.400946][T29084] loop4: detected capacity change from 0 to 512 [ 374.454552][T29084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.481144][T29084] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 374.509378][T29084] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.9428: corrupted inode contents [ 374.544772][T29084] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.9428: mark_inode_dirty error [ 374.566751][T29084] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.9428: corrupted inode contents [ 374.586451][T29084] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.9428: mark_inode_dirty error [ 374.618555][T24724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.649552][ T29] audit: type=1400 audit(1748848048.312:12413): avc: denied { read write } for pid=29108 comm="syz.9.9438" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 374.674069][ T29] audit: type=1400 audit(1748848048.312:12414): avc: denied { open } for pid=29108 comm="syz.9.9438" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 374.749097][ T29] audit: type=1326 audit(1748848048.428:12415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29119 comm="syz.4.9439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 374.780273][T29123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9453'. [ 374.820565][T29126] netlink: 'syz.6.9443': attribute type 13 has an invalid length. [ 374.832180][ T29] audit: type=1326 audit(1748848048.428:12416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29119 comm="syz.4.9439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 374.855898][ T29] audit: type=1326 audit(1748848048.428:12417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29119 comm="syz.4.9439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 374.886475][T29126] 8021q: adding VLAN 0 to HW filter on device $H [ 374.923599][T29126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.976687][T29143] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 375.101676][T29172] 9pnet_fd: Insufficient options for proto=fd [ 375.211075][T29195] loop2: detected capacity change from 0 to 512 [ 375.270086][T29195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.272814][T29205] SELinux: ebitmap: map size 98 does not match my size 64 (high bit was 4278589440) [ 375.291380][T29195] ext4 filesystem being mounted at /1917/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 375.304405][T29205] SELinux: failed to load policy [ 375.332149][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.394262][T29229] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 375.426811][T29241] loop2: detected capacity change from 0 to 256 [ 375.434465][T29241] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 375.479228][T29241] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 375.487883][T29241] FAT-fs (loop2): Filesystem has been set read-only [ 375.539102][T29264] bridge0: entered promiscuous mode [ 375.544482][T29264] macvlan2: entered promiscuous mode [ 375.551558][T29264] bridge0: port 5(macvlan2) entered blocking state [ 375.558310][T29264] bridge0: port 5(macvlan2) entered disabled state [ 375.571411][T29264] macvlan2: entered allmulticast mode [ 375.577000][T29264] bridge0: entered allmulticast mode [ 375.584164][T29264] macvlan2: left allmulticast mode [ 375.589346][T29264] bridge0: left allmulticast mode [ 375.599831][T29264] bridge0: left promiscuous mode [ 375.692716][T29293] loop2: detected capacity change from 0 to 512 [ 375.715753][T29293] ext4 filesystem being mounted at /1921/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 375.723610][T29300] netlink: 'syz.9.9473': attribute type 1 has an invalid length. [ 375.748116][T29293] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.9470: corrupted inode contents [ 375.765347][T29293] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.9470: mark_inode_dirty error [ 375.784732][T29293] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.9470: corrupted inode contents [ 375.799173][T29293] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.9470: mark_inode_dirty error [ 375.886837][T29323] netlink: 'syz.9.9481': attribute type 21 has an invalid length. [ 375.895760][T29323] netlink: 'syz.9.9481': attribute type 1 has an invalid length. [ 375.903585][T29323] netlink: 144 bytes leftover after parsing attributes in process `syz.9.9481'. [ 375.929527][T29329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9483'. [ 376.021121][T29343] block device autoloading is deprecated and will be removed. [ 376.235355][T29393] netlink: 'syz.2.9497': attribute type 21 has an invalid length. [ 376.279500][T29393] netlink: 'syz.2.9497': attribute type 1 has an invalid length. [ 376.415616][T29388] C speed is unknown, defaulting to 1000 [ 376.560803][T29424] loop9: detected capacity change from 0 to 1024 [ 376.568789][T29424] EXT4-fs: Ignoring removed nobh option [ 376.574520][T29424] EXT4-fs: Ignoring removed nobh option [ 376.582916][T29424] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 376.593320][T29424] EXT4-fs error (device loop9): ext4_get_journal_inode:5796: comm syz.9.9504: inode #4294967295: comm syz.9.9504: iget: illegal inode # [ 376.608157][T29424] EXT4-fs (loop9): no journal found [ 376.613435][T29424] EXT4-fs (loop9): can't get journal size [ 376.646003][T29424] EXT4-fs (loop9): failed to initialize system zone (-22) [ 376.669032][T29424] EXT4-fs (loop9): mount failed [ 376.981186][T29463] __nla_validate_parse: 3 callbacks suppressed [ 376.981218][T29463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9512'. [ 377.088922][T29469] ip6tnl1: entered promiscuous mode [ 377.185637][T29482] hub 1-0:1.0: USB hub found [ 377.205694][T29482] hub 1-0:1.0: 8 ports detected [ 377.676683][T29540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9531'. [ 377.792479][T29569] loop6: detected capacity change from 0 to 256 [ 377.800841][T29567] loop2: detected capacity change from 0 to 1024 [ 377.808653][T29567] EXT4-fs: Ignoring removed nobh option [ 377.814291][T29567] EXT4-fs: Ignoring removed bh option [ 377.816770][T29569] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 377.838668][T29569] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.847326][T29569] FAT-fs (loop6): Filesystem has been set read-only [ 377.848410][T29567] EXT4-fs mount: 2 callbacks suppressed [ 377.848428][T29567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.893216][T29578] loop4: detected capacity change from 0 to 512 [ 377.902547][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.915152][T29578] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 377.931300][T29578] EXT4-fs (loop4): mount failed [ 378.033359][T29601] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9549'. [ 378.069496][T29605] macvlan2: entered promiscuous mode [ 378.074858][T29605] bridge0: entered promiscuous mode [ 378.084397][T29605] bridge0: port 3(macvlan2) entered blocking state [ 378.091212][T29605] bridge0: port 3(macvlan2) entered disabled state [ 378.098705][T29605] macvlan2: entered allmulticast mode [ 378.104214][T29605] bridge0: entered allmulticast mode [ 378.110269][T29605] macvlan2: left allmulticast mode [ 378.115453][T29605] bridge0: left allmulticast mode [ 378.122343][T29605] bridge0: left promiscuous mode [ 378.132291][T29609] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.9550'. [ 378.142823][T29599] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.9550'. [ 378.239383][T29603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.256801][T29621] loop4: detected capacity change from 0 to 1024 [ 378.256980][T29603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.294446][T29621] EXT4-fs: Ignoring removed nobh option [ 378.300223][T29621] EXT4-fs: Ignoring removed nobh option [ 378.306403][T29631] loop9: detected capacity change from 0 to 512 [ 378.314722][T29621] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 378.326180][T29621] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: comm syz.4.9565: inode #4294967295: comm syz.4.9565: iget: illegal inode # [ 378.341270][T29621] EXT4-fs (loop4): no journal found [ 378.346604][T29621] EXT4-fs (loop4): can't get journal size [ 378.355307][T29621] EXT4-fs (loop4): failed to initialize system zone (-22) [ 378.362619][T29621] EXT4-fs (loop4): mount failed [ 378.415250][T29631] EXT4-fs (loop9): 1 orphan inode deleted [ 378.423388][T29631] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.436317][ T7294] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:27: Failed to release dquot type 1 [ 378.450216][T29631] ext4 filesystem being mounted at /1086/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.518612][T13241] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.590207][T29663] loop4: detected capacity change from 0 to 1024 [ 378.614681][T29663] EXT4-fs: Ignoring removed nobh option [ 378.620431][T29663] EXT4-fs: Ignoring removed bh option [ 378.642168][T29663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.682569][T24724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.725270][T29685] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29685 comm=syz.4.9575 [ 378.766663][T29691] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 378.773262][T29691] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 378.780978][T29691] vhci_hcd vhci_hcd.0: Device attached [ 378.788811][T29695] vhci_hcd: connection closed [ 378.789043][ T7269] vhci_hcd: stop threads [ 378.798024][ T7269] vhci_hcd: release socket [ 378.802543][ T7269] vhci_hcd: disconnect device [ 378.883076][ T2971] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 378.890639][ T2971] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 378.898187][ T2971] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 378.906206][ T2971] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 378.913766][ T2971] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 378.921183][ T2971] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 378.928686][ T2971] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 378.936160][ T2971] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 378.943601][ T2971] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 378.951100][ T2971] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 378.958571][ T2971] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 378.966067][ T2971] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 378.973507][ T2971] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 378.980937][ T2971] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 378.988482][ T2971] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 378.995950][ T2971] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 379.028496][ T2971] hid-generic 0006:0000:0000.001D: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 379.093583][T29727] macvlan2: entered promiscuous mode [ 379.099138][T29727] bridge0: entered promiscuous mode [ 379.106544][T29727] bridge0: port 1(macvlan2) entered blocking state [ 379.113082][T29734] loop9: detected capacity change from 0 to 1024 [ 379.113591][T29734] EXT4-fs: Ignoring removed nobh option [ 379.119521][T29727] bridge0: port 1(macvlan2) entered disabled state [ 379.125107][T29734] EXT4-fs: Ignoring removed bh option [ 379.131837][T29727] macvlan2: entered allmulticast mode [ 379.139357][T29724] hub 1-0:1.0: USB hub found [ 379.142462][T29727] bridge0: entered allmulticast mode [ 379.147533][T29724] hub 1-0:1.0: 8 ports detected [ 379.156284][T29734] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.170941][T29727] macvlan2: left allmulticast mode [ 379.176140][T29727] bridge0: left allmulticast mode [ 379.184536][T29727] bridge0: left promiscuous mode [ 379.189901][T29742] loop4: detected capacity change from 0 to 512 [ 379.215741][T13241] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.227169][T29742] EXT4-fs (loop4): 1 orphan inode deleted [ 379.233460][T29742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.246261][ T7319] __quota_error: 161 callbacks suppressed [ 379.246314][ T7319] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 379.246383][T29742] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.252083][ T7319] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:51: Failed to release dquot type 1 [ 379.314300][T24724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.325518][ T29] audit: type=1326 audit(1748848053.232:12577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29754 comm="syz.6.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838f02e969 code=0x7ffc0000 [ 379.349404][T29755] loop6: detected capacity change from 0 to 2048 [ 379.357130][ T29] audit: type=1326 audit(1748848053.232:12578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29754 comm="syz.6.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838f02e969 code=0x7ffc0000 [ 379.381032][ T29] audit: type=1326 audit(1748848053.232:12579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29754 comm="syz.6.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f838f02e969 code=0x7ffc0000 [ 379.404773][ T29] audit: type=1326 audit(1748848053.232:12580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29754 comm="syz.6.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838f02e969 code=0x7ffc0000 [ 379.428510][ T29] audit: type=1326 audit(1748848053.232:12581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29754 comm="syz.6.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f838f02e969 code=0x7ffc0000 [ 379.452101][ T29] audit: type=1326 audit(1748848053.232:12582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29754 comm="syz.6.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838f02e969 code=0x7ffc0000 [ 379.476004][ T29] audit: type=1326 audit(1748848053.243:12583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29754 comm="syz.6.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f838f02e969 code=0x7ffc0000 [ 379.499600][ T29] audit: type=1326 audit(1748848053.243:12584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29754 comm="syz.6.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838f02e969 code=0x7ffc0000 [ 379.523565][ T29] audit: type=1326 audit(1748848053.243:12585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29754 comm="syz.6.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f838f02e969 code=0x7ffc0000 [ 379.553005][T29755] loop6: p1 < > p4 [ 379.569181][T29755] loop6: p4 size 8388608 extends beyond EOD, truncated [ 379.648768][T29785] loop6: detected capacity change from 0 to 512 [ 379.668835][T29785] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 379.690698][T29785] EXT4-fs (loop6): mount failed [ 379.933287][T29818] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.9607'. [ 380.016460][T29814] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.9607'. [ 380.254186][T29835] loop4: detected capacity change from 0 to 2048 [ 380.331472][T29835] loop4: p1 < > p4 [ 380.345225][T29835] loop4: p4 size 8388608 extends beyond EOD, truncated [ 381.151610][T29901] serio: Serial port ptm0 [ 381.182070][T29906] loop9: detected capacity change from 0 to 512 [ 381.197204][T29906] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 381.212352][T29906] EXT4-fs (loop9): mount failed [ 381.248127][T29916] netlink: 104 bytes leftover after parsing attributes in process `syz.6.9642'. [ 381.258603][T29915] loop9: detected capacity change from 0 to 2048 [ 381.310467][T29915] loop9: p1 < > p4 [ 381.321237][T29915] loop9: p4 size 8388608 extends beyond EOD, truncated [ 381.660782][T29978] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 381.667349][T29978] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 381.675127][T29978] vhci_hcd vhci_hcd.0: Device attached [ 381.684718][T29981] vhci_hcd: connection closed [ 381.684781][ T12] vhci_hcd: stop threads [ 381.693938][ T12] vhci_hcd: release socket [ 381.698442][ T12] vhci_hcd: disconnect device [ 381.872038][T30008] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9665'. [ 382.028953][T30025] cgroup: fork rejected by pids controller in /syz9 [ 382.409840][T32648] IPVS: Error connecting to the multicast addr [ 382.532158][ T1649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9683'. [ 382.627441][ T1780] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.9698'. [ 382.847301][ T1814] loop4: detected capacity change from 0 to 2048 [ 382.890529][ T1814] loop4: p1 < > p4 [ 382.895733][ T1814] loop4: p4 size 8388608 extends beyond EOD, truncated [ 382.905163][ T12] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.915371][ T12] bond_slave_0: left promiscuous mode [ 382.920916][ T12] bond_slave_0: left allmulticast mode [ 382.932303][ T12] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.946072][ T12] bond_slave_1: left promiscuous mode [ 382.951618][ T12] bond_slave_1: left allmulticast mode [ 382.965996][ T12] $H (unregistering): Released all slaves [ 383.011410][ T12] tipc: Disabling bearer [ 383.016855][ T12] tipc: Left network mode [ 383.029660][ T1839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9702'. [ 383.047229][ T1792] C speed is unknown, defaulting to 1000 [ 383.054712][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.067233][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.265194][ T1792] chnl_net:caif_netlink_parms(): no params data found [ 383.276978][ T1922] serio: Serial port ptm0 [ 383.302492][ T1996] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9709'. [ 383.329839][ T1946] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9709'. [ 383.340346][ T1792] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.347560][ T1792] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.355057][ T1792] bridge_slave_0: entered allmulticast mode [ 383.361737][ T1792] bridge_slave_0: entered promiscuous mode [ 383.369054][ T1792] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.376253][ T1792] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.383711][ T1792] bridge_slave_1: entered allmulticast mode [ 383.390420][ T1792] bridge_slave_1: entered promiscuous mode [ 383.418463][ T1792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.433591][ T1792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.455347][ T1792] team0: Port device team_slave_0 added [ 383.463017][ T1792] team0: Port device team_slave_1 added [ 383.482575][ T1792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.489649][ T1792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.515771][ T1792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.529717][ T1792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.536807][ T1792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.562938][ T1792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.580642][ T2106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9717'. [ 383.589668][ T2106] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9717'. [ 383.598703][ T2106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9717'. [ 383.608557][ T2106] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9717'. [ 383.671064][ T1792] hsr_slave_0: entered promiscuous mode [ 383.678616][ T1792] hsr_slave_1: entered promiscuous mode [ 383.686369][ T1792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.706256][ T2139] netlink: 'syz.9.9720': attribute type 9 has an invalid length. [ 383.711486][ T1792] Cannot create hsr debugfs directory [ 383.867031][ T2209] syzkaller0: entered allmulticast mode [ 383.888847][ T1792] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.914819][ T2209] syzkaller0 (unregistering): left allmulticast mode [ 384.015410][ T1792] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.074595][ T2252] loop4: detected capacity change from 0 to 512 [ 384.082850][ T2252] EXT4-fs (loop4): orphan cleanup on readonly fs [ 384.096497][ T1792] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.109164][ T2252] EXT4-fs (loop4): 1 orphan inode deleted [ 384.115209][ T7294] __quota_error: 166 callbacks suppressed [ 384.115284][ T7294] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 384.130996][ T7294] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:27: Failed to release dquot type 1 [ 384.143984][ T2252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 384.167341][T24724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.179887][ T1792] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.236757][ T1792] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 384.249963][ T1792] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 384.260325][ T1792] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 384.273139][ T1792] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 384.323222][ T1792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.334314][ T2292] C speed is unknown, defaulting to 1000 [ 384.347560][ T1792] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.365453][ T7319] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.372653][ T7319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.395122][ T7319] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.402302][ T7319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.443673][ T2300] tipc: Cannot configure node identity twice [ 384.522317][ T1792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.684524][ T1792] veth0_vlan: entered promiscuous mode [ 384.699931][ T1792] veth1_vlan: entered promiscuous mode [ 384.750698][ T1792] veth0_macvtap: entered promiscuous mode [ 384.760739][ T1792] veth1_macvtap: entered promiscuous mode [ 384.773025][ T1792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.783081][ T1792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.806515][ T1792] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.816711][ T1792] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.825966][ T1792] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.834769][ T1792] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.909614][ T2340] cgroup: fork rejected by pids controller in /syz2 [ 384.950718][ T29] audit: type=1400 audit(1748848059.151:12750): avc: denied { mounton } for pid=1792 comm="syz-executor" path="/root/syzkaller.ROewL4/syz-tmp" dev="sda1" ino=2069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 384.986456][ T29] audit: type=1400 audit(1748848059.151:12751): avc: denied { mount } for pid=1792 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 385.008815][ T29] audit: type=1400 audit(1748848059.151:12752): avc: denied { mounton } for pid=1792 comm="syz-executor" path="/root/syzkaller.ROewL4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 385.035759][ T29] audit: type=1400 audit(1748848059.151:12753): avc: denied { mounton } for pid=1792 comm="syz-executor" path="/root/syzkaller.ROewL4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=90241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 385.063558][ T29] audit: type=1400 audit(1748848059.172:12754): avc: denied { mounton } for pid=1792 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 385.086738][ T29] audit: type=1400 audit(1748848059.172:12755): avc: denied { mount } for pid=1792 comm="syz-executor" name="/" dev="gadgetfs" ino=3612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 385.128264][ T2378] loop9: detected capacity change from 0 to 2048 [ 385.172653][ T2378] loop9: p1 < > p4 [ 385.177226][ T2378] loop9: p4 size 8388608 extends beyond EOD, truncated [ 385.314640][ T29] audit: type=1326 audit(1748848059.529:12756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2404 comm="syz.2.9756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1575a7e969 code=0x7ffc0000 [ 385.338456][ T29] audit: type=1326 audit(1748848059.529:12757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2404 comm="syz.2.9756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1575a7e969 code=0x7ffc0000 [ 385.372802][ T2410] ipvlan2: entered promiscuous mode [ 385.379042][ T2410] bridge0: port 5(ipvlan2) entered blocking state [ 385.385540][ T2410] bridge0: port 5(ipvlan2) entered disabled state [ 385.428482][ T2410] ipvlan2: entered allmulticast mode [ 385.433957][ T2410] bridge0: entered allmulticast mode [ 385.440807][ T2410] ipvlan2: left allmulticast mode [ 385.445939][ T2410] bridge0: left allmulticast mode [ 385.592434][ T29] audit: type=1326 audit(1748848059.529:12758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2404 comm="syz.2.9756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f1575a7e969 code=0x7ffc0000 [ 385.699381][ T2428] syzkaller0: entered allmulticast mode [ 385.722261][ T2428] syzkaller0 (unregistering): left allmulticast mode [ 385.881567][ T2432] cgroup: fork rejected by pids controller in /syz1 [ 385.994572][ T2475] loop9: detected capacity change from 0 to 512 [ 386.027018][ T2475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 386.056291][ T2475] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 386.084606][ T2475] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 386.088813][ T2484] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 386.110350][ T2475] EXT4-fs (loop9): 1 truncate cleaned up [ 386.133529][ T2475] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.198249][T13241] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.298172][ T2488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.308827][ T2488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.405910][ T2536] loop9: detected capacity change from 0 to 512 [ 386.414175][ T2536] EXT4-fs (loop9): orphan cleanup on readonly fs [ 386.422286][ T2536] EXT4-fs (loop9): 1 orphan inode deleted [ 386.428181][ T7319] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:51: Failed to release dquot type 1 [ 386.440889][ T2536] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 386.497182][T13241] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.965991][ T2592] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 387.090144][ T2602] __nla_validate_parse: 7 callbacks suppressed [ 387.090273][ T2602] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9803'. [ 387.163978][ T2610] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 387.340933][ T2646] ipvlan2: entered promiscuous mode [ 387.348045][ T2646] bridge0: port 3(ipvlan2) entered blocking state [ 387.354684][ T2646] bridge0: port 3(ipvlan2) entered disabled state [ 387.378015][ T2646] ipvlan2: entered allmulticast mode [ 387.383497][ T2646] bridge0: entered allmulticast mode [ 387.403726][ T2646] ipvlan2: left allmulticast mode [ 387.409131][ T2646] bridge0: left allmulticast mode [ 387.432457][ T2613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.444381][ T2613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.460441][ T2666] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 387.478496][ T2661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9822'. [ 387.487512][ T2661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9822'. [ 387.592621][ T2674] netlink: 1022 bytes leftover after parsing attributes in process `syz.1.9828'. [ 387.678083][ T2685] C speed is unknown, defaulting to 1000 [ 387.903904][ T2676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.912639][ T2676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.002279][ T2721] SELinux: ebitmap: truncated map [ 388.013704][ T2721] SELinux: failed to load policy [ 388.151015][ T2726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9836'. [ 388.160082][ T2726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9836'. [ 388.233823][ T2734] policy can only be matched on NF_INET_PRE_ROUTING [ 388.233839][ T2734] unable to load match [ 388.287895][ T2744] loop9: detected capacity change from 0 to 128 [ 388.295491][ T2744] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 388.307669][ T2744] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 388.333967][ T7268] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 388.379738][ T2758] loop2: detected capacity change from 0 to 512 [ 388.380635][ T2753] C speed is unknown, defaulting to 1000 [ 388.389481][ T2758] EXT4-fs: Ignoring removed nomblk_io_submit option [ 388.406802][ T2758] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 388.442982][ T2758] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 388.460672][ T2768] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9848'. [ 388.469752][ T2768] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9848'. [ 388.478585][ T2758] EXT4-fs (loop2): 1 truncate cleaned up [ 388.488678][ T2758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.543403][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.872509][ T2838] netlink: 96 bytes leftover after parsing attributes in process `syz.9.9864'. [ 388.900792][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 388.900811][ T29] audit: type=1400 audit(1748848063.292:12765): avc: denied { read } for pid=2842 comm="syz.9.9867" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 388.932408][ T29] audit: type=1400 audit(1748848063.292:12766): avc: denied { open } for pid=2842 comm="syz.9.9867" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 389.357392][ T29] audit: type=1400 audit(1748848063.776:12767): avc: denied { connect } for pid=2845 comm="syz.9.9871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 389.377202][ T29] audit: type=1400 audit(1748848063.776:12768): avc: denied { setopt } for pid=2845 comm="syz.9.9871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 389.386723][ T2849] C speed is unknown, defaulting to 1000 [ 389.396706][ T29] audit: type=1400 audit(1748848063.776:12769): avc: denied { read } for pid=2845 comm="syz.9.9871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 389.440907][ T29] audit: type=1400 audit(1748848063.870:12770): avc: denied { read } for pid=2853 comm="syz.1.9869" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 389.465320][ T29] audit: type=1400 audit(1748848063.870:12771): avc: denied { open } for pid=2853 comm="syz.1.9869" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 389.518854][ T29] audit: type=1400 audit(1748848063.891:12772): avc: denied { name_bind } for pid=2858 comm="syz.2.9873" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 389.540002][ T29] audit: type=1400 audit(1748848063.912:12773): avc: denied { ioctl } for pid=2853 comm="syz.1.9869" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 389.625006][ T29] audit: type=1400 audit(1748848064.070:12774): avc: denied { bind } for pid=2890 comm="syz.7.9877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 389.801092][ T2909] IPVS: Error connecting to the multicast addr [ 389.832707][ T2913] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9887'. [ 389.940653][ T2903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.951108][ T2903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.013647][ T2938] sd 0:0:1:0: device reset [ 390.098993][ T2940] Process accounting resumed [ 390.472397][ T2948] C speed is unknown, defaulting to 1000 [ 390.605170][ T2991] loop4: detected capacity change from 0 to 512 [ 390.613797][ T2991] EXT4-fs: Ignoring removed nomblk_io_submit option [ 390.623021][ T2991] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 390.674303][ T2991] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 390.704592][ T3003] 8021q: adding VLAN 0 to HW filter on device team1 [ 390.719402][ T2991] EXT4-fs (loop4): 1 truncate cleaned up [ 390.730467][ T2991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.809422][T24724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.854365][ T3057] openvswitch: netlink: Message has 6 unknown bytes. [ 391.003210][ T3083] loop9: detected capacity change from 0 to 128 [ 391.081789][ T3096] sd 0:0:1:0: device reset [ 391.123041][ T3107] netlink: 'syz.4.9927': attribute type 1 has an invalid length. [ 391.149941][ T3107] bond1: (slave gretap1): making interface the new active one [ 391.159071][ T3107] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 391.200346][ T3148] C speed is unknown, defaulting to 1000 [ 391.328558][ T3176] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.336892][ T3176] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.345155][ T3176] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.353609][ T3176] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.506206][ T3193] sd 0:0:1:0: device reset [ 391.659423][ T3211] loop4: detected capacity change from 0 to 2048 [ 391.671544][ T3211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.698088][T24724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.757057][ T3229] C speed is unknown, defaulting to 1000 [ 391.866019][ T3260] openvswitch: netlink: Message has 6 unknown bytes. [ 391.927913][ T3266] __nla_validate_parse: 6 callbacks suppressed [ 391.927936][ T3266] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9956'. [ 392.431734][ T3325] C speed is unknown, defaulting to 1000 [ 392.746296][ T3380] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 392.868708][ T3400] loop7: detected capacity change from 0 to 4096 [ 392.882084][ T3400] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.912453][ T1792] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.998135][ T3424] netlink: 'syz.9.9995': attribute type 1 has an invalid length. [ 393.043940][ T3424] bond4: (slave gretap0): making interface the new active one [ 393.052001][ T3424] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 393.284839][ T3481] loop2: detected capacity change from 0 to 4096 [ 393.314057][ T3481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.372910][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.129070][ T3541] netlink: 'syz.1.10013': attribute type 1 has an invalid length. [ 394.146203][ T3545] loop2: detected capacity change from 0 to 1024 [ 394.164596][ T3541] 8021q: adding VLAN 0 to HW filter on device bond4 [ 394.173910][ T3545] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 394.198259][ T3541] bond4: (slave gretap0): making interface the new active one [ 394.207810][ T3545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.221767][ T3541] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 394.234206][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 394.234224][ T29] audit: type=1400 audit(1748848068.905:12904): avc: denied { rename } for pid=3542 comm="syz.2.10014" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 394.234622][ T3545] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm syz.2.10014: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 394.307638][ T29] audit: type=1326 audit(1748848068.989:12905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3594 comm="syz.4.10020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 394.334185][ T29] audit: type=1326 audit(1748848068.989:12906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3594 comm="syz.4.10020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 394.358230][ T29] audit: type=1326 audit(1748848068.989:12907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3594 comm="syz.4.10020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 394.382004][ T29] audit: type=1326 audit(1748848068.989:12908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3594 comm="syz.4.10020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 394.405654][ T29] audit: type=1326 audit(1748848068.989:12909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3594 comm="syz.4.10020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 394.429300][ T29] audit: type=1326 audit(1748848068.989:12910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3594 comm="syz.4.10020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 394.453593][ T29] audit: type=1326 audit(1748848069.031:12911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3594 comm="syz.4.10020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 394.477320][ T29] audit: type=1326 audit(1748848069.031:12912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3594 comm="syz.4.10020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 394.500908][ T29] audit: type=1326 audit(1748848069.042:12913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3594 comm="syz.4.10020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 394.552374][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.575054][ T3608] loop2: detected capacity change from 0 to 128 [ 394.659636][ T3623] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10027'. [ 394.696846][ T3628] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 394.704443][ T3628] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 394.951089][ T3654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10042'. [ 394.972118][ T3655] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=38 sclass=netlink_audit_socket pid=3655 comm=syz.4.10043 [ 394.986477][ T3654] erspan0: entered promiscuous mode [ 394.992322][ T3654] macvtap1: entered promiscuous mode [ 394.997735][ T3654] macvtap1: entered allmulticast mode [ 395.003274][ T3654] erspan0: entered allmulticast mode [ 395.020104][ T3660] erspan0: left allmulticast mode [ 395.025327][ T3660] erspan0: left promiscuous mode [ 395.114613][ T3674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10049'. [ 395.162897][ T3676] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 395.308302][ T3454] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x4 [ 395.316158][ T3454] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x2 [ 395.324443][ T3454] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 395.332153][ T3454] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 395.339933][ T3454] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 395.347690][ T3454] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 395.355616][ T3454] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 395.363496][ T3454] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 395.371284][ T3454] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 395.379036][ T3454] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 395.386731][ T3454] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 395.394485][ T3454] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 395.402254][ T3454] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 395.410008][ T3454] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 395.417907][ T3454] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 395.425678][ T3454] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 395.443289][ T3708] pim6reg: entered allmulticast mode [ 395.446400][ T3710] ALSA: seq fatal error: cannot create timer (-19) [ 395.451221][ T3704] pim6reg: left allmulticast mode [ 395.475476][ T3454] hid-generic 0000:3000000:0000.001E: hidraw0: HID v0.00 Device [sy] on syz0 [ 395.594905][ T3737] loop2: detected capacity change from 0 to 2048 [ 395.624001][ T3742] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 395.660621][ T3741] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10074'. [ 395.682639][ T3737] Alternate GPT is invalid, using primary GPT. [ 395.689327][ T3737] loop2: p1 p2 p3 [ 395.915992][ T3788] loop2: detected capacity change from 0 to 1024 [ 395.923222][ T3788] EXT4-fs: Ignoring removed nobh option [ 395.928926][ T3788] EXT4-fs: Ignoring removed bh option [ 395.944922][ T3788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.994322][ T3802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10093'. [ 396.032952][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.077059][ T3821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10098'. [ 396.307175][ T3850] vhci_hcd: invalid port number 96 [ 396.312370][ T3850] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 396.346318][ T3853] SELinux: failed to load policy [ 396.560073][ T3891] netlink: 64 bytes leftover after parsing attributes in process `syz.7.10127'. [ 396.696799][ T3917] hub 6-0:1.0: USB hub found [ 396.702094][ T3917] hub 6-0:1.0: 8 ports detected [ 396.722138][ T3925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10142'. [ 396.798072][ T3945] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3945 comm=syz.1.10148 [ 396.810848][ T3945] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3945 comm=syz.1.10148 [ 396.871385][ T3954] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10152'. [ 397.155544][ T3994] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 397.162346][ T3994] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 397.170020][ T3994] vhci_hcd vhci_hcd.0: Device attached [ 397.176845][ T3994] program syz.7.10166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.187459][ T3995] vhci_hcd: connection closed [ 397.187574][ T7268] vhci_hcd: stop threads [ 397.196809][ T7268] vhci_hcd: release socket [ 397.201321][ T7268] vhci_hcd: disconnect device [ 397.418880][ T4024] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10180'. [ 397.429992][ T4025] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 397.481230][ T4030] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10182'. [ 397.490452][ T4030] netlink: 68 bytes leftover after parsing attributes in process `syz.9.10182'. [ 397.583163][ T4043] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 397.641214][ T4048] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10189'. [ 397.650872][ T4045] xt_CT: No such helper "pptp" [ 397.717273][ T4056] netlink: 176 bytes leftover after parsing attributes in process `syz.9.10193'. [ 397.731641][ T4059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10194'. [ 397.825924][ T4071] bond1: entered promiscuous mode [ 397.831162][ T4071] bond1: entered allmulticast mode [ 397.837060][ T4071] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.852502][ T4071] bond1 (unregistering): Released all slaves [ 397.890535][ T4146] loop4: detected capacity change from 0 to 764 [ 397.897735][ T4145] loop9: detected capacity change from 0 to 1024 [ 397.905449][ T4145] EXT4-fs: Ignoring removed nobh option [ 397.911207][ T4145] EXT4-fs: Ignoring removed bh option [ 397.923041][ T4146] Symlink component flag not implemented [ 397.929286][ T4146] Symlink component flag not implemented (7) [ 397.937032][ T4145] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.992171][ T4160] atomic_op ffff88811925e928 conn xmit_atomic 0000000000000000 [ 398.048382][T13241] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.131726][ T4192] vhci_hcd: invalid port number 208 [ 398.160593][ T4199] loop2: detected capacity change from 0 to 512 [ 398.179744][ T4203] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10222'. [ 398.180822][ T4199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.201903][ T4199] ext4 filesystem being mounted at /2069/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.241881][ T4199] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 398.264473][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.391884][ T4229] loop2: detected capacity change from 0 to 1024 [ 398.434077][ T4229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.453128][ T4229] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.10230: bg 0: block 88: padding at end of block bitmap is not set [ 398.499586][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.544767][ T4244] loop2: detected capacity change from 0 to 1024 [ 398.571619][ T4244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.606858][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.786314][ T4282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10247'. [ 398.876218][ T4290] smc: net device bond0 applied user defined pnetid SYZ2 [ 398.890186][ T4290] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 398.932859][ T4302] smc: net device bond0 erased user defined pnetid SYZ2 [ 398.941140][ T4302] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 398.996841][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 398.996859][ T29] audit: type=1326 audit(1748848073.908:13115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.10260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 399.027103][ T29] audit: type=1326 audit(1748848073.908:13116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.10260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 399.050764][ T29] audit: type=1326 audit(1748848073.918:13117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.10260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 399.074551][ T29] audit: type=1326 audit(1748848073.918:13118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.10260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 399.102144][ T4312] loop9: detected capacity change from 0 to 512 [ 399.113571][ T29] audit: type=1326 audit(1748848074.023:13119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.10260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 399.137314][ T29] audit: type=1326 audit(1748848074.023:13120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.10260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 399.161089][ T29] audit: type=1326 audit(1748848074.023:13121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.10260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 399.184789][ T29] audit: type=1326 audit(1748848074.023:13122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.10260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 399.208425][ T29] audit: type=1326 audit(1748848074.023:13123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.10260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 399.232120][ T29] audit: type=1326 audit(1748848074.023:13124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.10260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 399.264227][ T4312] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.277337][ T4312] ext4 filesystem being mounted at /1238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.301927][ T4312] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 399.323924][T13241] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.367550][ T4327] loop4: detected capacity change from 0 to 2048 [ 399.392534][ T4327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.407732][ T4327] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.420288][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.427753][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.435290][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.442891][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.450364][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.457826][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.465337][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.472773][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.480157][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.487651][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.495091][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.502514][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.509922][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.517465][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.525077][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.525858][T24724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.532495][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.532525][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.532552][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.563944][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.571391][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.578811][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.586274][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.593777][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.601221][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.608648][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.616095][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.623498][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.630957][T14253] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 399.642561][T14253] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 399.949883][ T4398] geneve2: entered promiscuous mode [ 400.102473][ T4422] bond5: entered promiscuous mode [ 400.107560][ T4422] bond5: entered allmulticast mode [ 400.113552][ T4422] 8021q: adding VLAN 0 to HW filter on device bond5 [ 400.138953][ T4422] bond5 (unregistering): Released all slaves [ 400.505297][ T4412] Set syz1 is full, maxelem 65536 reached [ 400.617759][ T4529] loop9: detected capacity change from 0 to 164 [ 400.639367][ T4529] syz.9.10312: attempt to access beyond end of device [ 400.639367][ T4529] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 400.667425][ T4529] syz.9.10312: attempt to access beyond end of device [ 400.667425][ T4529] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 400.712313][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 400.719948][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 400.727441][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 400.770619][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 400.778262][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 400.785843][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 400.793313][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 400.800750][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 400.808230][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 400.815665][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 400.823191][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 400.830585][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 400.838072][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 400.845655][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 400.936480][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 400.944041][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 400.951751][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 400.959267][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 400.966815][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 400.974243][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 400.980121][ T4552] vlan2: entered allmulticast mode [ 400.981715][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 400.994250][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 401.001665][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 401.009188][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 401.016672][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 401.024165][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 401.031588][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 401.039099][ T3392] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 401.051286][ T3392] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz0 [ 401.179516][ T4571] loop2: detected capacity change from 0 to 512 [ 401.186862][ T4571] EXT4-fs: Ignoring removed mblk_io_submit option [ 401.201439][ T4571] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 401.248407][ T4571] EXT4-fs (loop2): 1 truncate cleaned up [ 401.261058][ T4571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.290431][ T4571] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.338724][ T4579] Falling back ldisc for ttyS3. [ 401.496415][ T4610] vlan4: entered allmulticast mode [ 401.532584][ T4620] __nla_validate_parse: 8 callbacks suppressed [ 401.532603][ T4620] netlink: 68 bytes leftover after parsing attributes in process `syz.9.10340'. [ 401.594712][ T4628] program syz.9.10343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 401.612025][ T4628] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 401.792482][ T4641] netlink: 'syz.9.10348': attribute type 1 has an invalid length. [ 401.832464][ T4641] 8021q: adding VLAN 0 to HW filter on device bond5 [ 401.884625][ T4641] bond5: (slave gretap1): making interface the new active one [ 401.905263][ T4641] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 401.918166][ T4645] loop2: detected capacity change from 0 to 512 [ 401.939791][ T4645] EXT4-fs: Ignoring removed mblk_io_submit option [ 401.955137][ T4645] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 402.008870][ T4690] loop7: detected capacity change from 0 to 164 [ 402.018014][ T4690] syz.7.10351: attempt to access beyond end of device [ 402.018014][ T4690] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 402.032768][ T4690] syz.7.10351: attempt to access beyond end of device [ 402.032768][ T4690] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 402.046544][ T4688] loop9: detected capacity change from 0 to 1024 [ 402.054702][ T4645] EXT4-fs (loop2): 1 truncate cleaned up [ 402.065257][ T4688] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 402.077261][ T4645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.094964][ T4694] loop4: detected capacity change from 0 to 512 [ 402.095295][ T4694] EXT4-fs: Ignoring removed nomblk_io_submit option [ 402.095320][ T4694] EXT4-fs: Ignoring removed orlov option [ 402.101133][ T4688] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.132944][ T4694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.152014][ T4694] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 402.167895][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.202897][ T4688] EXT4-fs error (device loop9): ext4_check_all_de:659: inode #12: block 7: comm syz.9.10353: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 402.265147][T13241] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.278215][ T4713] geneve2: entered promiscuous mode [ 402.395361][T24724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.440024][ T4743] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=38 sclass=netlink_audit_socket pid=4743 comm=syz.2.10370 [ 402.502136][ T4747] hub 6-0:1.0: USB hub found [ 402.508756][ T4747] hub 6-0:1.0: 8 ports detected [ 402.516406][ T3454] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x4 [ 402.524133][ T3454] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x2 [ 402.542721][ T3454] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 402.550506][ T3454] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 402.558249][ T3454] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 402.565969][ T3454] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 402.573750][ T3454] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 402.581628][ T3454] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 402.589400][ T3454] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 402.597191][ T3454] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 402.604950][ T3454] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 402.612737][ T3454] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 402.620411][ T3454] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 402.628252][ T3454] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 402.635959][ T3454] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 402.643695][ T3454] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 402.659492][ T3454] hid-generic 0000:3000000:0000.0021: hidraw0: HID v0.00 Device [sy] on syz0 [ 402.699039][ T4765] loop2: detected capacity change from 0 to 164 [ 402.708167][ T4765] syz.2.10373: attempt to access beyond end of device [ 402.708167][ T4765] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 402.722956][ T4765] syz.2.10373: attempt to access beyond end of device [ 402.722956][ T4765] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 402.857137][ T4784] loop2: detected capacity change from 0 to 512 [ 402.864319][ T4784] EXT4-fs: Ignoring removed nomblk_io_submit option [ 402.871018][ T4784] EXT4-fs: Ignoring removed orlov option [ 402.880470][ T4784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.890635][ T4786] hub 8-0:1.0: USB hub found [ 402.894167][ T4784] ext4 filesystem being mounted at /2107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 402.908264][ T4786] hub 8-0:1.0: 8 ports detected [ 403.090030][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.110510][ T4812] hub 6-0:1.0: USB hub found [ 403.115287][ T4812] hub 6-0:1.0: 8 ports detected [ 403.119038][ T4816] ALSA: seq fatal error: cannot create timer (-19) [ 403.257256][ T4833] program syz.1.10401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 403.266893][ T4833] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 403.361986][ T4845] netlink: 52 bytes leftover after parsing attributes in process `syz.9.10408'. [ 403.532321][ T4863] loop9: detected capacity change from 0 to 512 [ 403.540956][ T4863] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #15: comm syz.9.10414: casefold flag without casefold feature [ 403.554314][ T4863] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.10414: couldn't read orphan inode 15 (err -117) [ 403.567449][ T4863] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.640456][T13241] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.707865][ T4876] netlink: 'syz.4.10418': attribute type 10 has an invalid length. [ 403.720110][ T4876] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10418'. [ 403.823389][ T4876] team0: Port device geneve1 added [ 404.008836][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 404.008854][ T29] audit: type=1326 audit(1748848079.173:13261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.9.10427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0f10e969 code=0x7ffc0000 [ 404.015467][ T4898] loop9: detected capacity change from 0 to 512 [ 404.038857][ T29] audit: type=1326 audit(1748848079.173:13262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.9.10427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0f10e969 code=0x7ffc0000 [ 404.068989][ T29] audit: type=1326 audit(1748848079.173:13263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.9.10427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2e0f10e969 code=0x7ffc0000 [ 404.092844][ T29] audit: type=1326 audit(1748848079.173:13264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.9.10427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2e0f10e9a3 code=0x7ffc0000 [ 404.116445][ T29] audit: type=1326 audit(1748848079.184:13265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.9.10427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2e0f10d41f code=0x7ffc0000 [ 404.139989][ T29] audit: type=1326 audit(1748848079.184:13266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.9.10427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2e0f10e9f7 code=0x7ffc0000 [ 404.163692][ T29] audit: type=1326 audit(1748848079.184:13267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.9.10427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e0f10d2d0 code=0x7ffc0000 [ 404.187344][ T29] audit: type=1326 audit(1748848079.184:13268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.9.10427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e0f10e56b code=0x7ffc0000 [ 404.283390][ T29] audit: type=1326 audit(1748848079.394:13269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.9.10427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2e0f10d5ca code=0x7ffc0000 [ 404.296112][ T4898] EXT4-fs (loop9): orphan cleanup on readonly fs [ 404.306891][ T29] audit: type=1326 audit(1748848079.394:13270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.9.10427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2e0f10d5ca code=0x7ffc0000 [ 404.346139][ T4911] loop7: detected capacity change from 0 to 128 [ 404.353145][ T4898] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.10427: bg 0: block 248: padding at end of block bitmap is not set [ 404.372092][ T4898] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.10427: Failed to acquire dquot type 1 [ 404.402330][ T4898] EXT4-fs (loop9): 1 truncate cleaned up [ 404.410519][ T4898] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 404.435691][ T4922] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4179 sclass=netlink_audit_socket pid=4922 comm=syz.1.10435 [ 404.476267][ T4926] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10436'. [ 404.540156][T13241] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.711138][ T4947] program syz.1.10446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.764696][ T4952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4952 comm=syz.2.10448 [ 404.791336][ T4956] loop4: detected capacity change from 0 to 512 [ 404.834122][ T4956] EXT4-fs (loop4): 1 orphan inode deleted [ 404.842418][ T4956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.859147][ T7319] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:51: Failed to release dquot type 1 [ 404.859341][ T4956] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.897093][ T4966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10453'. [ 404.912230][T24724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.951003][ T4968] loop7: detected capacity change from 0 to 1024 [ 404.962910][ T4968] EXT4-fs: Ignoring removed orlov option [ 404.972360][ T4972] pim6reg: entered allmulticast mode [ 404.977912][ T4968] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 404.990767][ T4972] pim6reg: left allmulticast mode [ 405.010932][ T4981] loop4: detected capacity change from 0 to 128 [ 405.021363][ T4968] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.073720][ T4968] EXT4-fs error (device loop7): ext4_check_all_de:659: inode #12: block 7: comm syz.7.10455: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 405.208603][ T1792] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.220603][ T5001] C: entered allmulticast mode [ 405.225910][ T5000] C: left allmulticast mode [ 405.283381][ T5010] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5010 comm=syz.7.10463 [ 405.296103][ T5010] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5010 comm=syz.7.10463 [ 405.319967][ T5007] program syz.2.10465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 405.375781][ T5016] netlink: 'syz.2.10468': attribute type 1 has an invalid length. [ 405.389792][ T5016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 405.410459][ T5016] bond3 (unregistering): Released all slaves [ 405.459824][ T5086] loop9: detected capacity change from 0 to 256 [ 405.488946][ T5086] FAT-fs (loop9): bogus number of FAT sectors [ 405.495129][ T5086] FAT-fs (loop9): Can't find a valid FAT filesystem [ 405.504444][ T5093] loop7: detected capacity change from 0 to 512 [ 405.511433][ T5093] EXT4-fs: Ignoring removed nomblk_io_submit option [ 405.518136][ T5093] EXT4-fs: Ignoring removed orlov option [ 405.535892][ T5093] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.566386][ T5093] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 405.888616][ T1792] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.910913][ T5111] loop7: detected capacity change from 0 to 256 [ 405.982920][ T5118] loop7: detected capacity change from 0 to 1024 [ 405.997221][ T5118] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 406.012275][ T5118] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.029609][ T5118] EXT4-fs error (device loop7): ext4_check_all_de:659: inode #12: block 7: comm syz.7.10478: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 406.067114][ T1792] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.277222][ T5142] netlink: 'syz.7.10483': attribute type 11 has an invalid length. [ 406.285662][ T5142] netlink: 448 bytes leftover after parsing attributes in process `syz.7.10483'. [ 406.326280][ T5144] hub 8-0:1.0: USB hub found [ 406.331036][ T5144] hub 8-0:1.0: 8 ports detected [ 406.385360][ T5155] loop7: detected capacity change from 0 to 512 [ 406.386435][ T5153] loop4: detected capacity change from 0 to 2050 [ 406.393223][ T5155] EXT4-fs: Ignoring removed mblk_io_submit option [ 406.405007][ T5153] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 64 [ 406.405413][ T5155] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 406.425818][ T5155] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.10489: iget: bad extended attribute block 1 [ 406.440020][ T5155] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.10489: couldn't read orphan inode 15 (err -117) [ 406.454126][ T5155] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.481142][ T1792] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.543691][ T5173] loop4: detected capacity change from 0 to 2048 [ 406.567026][ T5171] loop7: detected capacity change from 0 to 512 [ 406.576437][ T5171] EXT4-fs: Ignoring removed mblk_io_submit option [ 406.584961][ T5171] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 406.590403][ T5173] Alternate GPT is invalid, using primary GPT. [ 406.601389][ T5173] loop4: p1 p2 p3 [ 406.619749][ T5171] EXT4-fs (loop7): 1 truncate cleaned up [ 406.637527][ T5171] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.673007][ T1792] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.697514][ T5189] loop9: detected capacity change from 0 to 1024 [ 406.750819][ T5189] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.767537][ T5189] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.10495: Allocating blocks 385-513 which overlap fs metadata [ 406.792598][ T5189] EXT4-fs (loop9): pa ffff888106a5a540: logic 16, phys. 129, len 24 [ 406.800714][ T5189] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 406.841431][T13241] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.241025][ T5243] lo: entered allmulticast mode [ 407.257177][ T5242] lo: left allmulticast mode [ 407.467874][ T5266] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10519'. [ 408.364145][ T5290] loop4: detected capacity change from 0 to 128 [ 408.375104][ T5291] loop9: detected capacity change from 0 to 512 [ 408.441120][ T5291] EXT4-fs (loop9): 1 orphan inode deleted [ 408.450374][ T5302] loop2: detected capacity change from 0 to 128 [ 408.456985][ T7317] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:49: Failed to release dquot type 1 [ 408.458025][ T5291] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.495563][ T5291] ext4 filesystem being mounted at /1311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.507125][ T5301] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 408.515054][ T5301] FAT-fs (loop2): Filesystem has been set read-only [ 408.525011][ T5306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10534'. [ 408.534371][ T5306] netem: change failed [ 408.556083][ T5301] syz.2.10532: attempt to access beyond end of device [ 408.556083][ T5301] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 408.587831][ T5301] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 408.595705][ T5301] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 408.615578][T13241] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.653910][ T5302] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 408.664516][ T5316] netem: change failed [ 408.697997][ T5302] syz.2.10532: attempt to access beyond end of device [ 408.697997][ T5302] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 408.712156][ T5302] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 408.720010][ T5302] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 408.728302][ T5302] syz.2.10532: attempt to access beyond end of device [ 408.728302][ T5302] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 408.780392][ T5302] syz.2.10532: attempt to access beyond end of device [ 408.780392][ T5302] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 408.796713][ T5302] syz.2.10532: attempt to access beyond end of device [ 408.796713][ T5302] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 408.825148][ T5302] syz.2.10532: attempt to access beyond end of device [ 408.825148][ T5302] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 408.871505][ T5324] loop9: detected capacity change from 0 to 128 [ 408.919159][ T5324] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 408.926607][ T5332] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10544'. [ 408.941748][ T5324] ext4 filesystem being mounted at /1314/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 408.957399][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 408.957413][ T29] audit: type=1400 audit(1748848084.375:13360): avc: denied { cpu } for pid=5333 comm="syz.1.10547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 409.008074][T13241] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 409.059458][ T5363] netlink: 'syz.1.10552': attribute type 1 has an invalid length. [ 409.069125][ T5359] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 409.135447][ T5375] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10556'. [ 409.146793][ T5379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10555'. [ 409.171828][ T5379] IPVS: Unknown mcast interface: vcan0 [ 409.301025][ T29] audit: type=1400 audit(1748848084.722:13361): avc: denied { map } for pid=5403 comm="syz.4.10563" path="socket:[96099]" dev="sockfs" ino=96099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 409.372813][ T5410] loop4: detected capacity change from 0 to 1024 [ 409.387195][ T5412] netlink: 'syz.7.10567': attribute type 1 has an invalid length. [ 409.395068][ T5412] netlink: 16150 bytes leftover after parsing attributes in process `syz.7.10567'. [ 409.432171][ T5410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.449170][ T5410] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.10566: Allocating blocks 385-513 which overlap fs metadata [ 409.451913][ T5414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26216 sclass=netlink_route_socket pid=5414 comm=syz.2.10568 [ 409.482878][ T5410] EXT4-fs (loop4): pa ffff888106a5a5b0: logic 16, phys. 129, len 24 [ 409.491004][ T5410] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 409.551695][T24724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.590817][ T5438] 9pnet: p9_errstr2errno: server reported unknown error [ 409.726793][ T5461] loop2: detected capacity change from 0 to 512 [ 409.771810][ T29] audit: type=1400 audit(1748848085.237:13362): avc: denied { read } for pid=5469 comm="syz.9.10585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 409.819833][ T29] audit: type=1400 audit(1748848085.289:13363): avc: denied { ioctl } for pid=5469 comm="syz.9.10585" path="socket:[96587]" dev="sockfs" ino=96587 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 409.971908][ T5494] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10593'. [ 409.988309][ T5494] netem: change failed [ 410.004038][ T29] audit: type=1400 audit(1748848085.478:13364): avc: denied { mount } for pid=5495 comm="syz.2.10595" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 410.066515][ T5502] pim6reg1: entered promiscuous mode [ 410.071955][ T5502] pim6reg1: entered allmulticast mode [ 410.164215][ T5517] xt_TCPMSS: Only works on TCP SYN packets [ 410.228320][ T5521] 9pnet: p9_errstr2errno: server reported unknown error @pA [ 410.266161][ T5523] xt_hashlimit: max too large, truncated to 1048576 [ 410.354419][ T5529] smc: net device bond0 applied user defined pnetid SYZ2 [ 410.382760][ T5529] smc: net device bond0 erased user defined pnetid SYZ2 [ 410.394066][ T5533] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10609'. [ 410.459145][ T5539] loop7: detected capacity change from 0 to 1024 [ 410.470806][ T5542] netlink: 108 bytes leftover after parsing attributes in process `syz.2.10613'. [ 410.480107][ T5542] netlink: 108 bytes leftover after parsing attributes in process `syz.2.10613'. [ 410.491857][ T5539] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.508076][ T5539] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.10612: Allocating blocks 385-513 which overlap fs metadata [ 410.527771][ T5539] EXT4-fs (loop7): pa ffff8881051a0b60: logic 16, phys. 129, len 24 [ 410.535938][ T5539] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 410.585158][ T1792] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.607987][ T5546] SELinux: failed to load policy [ 410.653868][ T5552] wireguard0: entered promiscuous mode [ 410.659413][ T5552] wireguard0: entered allmulticast mode [ 410.681667][ T5551] loop4: detected capacity change from 0 to 2048 [ 410.692169][ T5557] loop7: detected capacity change from 0 to 512 [ 410.700397][ T5557] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 410.710540][ T5557] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 410.718549][ T5557] System zones: 1-12 [ 410.723202][ T5557] EXT4-fs (loop7): 1 truncate cleaned up [ 410.729820][ T5557] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.743141][ T5551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.789638][ T29] audit: type=1400 audit(1748848086.309:13365): avc: denied { write } for pid=5553 comm="syz.7.10615" path="/155/file2/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 410.853595][T24724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.878509][ T1792] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.967023][ T36] IPVS: starting estimator thread 0... [ 410.994848][ T5581] 9pnet: p9_errstr2errno: server reported unknown error [ 411.013228][ T5584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26216 sclass=netlink_route_socket pid=5584 comm=syz.9.10623 [ 411.070863][ T5579] IPVS: using max 2160 ests per chain, 108000 per kthread [ 411.230929][ T5601] bridge_slave_0: left allmulticast mode [ 411.236713][ T5601] bridge_slave_0: left promiscuous mode [ 411.242490][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.256725][ T5601] bridge_slave_1: left allmulticast mode [ 411.262533][ T5601] bridge_slave_1: left promiscuous mode [ 411.263029][ T29] audit: type=1326 audit(1748848086.792:13366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5602 comm="syz.4.10631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 411.268261][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.292285][ T29] audit: type=1326 audit(1748848086.792:13367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5602 comm="syz.4.10631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 411.322979][ T29] audit: type=1326 audit(1748848086.792:13368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5602 comm="syz.4.10631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 411.346861][ T29] audit: type=1326 audit(1748848086.792:13369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5602 comm="syz.4.10631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdcd3e969 code=0x7ffc0000 [ 411.373778][ T5601] bond0: (slave bond_slave_0): Releasing backup interface [ 411.385916][ T5601] bond0: (slave bond_slave_1): Releasing backup interface [ 411.408968][ T5601] team0: Port device team_slave_0 removed [ 411.426672][ T5601] team0: Port device team_slave_1 removed [ 411.463148][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.470764][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.495536][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.503234][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.718148][ T5621] C speed is unknown, defaulting to 1000 [ 411.817080][ T5637] loop4: detected capacity change from 0 to 1024 [ 411.832110][ T5637] EXT4-fs: Ignoring removed oldalloc option [ 411.852596][ T5637] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 411.883625][ T5637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.951717][T24724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.968783][ T5663] netlink: 'syz.9.10649': attribute type 7 has an invalid length. [ 411.976759][ T5663] netlink: 'syz.9.10649': attribute type 8 has an invalid length. [ 412.119237][ T10] IPVS: starting estimator thread 0... [ 412.169912][ T5708] loop9: detected capacity change from 0 to 512 [ 412.182038][ T5709] team0: left allmulticast mode [ 412.188163][ T5709] team_slave_1: left allmulticast mode [ 412.193731][ T5709] geneve1: left allmulticast mode [ 412.198962][ T5709] bridge0: port 3(team0) entered disabled state [ 412.213332][ T5708] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 412.215484][ T5697] IPVS: using max 1728 ests per chain, 86400 per kthread [ 412.235063][ T5708] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 412.243077][ T5708] System zones: 1-12 [ 412.250323][ T5708] EXT4-fs (loop9): 1 truncate cleaned up [ 412.257148][ T5709] bond1: (slave dummy0): Releasing active interface [ 412.264934][ T5708] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.281602][ T5709] bridge_slave_0: left promiscuous mode [ 412.287354][ T5709] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.303153][ T5709] bridge_slave_1: left allmulticast mode [ 412.308931][ T5709] bridge_slave_1: left promiscuous mode [ 412.314703][ T5709] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.339886][ T5709] bond0: (slave bond_slave_0): Releasing backup interface [ 412.348716][T13241] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.359209][ T5709] bond_slave_0: left allmulticast mode [ 412.365686][ T5709] bond0: (slave bond_slave_1): Releasing backup interface [ 412.382883][ T5709] bond_slave_1: left allmulticast mode [ 412.389242][ T5709] team_slave_1: left promiscuous mode [ 412.396721][ T5709] team0: Port device team_slave_1 removed [ 412.404542][ T5709] geneve1: left promiscuous mode [ 412.414185][ T5709] team0: Port device geneve1 removed [ 412.422466][ T5709] bond2: left allmulticast mode [ 412.427417][ T5709] bond2: left promiscuous mode [ 412.432453][ T5709] bridge0: port 4(bond2) entered disabled state [ 412.441897][ T5709] bond3: (slave geneve2): Releasing active interface [ 412.448852][ T5709] geneve2: left promiscuous mode [ 412.457724][ T5709] bond4: (slave gretap0): Releasing active interface [ 412.525175][ T5734] __nla_validate_parse: 3 callbacks suppressed [ 412.525228][ T5734] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10669'. [ 412.552212][ T5734] erspan0: entered promiscuous mode [ 412.565341][ T5734] macvtap1: entered promiscuous mode [ 412.570826][ T5734] macvtap1: entered allmulticast mode [ 412.576315][ T5734] erspan0: entered allmulticast mode [ 412.596953][ T5734] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10669'. [ 412.672048][ T5760] C speed is unknown, defaulting to 1000 [ 412.727805][ T5767] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.10679'. [ 412.781409][ T5760] IPVS: You probably need to specify IP address on multicast interface. [ 412.782220][ T5789] netlink: 'syz.2.10681': attribute type 1 has an invalid length. [ 412.789878][ T5760] IPVS: Error connecting to the multicast addr [ 412.804107][ T5789] netlink: 'syz.2.10681': attribute type 4 has an invalid length. [ 412.811924][ T5789] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.10681'. [ 412.875679][ T5796] dvmrp1: entered allmulticast mode [ 412.889770][ T5796] dvmrp1: left allmulticast mode [ 412.920564][ T5797] loop2: detected capacity change from 0 to 8192 [ 413.141122][ T5851] loop9: detected capacity change from 0 to 512 [ 413.149304][ T5851] EXT4-fs (loop9): orphan cleanup on readonly fs [ 413.156738][ T5851] EXT4-fs error (device loop9): ext4_orphan_get:1419: comm syz.9.10701: bad orphan inode 13 [ 413.168079][ T5851] ext4_test_bit(bit=12, block=18) = 1 [ 413.173487][ T5851] is_bad_inode(inode)=0 [ 413.177768][ T5851] NEXT_ORPHAN(inode)=2130706432 [ 413.182648][ T5851] max_ino=32 [ 413.185951][ T5851] i_nlink=1 [ 413.191069][ T5851] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 413.193618][ T5850] SELinux: ebitmap: truncated map [ 413.210361][ T5850] SELinux: failed to load policy [ 413.254403][T13241] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.298192][ T5863] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 413.741508][ T5874] loop2: detected capacity change from 0 to 512 [ 413.748590][ T5874] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 413.759993][ T5874] EXT4-fs (loop2): 1 truncate cleaned up [ 413.766098][ T5874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.781530][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 413.781549][ T29] audit: type=1400 audit(1748848089.451:13456): avc: denied { setattr } for pid=5873 comm="syz.2.10708" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 413.818781][ T29] audit: type=1400 audit(1748848089.482:13457): avc: denied { unlink } for pid=5873 comm="syz.2.10708" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 413.854341][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.875446][ T5882] IPVS: Error connecting to the multicast addr [ 414.019430][ T5894] loop4: detected capacity change from 0 to 8192 [ 414.027425][ T5894] vfat: Unknown parameter '�!T.yՄ * #' [ 414.294418][ T5962] program syz.2.10735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.360197][ T5967] netlink: 'syz.2.10737': attribute type 3 has an invalid length. [ 414.376681][ T5965] SELinux: failed to load policy [ 414.441207][ T29] audit: type=1400 audit(1748848090.134:13458): avc: denied { prog_load } for pid=5976 comm="syz.1.10742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 414.460646][ T29] audit: type=1400 audit(1748848090.134:13459): avc: denied { bpf } for pid=5976 comm="syz.1.10742" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 414.481414][ T29] audit: type=1400 audit(1748848090.134:13460): avc: denied { perfmon } for pid=5976 comm="syz.1.10742" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 414.502711][ T29] audit: type=1400 audit(1748848090.134:13461): avc: denied { prog_run } for pid=5976 comm="syz.1.10742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 414.570860][ T29] audit: type=1400 audit(1748848090.144:13462): avc: denied { read write } for pid=3327 comm="syz-executor" name="loop2" dev="devtmpfs" ino=676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 414.594348][ T29] audit: type=1400 audit(1748848090.144:13463): avc: denied { open } for pid=3327 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 414.617946][ T29] audit: type=1400 audit(1748848090.144:13464): avc: denied { ioctl } for pid=3327 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=676 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 414.642713][ T29] audit: type=1400 audit(1748848090.239:13465): avc: denied { read write } for pid=13241 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 414.717561][ T5999] vlan4: entered allmulticast mode [ 414.722789][ T5999] macvtap0: entered allmulticast mode [ 414.728241][ T5999] veth0_macvtap: entered allmulticast mode [ 414.818136][ T6015] netlink: 'syz.1.10758': attribute type 4 has an invalid length. [ 414.826099][ T6015] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.10758'. [ 414.996187][ T6044] vlan4: entered allmulticast mode [ 415.121863][ T6062] netlink: 332 bytes leftover after parsing attributes in process `syz.9.10777'. [ 415.165078][ T6066] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 415.325683][ T6087] bond0: (slave team0): Releasing backup interface [ 415.342206][ T6087] team0: left allmulticast mode [ 415.347594][ T6087] team_slave_1: left allmulticast mode [ 415.353193][ T6087] geneve1: left allmulticast mode [ 415.360589][ T6087] bond0: (slave bond_slave_0): Releasing backup interface [ 415.371843][ T6087] bond_slave_0: left allmulticast mode [ 415.390730][ T6087] team0: Port device team_slave_1 removed [ 415.409723][ T6087] team0: Port device geneve1 removed [ 415.428545][ T6087] bond2: (slave wireguard0): Releasing backup interface [ 415.476668][ T6087] bond4: (slave gretap0): Releasing active interface [ 415.493510][ T6087] bond5: (slave gretap1): Releasing active interface [ 415.499608][ T6099] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 415.854221][ T6158] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 415.977638][ T6176] C speed is unknown, defaulting to 1000 [ 416.173881][ T6218] C speed is unknown, defaulting to 1000 [ 416.211575][ T6226] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10817'. [ 416.220898][ T6226] tipc: Started in network mode [ 416.225804][ T6226] tipc: Node identity b, cluster identity 3 [ 416.231839][ T6226] tipc: Node number set to 11 [ 416.722780][ T6298] netlink: 'syz.1.10822': attribute type 1 has an invalid length. [ 416.734481][ T6301] loop4: detected capacity change from 0 to 512 [ 416.747340][ T6296] rdma_op ffff88813f3fc580 conn xmit_rdma 0000000000000000 [ 416.749917][ T6301] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 417.110169][ T6301] EXT4-fs (loop4): 1 truncate cleaned up [ 417.117511][ T6301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.137947][ T6328] loop7: detected capacity change from 0 to 128 [ 417.238954][T24724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.270449][ T6328] syz.7.10830: attempt to access beyond end of device [ 417.270449][ T6328] loop7: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 417.300798][ T6328] syz.7.10830: attempt to access beyond end of device [ 417.300798][ T6328] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 417.318000][ T6343] loop4: detected capacity change from 0 to 512 [ 417.331917][ T6328] syz.7.10830: attempt to access beyond end of device [ 417.331917][ T6328] loop7: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 417.347195][ T6328] syz.7.10830: attempt to access beyond end of device [ 417.347195][ T6328] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 417.388539][ T6343] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 417.397532][ T6343] EXT4-fs (loop4): orphan cleanup on readonly fs [ 417.403429][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10838'. [ 417.404232][ T6343] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 417.427862][ T6343] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 417.432757][ T6328] syz.7.10830: attempt to access beyond end of device [ 417.432757][ T6328] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 417.448922][ T6343] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.10834: bg 0: block 40: padding at end of block bitmap is not set [ 417.483753][ T6343] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 417.534950][ T6328] syz.7.10830: attempt to access beyond end of device [ 417.534950][ T6328] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 417.548522][ T6328] syz.7.10830: attempt to access beyond end of device [ 417.548522][ T6328] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 417.554621][ T6343] EXT4-fs (loop4): 1 truncate cleaned up [ 417.562049][ T6328] syz.7.10830: attempt to access beyond end of device [ 417.562049][ T6328] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 417.581453][ T6328] syz.7.10830: attempt to access beyond end of device [ 417.581453][ T6328] loop7: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 417.595345][ T6328] syz.7.10830: attempt to access beyond end of device [ 417.595345][ T6328] loop7: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 417.598807][ T6343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 417.658629][ T6365] netlink: 'syz.1.10843': attribute type 1 has an invalid length. [ 417.691369][ T6365] 8021q: adding VLAN 0 to HW filter on device bond5 [ 417.754049][T24724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.798581][ T6412] C speed is unknown, defaulting to 1000 [ 417.863369][ T6426] loop7: detected capacity change from 0 to 512 [ 417.886857][ T6426] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 417.907947][ T6426] EXT4-fs (loop7): mount failed [ 417.913238][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10855'. [ 417.930200][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10855'. [ 418.700007][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 418.700026][ T29] audit: type=1326 audit(1748848094.621:13608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6475 comm="syz.7.10871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44dce5e969 code=0x7ffc0000 [ 418.735853][ T29] audit: type=1400 audit(1748848094.631:13609): avc: denied { lock } for pid=6477 comm="syz.9.10861" path="socket:[98748]" dev="sockfs" ino=98748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 418.760188][ T29] audit: type=1326 audit(1748848094.652:13610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6475 comm="syz.7.10871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44dce5e969 code=0x7ffc0000 [ 418.783822][ T29] audit: type=1326 audit(1748848094.652:13611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6475 comm="syz.7.10871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44dce5e969 code=0x7ffc0000 [ 418.807557][ T29] audit: type=1326 audit(1748848094.652:13612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6475 comm="syz.7.10871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44dce5e969 code=0x7ffc0000 [ 418.831249][ T29] audit: type=1326 audit(1748848094.652:13613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6475 comm="syz.7.10871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44dce5e969 code=0x7ffc0000 [ 418.856647][ T29] audit: type=1400 audit(1748848094.652:13614): avc: denied { ioctl } for pid=6476 comm="syz.2.10864" path="socket:[98752]" dev="sockfs" ino=98752 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 418.881784][ T29] audit: type=1326 audit(1748848094.789:13615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6475 comm="syz.7.10871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44dce5e969 code=0x7ffc0000 [ 418.905501][ T29] audit: type=1326 audit(1748848094.789:13616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6475 comm="syz.7.10871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44dce5e969 code=0x7ffc0000 [ 418.929293][ T29] audit: type=1326 audit(1748848094.789:13617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6475 comm="syz.7.10871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f44dce5e969 code=0x7ffc0000 [ 419.035585][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10873'. [ 419.055742][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10873'. [ 419.075510][ T6517] SELinux: ebitmap: truncated map [ 419.083052][ T6517] SELinux: failed to load policy [ 419.187967][ T6536] netlink: 'syz.2.10882': attribute type 6 has an invalid length. [ 419.301364][ T6544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10885'. [ 419.433946][ T6550] netlink: 'syz.1.10887': attribute type 4 has an invalid length. [ 419.463899][ T6550] netlink: 'syz.1.10887': attribute type 4 has an invalid length. [ 419.507515][ T6560] xt_connbytes: Forcing CT accounting to be enabled [ 419.514824][ T6560] Cannot find set identified by id 0 to match [ 419.562996][ T6566] bond0: (slave bond_slave_0): Releasing backup interface [ 419.575031][ T6566] bond_slave_0: left promiscuous mode [ 419.580600][ T6566] bond_slave_0: left allmulticast mode [ 419.612467][T14253] syz2: Port: 1 Link DOWN [ 419.612503][ T6568] netlink: 96 bytes leftover after parsing attributes in process `syz.9.10896'. [ 419.734311][ T6586] loop9: detected capacity change from 0 to 512 [ 419.742222][ T6586] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 419.753998][ T6586] EXT4-fs (loop9): 1 truncate cleaned up [ 419.760452][ T6586] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.775584][ T6575] C speed is unknown, defaulting to 1000 [ 419.792340][T13241] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.868153][ T6575] chnl_net:caif_netlink_parms(): no params data found [ 419.909812][ T6575] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.917018][ T6575] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.924414][ T6575] bridge_slave_0: entered allmulticast mode [ 419.931132][ T6575] bridge_slave_0: entered promiscuous mode [ 419.938045][ T6575] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.945432][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.952772][ T6575] bridge_slave_1: entered allmulticast mode [ 419.959404][ T6575] bridge_slave_1: entered promiscuous mode [ 419.980286][ T6575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.990951][ T6575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.011952][ T6575] team0: Port device team_slave_0 added [ 420.019247][ T6575] team0: Port device team_slave_1 added [ 420.038013][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.045017][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.071191][ T6575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.082498][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.089619][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.115782][ T6575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.144518][ T6575] hsr_slave_0: entered promiscuous mode [ 420.150665][ T6575] hsr_slave_1: entered promiscuous mode [ 420.156568][ T6575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.164273][ T6575] Cannot create hsr debugfs directory [ 420.176574][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881001fbe00: rx timeout, send abort [ 420.184924][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881001fbe00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 420.415318][ T6575] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 420.424362][ T6575] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 420.433268][ T6575] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 420.442583][ T6575] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 420.479011][ T6575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.495922][ T6575] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.506910][ T7322] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.514013][ T7322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.526054][T27591] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.533234][T27591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.601649][ T6575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.710740][ T6575] veth0_vlan: entered promiscuous mode [ 420.720004][ T6575] veth1_vlan: entered promiscuous mode [ 420.736600][ T6575] veth0_macvtap: entered promiscuous mode [ 420.744532][ T6575] veth1_macvtap: entered promiscuous mode [ 420.756603][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.769298][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.778966][ T6575] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.787819][ T6575] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.796558][ T6575] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.805349][ T6575] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.865195][ T6955] loop8: detected capacity change from 0 to 164 [ 421.099835][ T7009] netlink: 96 bytes leftover after parsing attributes in process `syz.2.10922'. [ 421.399655][ T7038] netlink: 52 bytes leftover after parsing attributes in process `syz.7.10935'. [ 421.452426][ T7042] netlink: 'syz.7.10938': attribute type 4 has an invalid length. [ 421.460406][ T7042] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.10938'. [ 421.607935][ T7052] C speed is unknown, defaulting to 1000 [ 421.734107][ T7052] chnl_net:caif_netlink_parms(): no params data found [ 421.747952][ T7166] loop8: detected capacity change from 0 to 512 [ 421.781940][ T7166] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.795652][ T7166] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.819981][ T7214] loop9: detected capacity change from 0 to 1024 [ 421.829657][ T7214] EXT4-fs: Ignoring removed bh option [ 421.835225][ T7214] EXT4-fs: Ignoring removed nomblk_io_submit option [ 421.843683][ T7166] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.851372][ T7214] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.866008][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.873194][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.880557][ T7052] bridge_slave_0: entered allmulticast mode [ 421.887827][ T7052] bridge_slave_0: entered promiscuous mode [ 421.895464][ T7052] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.902629][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.910198][ T7052] bridge_slave_1: entered allmulticast mode [ 421.916969][ T7052] bridge_slave_1: entered promiscuous mode [ 421.944329][ T7052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.960170][ T7052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.000955][ T7052] team0: Port device team_slave_0 added [ 422.012109][ T7287] vlan4: entered allmulticast mode [ 422.034459][ T7052] team0: Port device team_slave_1 added [ 422.076178][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.083281][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.109347][ T7052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.122156][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.129142][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.155344][ T7052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.223798][ T7397] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 422.242323][ T7052] hsr_slave_0: entered promiscuous mode [ 422.251084][ T7052] hsr_slave_1: entered promiscuous mode [ 422.261598][ T7052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.269532][ T7052] Cannot create hsr debugfs directory [ 422.437662][ T7237] ================================================================== [ 422.445818][ T7237] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 422.453861][ T7237] [ 422.456208][ T7237] write to 0xffff88812d413b04 of 4 bytes by task 7214 on cpu 1: [ 422.463866][ T7237] xas_set_mark+0x12b/0x140 [ 422.468409][ T7237] tag_pages_for_writeback+0xc2/0x290 [ 422.473824][ T7237] ext4_do_writepages+0x697/0x21c0 [ 422.478972][ T7237] ext4_writepages+0x176/0x300 [ 422.483775][ T7237] do_writepages+0x1c6/0x310 [ 422.488396][ T7237] file_write_and_wait_range+0x156/0x2c0 [ 422.494165][ T7237] generic_buffers_fsync_noflush+0x45/0x120 [ 422.500091][ T7237] ext4_sync_file+0x1ab/0x690 [ 422.504813][ T7237] vfs_fsync_range+0x10d/0x130 [ 422.509609][ T7237] ext4_buffered_write_iter+0x34f/0x3c0 [ 422.515177][ T7237] ext4_file_write_iter+0x383/0xf00 [ 422.520432][ T7237] iter_file_splice_write+0x5f2/0x970 [ 422.525848][ T7237] direct_splice_actor+0x156/0x2a0 [ 422.530986][ T7237] splice_direct_to_actor+0x312/0x680 [ 422.536390][ T7237] do_splice_direct+0xda/0x150 [ 422.541186][ T7237] do_sendfile+0x380/0x650 [ 422.545644][ T7237] __x64_sys_sendfile64+0x105/0x150 [ 422.550877][ T7237] x64_sys_call+0xb39/0x2fb0 [ 422.555489][ T7237] do_syscall_64+0xd2/0x200 [ 422.560024][ T7237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.565945][ T7237] [ 422.568292][ T7237] read to 0xffff88812d413b04 of 4 bytes by task 7237 on cpu 0: [ 422.575943][ T7237] file_write_and_wait_range+0x10e/0x2c0 [ 422.581620][ T7237] generic_buffers_fsync_noflush+0x45/0x120 [ 422.587543][ T7237] ext4_sync_file+0x1ab/0x690 [ 422.592269][ T7237] vfs_fsync_range+0x10d/0x130 [ 422.597071][ T7237] ext4_buffered_write_iter+0x34f/0x3c0 [ 422.602660][ T7237] ext4_file_write_iter+0x383/0xf00 [ 422.607897][ T7237] iter_file_splice_write+0x5f2/0x970 [ 422.613305][ T7237] direct_splice_actor+0x156/0x2a0 [ 422.618443][ T7237] splice_direct_to_actor+0x312/0x680 [ 422.623838][ T7237] do_splice_direct+0xda/0x150 [ 422.628632][ T7237] do_sendfile+0x380/0x650 [ 422.633092][ T7237] __x64_sys_sendfile64+0x105/0x150 [ 422.638331][ T7237] x64_sys_call+0xb39/0x2fb0 [ 422.642952][ T7237] do_syscall_64+0xd2/0x200 [ 422.647508][ T7237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.653429][ T7237] [ 422.655773][ T7237] value changed: 0x02000021 -> 0x04000021 [ 422.661506][ T7237] [ 422.663855][ T7237] Reported by Kernel Concurrency Sanitizer on: [ 422.670023][ T7237] CPU: 0 UID: 0 PID: 7237 Comm: syz.9.10946 Tainted: G W 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 422.683777][ T7237] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 422.687855][ T7237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.697942][ T7237] ================================================================== [ 422.741109][T27591] ================================================================== [ 422.749227][T27591] BUG: KCSAN: data-race in alloc_pid / copy_process [ 422.755829][T27591] [ 422.758152][T27591] read-write to 0xffffffff86860a20 of 4 bytes by task 7318 on cpu 1: [ 422.766218][T27591] alloc_pid+0x539/0x720 [ 422.770475][T27591] copy_process+0xe0e/0x1fe0 [ 422.775077][T27591] kernel_clone+0x16c/0x5b0 [ 422.779598][T27591] user_mode_thread+0x7d/0xb0 [ 422.784289][T27591] call_usermodehelper_exec_work+0x41/0x160 [ 422.790212][T27591] process_scheduled_works+0x4cb/0x9d0 [ 422.795693][T27591] worker_thread+0x582/0x770 [ 422.800306][T27591] kthread+0x486/0x510 [ 422.804381][T27591] ret_from_fork+0xda/0x150 [ 422.808895][T27591] ret_from_fork_asm+0x1a/0x30 [ 422.813670][T27591] [ 422.815994][T27591] read to 0xffffffff86860a20 of 4 bytes by task 27591 on cpu 0: [ 422.823633][T27591] copy_process+0x148f/0x1fe0 [ 422.828351][T27591] kernel_clone+0x16c/0x5b0 [ 422.832872][T27591] user_mode_thread+0x7d/0xb0 [ 422.837569][T27591] call_usermodehelper_exec_work+0x41/0x160 [ 422.843573][T27591] process_scheduled_works+0x4cb/0x9d0 [ 422.849051][T27591] worker_thread+0x582/0x770 [ 422.853658][T27591] kthread+0x486/0x510 [ 422.857736][T27591] ret_from_fork+0xda/0x150 [ 422.862262][T27591] ret_from_fork_asm+0x1a/0x30 [ 422.867045][T27591] [ 422.869377][T27591] value changed: 0x80000123 -> 0x80000124 [ 422.875100][T27591] [ 422.877430][T27591] Reported by Kernel Concurrency Sanitizer on: [ 422.883589][T27591] CPU: 0 UID: 0 PID: 27591 Comm: kworker/u8:69 Tainted: G W 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 422.897579][T27591] Tainted: [W]=WARN [ 422.901384][T27591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.911446][T27591] Workqueue: events_unbound call_usermodehelper_exec_work [ 422.918589][T27591] ================================================================== [ 423.105032][T28518] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.