last executing test programs: 2m47.121924385s ago: executing program 32 (id=71): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) write$selinux_load(0xffffffffffffffff, 0x0, 0x190da) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000004c0008800c00024000deffff55c3dd9e0c00014000000000000000000c00024000000000000000000c00024000000000000000090c00014000000000000000060c000140000000000000026314000480080002403cb140bb080001400000000314000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(r1) 2m25.722601373s ago: executing program 33 (id=583): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmmsg(r1, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af257611a13d40cc6aa716bd2733d9395d32fafe82dccc3b211e02659298134932c7c7d1033958c52744bb6adcf202f058a68249", 0xce}, {&(0x7f0000000400)="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", 0x62c}, {0x0, 0xe}], 0x3, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000800) 2m21.854886646s ago: executing program 34 (id=680): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="58020000", @ANYRES16=r2, @ANYBLOB="010004000000fcdbdf25010000000800010000000000140004800500030002000000050003000200000008000200010000002c000480050003000200000005000300070000000500030007000000050003000500000005000300060000006c010c801c000b8008000a005697000008000a005ce0000008000a002e68000024000b8008000900f6869d2908000a007f3e0000080009001062cd3908000900285d2d3024000b8008000a00d31d000008000a001039000008000a002d29000008000900603675131c000b8008000900017c3a4b08000a00d67f000008000a003d09000024000b8008000a006eec000008000900d09c5e6c08000a00eb5b000008000900cc554f242c000b8008000900b5c6a531080009004940360e08000900f611936108000a00ed0e00000800090017c43d7244000b8008000900c7f2926008000900a2ed762908000900cefc882b08000a00f74a000008000900f41cb26008000a008bbe00000800090059bb596808000a008f7a000014000b8008000a00062d00000800090040691e510c000b8008000900a2c3bc3934000b8008000a00fdca000008000a009fde0000080009007bb7465a08000a002682000008000a00ce6d000008000900f97fd35d88000880"], 0x258}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1m22.247380043s ago: executing program 0 (id=2620): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x200, "f0c0513d8776f50fff0c3385a34db794431556776cd23a58", "b751bd9b520500648b90ebe1de9160fd18a29d1a025e16f2da34db1a1fac97cf"}}}}}}, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/59, 0x3b}, {0x0, 0x2f}], 0x2) 1m22.172958033s ago: executing program 0 (id=2621): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1m22.126010394s ago: executing program 0 (id=2624): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0x3) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000000)={0x2198, &(0x7f0000000040)}) 1m22.094832654s ago: executing program 0 (id=2627): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) 1m22.028105074s ago: executing program 0 (id=2629): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) mkdir(&(0x7f0000001a80)='./file0\x00', 0x15b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00\x00\x00\x00\x00\x00\x00'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m21.985589534s ago: executing program 0 (id=2630): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5b1d071468882d03, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaaaaaaaaeaaaaaaaa2e86dd6100272400383aff00000000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) 1m21.12946757s ago: executing program 7 (id=2668): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 1m20.546575133s ago: executing program 7 (id=2654): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) 1m20.506065263s ago: executing program 7 (id=2655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="a80000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001"], 0xa8}}, 0x20000000) 1m20.398358404s ago: executing program 7 (id=2657): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x810) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) personality(0x400000b) 1m20.330116014s ago: executing program 7 (id=2658): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m20.279010885s ago: executing program 7 (id=2660): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x1000, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x6, @multicast2}, 0x2, 0x0, 0x1}}, 0x26) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 1m6.875790494s ago: executing program 35 (id=2630): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5b1d071468882d03, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaaaaaaaaeaaaaaaaa2e86dd6100272400383aff00000000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) 1m4.998187345s ago: executing program 36 (id=2660): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x1000, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x6, @multicast2}, 0x2, 0x0, 0x1}}, 0x26) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 48.230340164s ago: executing program 5 (id=3331): socket$inet6_udplite(0xa, 0x2, 0x88) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='cpuset\x00') fchdir(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x5750c0}, 0x18) 48.157648285s ago: executing program 5 (id=3333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000040)="3f031c000302140006001e008900", 0xe, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r3, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) 48.109004945s ago: executing program 5 (id=3334): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fd, 0x1, 0x800}) 48.065442066s ago: executing program 5 (id=3336): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000440)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_lock}, {@jqfmt_vfsv0}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8004, 0x0, 0x0, 0x15, 0x7, "ef35040000003852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e676df701905b9aafa55a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c000000000000000005004000", [0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) 47.807225227s ago: executing program 5 (id=3343): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x0, 0x0, {0x30}}, 0x14}}, 0x48800) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 47.496896649s ago: executing program 6 (id=3346): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="154e010000975fc79025ced9c50001006d616373656300001c00028005000c2201"], 0x54}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 47.3280742s ago: executing program 6 (id=3350): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001"], 0x122}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 47.24365024s ago: executing program 6 (id=3352): sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002160, 0x0) 47.185521411s ago: executing program 6 (id=3354): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000440)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_lock}, {@jqfmt_vfsv0}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8004, 0x0, 0x0, 0x15, 0x7, "ef35040000003852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e676df701905b9aafa55a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c000000000000000005004000", [0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) 47.119731341s ago: executing program 5 (id=3355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000340)={[{@grpquota}, {@nomblk_io_submit}, {@i_version}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x1, 0xbb2, &(0x7f0000002700)="$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") syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[], 0x0) 47.080631991s ago: executing program 37 (id=3355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000340)={[{@grpquota}, {@nomblk_io_submit}, {@i_version}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x1, 0xbb2, &(0x7f0000002700)="$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") syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[], 0x0) 46.836163103s ago: executing program 6 (id=3370): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xfff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x2, 0x4, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xb, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x3, 0x0, 0xfffc, 0x6}, {0xff, 0x0, 0x1}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) 45.806211879s ago: executing program 6 (id=3388): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x4, 0xfc, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) 45.805906219s ago: executing program 38 (id=3388): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x4, 0xfc, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) 11.753576451s ago: executing program 8 (id=4348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x44f0) 11.734127531s ago: executing program 8 (id=4350): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r1, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a6ff}, 0x0) 11.710538021s ago: executing program 8 (id=4351): bpf$MAP_CREATE(0x0, 0x0, 0x48) rmdir(0x0) open_tree(0xffffffffffffffff, &(0x7f0000000280)='\x00', 0x89901) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) close_range(r0, 0xffffffffffffffff, 0x0) 11.685335561s ago: executing program 8 (id=4352): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x2964, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) 11.523833082s ago: executing program 8 (id=4356): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x622}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x158, 0x11, 0x148, 0x0, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x40, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x4, 0x18}}}, @common=@unspec=@limit={{0x48}, {0x5, 0x5, 0x4, 0x3, 0x9, 0x3, 0xfffffffffffffff8}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 10.373939538s ago: executing program 8 (id=4373): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 10.373807169s ago: executing program 39 (id=4373): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 2.336285716s ago: executing program 4 (id=4581): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe64, 0x0, @loopback, 0xc4}, 0x1c) sendto$inet6(r0, 0x0, 0xffffff21, 0x24000881, &(0x7f0000000100)={0xa, 0x4e24, 0x5, @loopback, 0x7fffffff}, 0x1c) 1.64917861s ago: executing program 1 (id=4612): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x707987cd) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) 1.456928302s ago: executing program 1 (id=4618): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xc, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800001, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19) 1.404889382s ago: executing program 4 (id=4620): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="03000000"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.396764312s ago: executing program 9 (id=4622): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x4000441) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 1.332954422s ago: executing program 1 (id=4625): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xffd, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) io_uring_setup(0x7ac9, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x1}) 1.318345423s ago: executing program 1 (id=4626): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x789, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000180)='./file0\x00', 0x1f) 542.250257ms ago: executing program 9 (id=4627): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r1}, 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 542.081047ms ago: executing program 4 (id=4628): bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="850000002e000000870a00000000000025000000000000009500000d0000000036e0fe9d628154331435e9e6ce79c9df0dafb05b570f3a5e216269570953ed4e8ef92cbd5659aa3327828105ea37cf394d0e22a71a3e05b26e86c93f9733f22bf8c4189a9b2b1351c0a4ea63d3371870918db0dad0aa5c36c1173f"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd01, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x23) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe9, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfe}, 0x1042, 0x80, 0xbcb0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 541.454297ms ago: executing program 1 (id=4637): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8262, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 541.259707ms ago: executing program 2 (id=4629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22a82, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 511.422117ms ago: executing program 2 (id=4630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}, 0x1, 0x0, 0x0, 0x40}, 0x24008854) 424.238518ms ago: executing program 3 (id=4632): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x38, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}}, 0x4000080) 414.801728ms ago: executing program 4 (id=4633): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000}, 0x20000840) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mlock2(&(0x7f000020a000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x0) 411.152088ms ago: executing program 3 (id=4634): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) dup2(r1, r0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) 410.702018ms ago: executing program 9 (id=4635): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)={0x24, 0xa, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x12, r1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[], 0xaf) 331.446139ms ago: executing program 4 (id=4636): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) msgget(0x3, 0x710) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x6c2, &(0x7f0000003880)={0x0, 0x4075, 0x18, 0x401, 0x364}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 331.254668ms ago: executing program 9 (id=4638): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000001280), 0x6) 321.978759ms ago: executing program 1 (id=4639): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c600"], 0x0) 297.952408ms ago: executing program 4 (id=4640): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x4000441) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 297.800428ms ago: executing program 2 (id=4641): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) 297.520728ms ago: executing program 9 (id=4642): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0x5}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 278.411718ms ago: executing program 3 (id=4643): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xffffffff}) 254.562909ms ago: executing program 3 (id=4644): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 224.084839ms ago: executing program 9 (id=4645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="00006005bbbbbbbbbbbb007ddd0bbf008100000086dd6a5421bd00042f"], 0x42) syz_usb_disconnect(0xffffffffffffffff) 177.913089ms ago: executing program 3 (id=4646): ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x305) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 175.786499ms ago: executing program 3 (id=4647): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) ustat(0x3, 0x0) 42.44334ms ago: executing program 2 (id=4648): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000007c577e1700000000dace", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) 21.44614ms ago: executing program 2 (id=4649): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x4e}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r2 = socket$pptp(0x18, 0x1, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=4650): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x4) fcntl$notify(r1, 0x402, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x8) kernel console output (not intermixed with test programs): 10689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.423263][T10689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.436212][ T5258] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.445999][ T5258] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.487271][ T5258] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.502613][ T5248] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.568751][T10759] veth0_vlan: entered promiscuous mode [ 139.588725][T10759] veth1_vlan: entered promiscuous mode [ 139.609042][T10759] veth0_macvtap: entered promiscuous mode [ 139.636305][T10759] veth1_macvtap: entered promiscuous mode [ 139.652338][T10759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.664041][T10759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.675187][T10952] ipip0: entered promiscuous mode [ 139.683208][ T5236] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.694931][ T5236] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.712131][ T5236] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.721935][ T5236] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.798774][T10962] loop5: detected capacity change from 0 to 8192 [ 140.185208][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 140.185224][ T29] audit: type=1400 audit(140.169:5399): avc: denied { connect } for pid=10976 comm="syz.9.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.246390][ T29] audit: type=1400 audit(140.229:5400): avc: denied { setopt } for pid=10982 comm="syz.5.2905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.282452][ T29] audit: type=1400 audit(140.259:5401): avc: denied { write } for pid=10985 comm="syz.5.2906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.306262][ T29] audit: type=1400 audit(140.259:5402): avc: denied { connect } for pid=10985 comm="syz.5.2906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.325628][ T29] audit: type=1400 audit(140.259:5403): avc: denied { name_connect } for pid=10985 comm="syz.5.2906" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 140.374674][T10990] loop5: detected capacity change from 0 to 2048 [ 140.386393][T10990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.403297][ T29] audit: type=1400 audit(140.379:5404): avc: denied { write open } for pid=10989 comm="syz.5.2908" path="/560/file0/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 140.428150][ T29] audit: type=1400 audit(140.409:5405): avc: denied { mounton } for pid=10989 comm="syz.5.2908" path="/560/file0/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 140.532236][ T29] audit: type=1400 audit(140.509:5406): avc: denied { remove_name } for pid=3649 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.555012][ T29] audit: type=1400 audit(140.509:5407): avc: denied { rmdir } for pid=3649 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.578789][ T3649] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 140.594362][ T3649] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 140.607051][ T29] audit: type=1400 audit(140.579:5408): avc: denied { unlink } for pid=3649 comm="syz-executor" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.637171][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.713257][T11013] loop5: detected capacity change from 0 to 512 [ 140.725476][T11013] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.811287][T11019] __nla_validate_parse: 3 callbacks suppressed [ 140.811313][T11019] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2919'. [ 140.903027][T11026] netlink: 'syz.6.2922': attribute type 3 has an invalid length. [ 140.949105][T11034] netlink: 'syz.5.2928': attribute type 6 has an invalid length. [ 140.958914][T11034] netlink: 'syz.5.2928': attribute type 6 has an invalid length. [ 141.075071][T11048] tipc: Started in network mode [ 141.080119][T11048] tipc: Node identity ac14140f, cluster identity 4711 [ 141.087452][T11048] tipc: New replicast peer: 255.255.255.255 [ 141.093591][T11048] tipc: Enabled bearer , priority 10 [ 141.100547][T11048] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2933'. [ 141.109553][T11048] tipc: Disabling bearer [ 141.208437][T11056] loop8: detected capacity change from 0 to 8192 [ 141.408220][T11072] program syz.8.2944 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.449402][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888118cb7c00: rx timeout, send abort [ 141.457946][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888118cb7c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 142.107307][T11145] program syz.9.2976 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.331754][T11174] loop6: detected capacity change from 0 to 512 [ 142.362712][T11174] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.368724][T11179] netlink: 'syz.5.2984': attribute type 10 has an invalid length. [ 142.419813][T11179] ipvlan0: entered allmulticast mode [ 142.425211][T11179] veth0_vlan: entered allmulticast mode [ 142.461058][T11179] team0: Device ipvlan0 failed to register rx_handler [ 142.520558][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2989'. [ 142.557508][T11193] veth1_to_bridge: entered promiscuous mode [ 142.563490][T11193] veth1_to_bridge: entered allmulticast mode [ 142.605045][ T5258] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.962516][T11232] syzkaller0: entered promiscuous mode [ 142.968165][T11232] syzkaller0: entered allmulticast mode [ 143.057053][T11270] can0: slcan on ptm0. [ 143.124967][T11270] can0 (unregistered): slcan off ptm0. [ 143.130700][T11270] Falling back ldisc for ptm0. [ 143.174496][T11278] loop8: detected capacity change from 0 to 1024 [ 143.191558][T11278] EXT4-fs: inline encryption not supported [ 143.207520][T11278] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.245246][T10689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.509185][T11301] lo speed is unknown, defaulting to 1000 [ 143.889696][T11328] loop5: detected capacity change from 0 to 256 [ 144.406327][T11350] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3034'. [ 144.418845][T11351] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 144.444622][T11356] pimreg: entered allmulticast mode [ 144.492566][T11356] pimreg: left allmulticast mode [ 144.588184][T11365] loop8: detected capacity change from 0 to 1024 [ 144.597388][T11365] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.3040: Failed to acquire dquot type 0 [ 144.610608][T11365] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 144.625214][T11365] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #13: comm syz.8.3040: corrupted inode contents [ 144.637744][T11365] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #13: comm syz.8.3040: mark_inode_dirty error [ 144.649706][T11365] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #13: comm syz.8.3040: corrupted inode contents [ 144.665101][T11365] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #13: comm syz.8.3040: mark_inode_dirty error [ 144.680986][T11365] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #13: comm syz.8.3040: corrupted inode contents [ 144.693698][T11365] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 144.702733][T11365] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #13: comm syz.8.3040: corrupted inode contents [ 144.733219][T11365] EXT4-fs error (device loop8): ext4_truncate:4637: inode #13: comm syz.8.3040: mark_inode_dirty error [ 144.751129][T11365] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 144.763443][T11365] EXT4-fs (loop8): 1 truncate cleaned up [ 144.769979][T11365] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.819538][T10689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.835257][T11371] lo speed is unknown, defaulting to 1000 [ 144.982560][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3049'. [ 144.995986][T11387] netlink: 312 bytes leftover after parsing attributes in process `syz.8.3049'. [ 145.005296][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3049'. [ 145.110212][T11394] bridge0: entered promiscuous mode [ 145.121372][T11394] macsec1: entered promiscuous mode [ 145.129253][T11394] bridge0: port 3(macsec1) entered blocking state [ 145.135780][T11394] bridge0: port 3(macsec1) entered disabled state [ 145.143109][T11394] macsec1: entered allmulticast mode [ 145.148473][T11394] bridge0: entered allmulticast mode [ 145.171667][T11394] macsec1: left allmulticast mode [ 145.176788][T11394] bridge0: left allmulticast mode [ 145.186919][T11394] bridge0: left promiscuous mode [ 145.302052][T11408] loop9: detected capacity change from 0 to 1024 [ 145.363159][T11408] __quota_error: 194 callbacks suppressed [ 145.363256][T11408] Quota error (device loop9): do_check_range: Getting block 64 out of range 1-5 [ 145.378132][T11408] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 145.387559][T11408] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.3057: Failed to acquire dquot type 0 [ 145.430775][T11408] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 145.445815][T11408] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.3057: corrupted inode contents [ 145.458942][T11408] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #13: comm syz.9.3057: mark_inode_dirty error [ 145.471429][T11408] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.3057: corrupted inode contents [ 145.483479][T11408] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.3057: mark_inode_dirty error [ 145.495763][T11408] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.3057: corrupted inode contents [ 145.508537][T11408] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 145.517401][T11408] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.3057: corrupted inode contents [ 145.529560][ T29] audit: type=1400 audit(145.519:5601): avc: denied { cpu } for pid=11422 comm="syz.5.3063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 145.548311][T11408] EXT4-fs error (device loop9): ext4_truncate:4637: inode #13: comm syz.9.3057: mark_inode_dirty error [ 145.559703][T11408] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 145.571099][T11408] EXT4-fs (loop9): 1 truncate cleaned up [ 145.575378][T11425] pim6reg1: entered promiscuous mode [ 145.578082][T11408] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.582165][T11425] pim6reg1: entered allmulticast mode [ 145.604846][ T29] audit: type=1326 audit(145.579:5602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.1.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 145.628111][ T29] audit: type=1326 audit(145.579:5603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.1.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 145.651102][ T29] audit: type=1326 audit(145.579:5604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.1.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 145.674248][ T29] audit: type=1326 audit(145.579:5605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.1.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 145.697190][ T29] audit: type=1326 audit(145.579:5606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.1.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 145.728276][T10759] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.752012][T11431] pimreg: entered allmulticast mode [ 145.783431][ T29] audit: type=1326 audit(145.749:5607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.5.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27667defc9 code=0x7ffc0000 [ 145.806501][ T29] audit: type=1326 audit(145.749:5608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.5.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27667defc9 code=0x7ffc0000 [ 145.832175][T11431] pimreg: left allmulticast mode [ 145.926860][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3084'. [ 145.946000][T11449] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3084'. [ 145.955294][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3084'. [ 145.984395][T11458] lo speed is unknown, defaulting to 1000 [ 146.017249][T11457] syzkaller0: entered promiscuous mode [ 146.022787][T11457] syzkaller0: entered allmulticast mode [ 146.035417][T11461] rdma_op ffff8881190e4980 conn xmit_rdma 0000000000000000 [ 146.258386][T11480] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3090'. [ 146.287241][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3091'. [ 146.297233][T11482] netlink: 312 bytes leftover after parsing attributes in process `syz.6.3091'. [ 146.306623][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3091'. [ 146.425486][T11493] tipc: New replicast peer: 255.255.255.255 [ 146.431664][T11493] tipc: Enabled bearer , priority 10 [ 146.443835][T11495] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3097'. [ 146.858613][T11522] loop6: detected capacity change from 0 to 1024 [ 146.878608][T11522] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.885736][T11522] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.907088][T11522] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.051767][ T5376] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.127980][T11545] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3116'. [ 147.137277][T11545] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3116'. [ 147.547958][T11569] loop8: detected capacity change from 0 to 512 [ 147.586280][T11569] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.3127: bad orphan inode 11862016 [ 147.605397][T11569] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 147.708264][ T10] tipc: Node number set to 2886997007 [ 147.736199][T10689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 147.797464][T11586] syzkaller0: entered promiscuous mode [ 147.904984][T11595] netlink: 'syz.8.3138': attribute type 11 has an invalid length. [ 147.917155][ T5258] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.926199][T11595] netlink: 'syz.8.3138': attribute type 11 has an invalid length. [ 147.936936][ T5258] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.954958][ T5258] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.974168][ T5258] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.117014][T11617] netlink: 'syz.9.3149': attribute type 1 has an invalid length. [ 148.143122][T11617] bond1: (slave geneve2): making interface the new active one [ 148.151059][T11617] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 148.159982][ T5258] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 148.198318][ T5258] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 148.226990][ T5258] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 148.236313][ T5258] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 148.692344][T11673] syzkaller0: entered promiscuous mode [ 148.815522][T11681] IPv6: Can't replace route, no match found [ 148.850479][T11683] loop9: detected capacity change from 0 to 1024 [ 148.858319][T11683] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.867362][T11683] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.893927][T11683] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.962646][T10759] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.136096][T11696] lo speed is unknown, defaulting to 1000 [ 149.225196][T11714] syzkaller0: entered promiscuous mode [ 149.263004][T11716] loop5: detected capacity change from 0 to 1764 [ 149.390688][T11722] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 149.424243][T11725] netlink: 'syz.5.3196': attribute type 11 has an invalid length. [ 149.512953][T11725] netlink: 'syz.5.3196': attribute type 11 has an invalid length. [ 149.738349][T11740] syzkaller1: entered promiscuous mode [ 149.743987][T11740] syzkaller1: entered allmulticast mode [ 150.005654][T11770] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11770 comm=syz.8.3226 [ 150.018276][T11770] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11770 comm=syz.8.3226 [ 150.537583][T11810] netlink: 'syz.6.3232': attribute type 1 has an invalid length. [ 150.555560][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 150.555648][ T29] audit: type=1326 audit(150.539:5821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27667defc9 code=0x7ffc0000 [ 150.556648][T11808] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 150.591986][ T29] audit: type=1326 audit(150.539:5822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27667defc9 code=0x7ffc0000 [ 150.615044][ T29] audit: type=1326 audit(150.569:5823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f27667defc9 code=0x7ffc0000 [ 150.642408][ T29] audit: type=1326 audit(150.569:5824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27667defc9 code=0x7ffc0000 [ 150.665498][ T29] audit: type=1326 audit(150.579:5825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27667defc9 code=0x7ffc0000 [ 150.688625][ T29] audit: type=1326 audit(150.579:5826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27667defc9 code=0x7ffc0000 [ 150.711566][ T29] audit: type=1326 audit(150.579:5827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27667defc9 code=0x7ffc0000 [ 150.734528][ T29] audit: type=1326 audit(150.579:5828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27667defc9 code=0x7ffc0000 [ 150.757502][ T29] audit: type=1326 audit(150.589:5829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27667defc9 code=0x7ffc0000 [ 150.786291][T11810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.794449][ T29] audit: type=1326 audit(150.659:5830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27667defc9 code=0x7ffc0000 [ 150.824437][T11813] bond1: (slave ip6erspan0): making interface the new active one [ 150.858862][T11813] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 151.031528][T11823] __nla_validate_parse: 15 callbacks suppressed [ 151.031547][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3239'. [ 151.081143][T11823] team0 (unregistering): Port device team_slave_0 removed [ 151.111171][T11823] team0 (unregistering): Port device team_slave_1 removed [ 151.158804][T11836] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 151.211986][T11836] hsr_slave_1 (unregistering): left promiscuous mode [ 151.577559][T11865] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11865 comm=syz.9.3257 [ 151.590504][T11865] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11865 comm=syz.9.3257 [ 151.669315][T11873] netlink: 'syz.8.3261': attribute type 1 has an invalid length. [ 151.683170][T11873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.698081][T11873] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 151.784072][T11878] loop6: detected capacity change from 0 to 4096 [ 151.800550][T11878] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.812507][T11883] loop8: detected capacity change from 0 to 512 [ 151.821488][T11878] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.834300][T11883] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.844157][T11883] EXT4-fs (loop8): orphan cleanup on readonly fs [ 151.878350][T11883] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3265: bg 0: block 248: padding at end of block bitmap is not set [ 151.894008][ T5376] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.903571][T11883] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.3265: Failed to acquire dquot type 1 [ 151.929271][T11883] EXT4-fs (loop8): 1 truncate cleaned up [ 151.944257][T11883] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.978003][T10689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.273045][T11924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11924 comm=syz.1.3281 [ 152.391828][T11936] xt_HMARK: spi-set and port-set can't be combined [ 152.425601][T11942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3290'. [ 152.434654][T11942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3290'. [ 152.495302][T11952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3290'. [ 152.515622][T11952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3290'. [ 152.548971][T11962] loop8: detected capacity change from 0 to 256 [ 152.561280][T11965] netlink: 'syz.6.3299': attribute type 3 has an invalid length. [ 152.570823][T11962] FAT-fs (loop8): codepage cp932 not found [ 152.787519][T11985] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3308'. [ 152.810525][T11985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11985 comm=syz.6.3308 [ 152.830393][T11985] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3308'. [ 152.870562][T11987] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11987 comm=syz.6.3309 [ 152.883243][T11987] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11987 comm=syz.6.3309 [ 153.092085][T12009] loop6: detected capacity change from 0 to 512 [ 153.101682][T12009] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.771178][T12049] loop5: detected capacity change from 0 to 512 [ 153.792272][T12049] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.3336: corrupted in-inode xattr: invalid ea_ino [ 153.807720][T12049] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3336: couldn't read orphan inode 15 (err -117) [ 153.820566][T12049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.880199][T12059] loop9: detected capacity change from 0 to 512 [ 153.887661][T12059] EXT4-fs: Ignoring removed i_version option [ 153.893721][T12059] EXT4-fs: Ignoring removed bh option [ 153.894960][T12049] loop5: detected capacity change from 512 to 0 [ 153.916871][T12061] EXT4-fs error (device loop5): ext4_get_inode_loc:4970: inode #12: block 7: comm syz.5.3336: unable to read itable block [ 153.931605][T12059] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.952213][T12064] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 153.958793][T12064] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 153.966958][T12064] vhci_hcd vhci_hcd.0: Device attached [ 153.974126][ T5376] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.984772][T12061] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 153.994362][T12061] EXT4-fs (loop5): I/O error while writing superblock [ 154.021474][ T3649] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 154.041484][T10759] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.054623][T12064] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(8) [ 154.061303][T12064] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 154.068931][T12064] vhci_hcd vhci_hcd.0: Device attached [ 154.083074][T12064] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 154.112407][T12064] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(12) [ 154.119144][T12064] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 154.126894][T12064] vhci_hcd vhci_hcd.0: Device attached [ 154.143565][T12064] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 154.185457][T12067] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(6) [ 154.192012][T12067] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 154.199741][T12067] vhci_hcd vhci_hcd.0: Device attached [ 154.205480][T12064] vhci_hcd vhci_hcd.0: pdev(8) rhport(6) sockfd(16) [ 154.212107][T12064] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 154.219880][T12064] vhci_hcd vhci_hcd.0: Device attached [ 154.235111][ T23] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 154.244892][T12074] vhci_hcd: connection closed [ 154.245099][T12068] vhci_hcd: connection closed [ 154.245383][ T5250] vhci_hcd: stop threads [ 154.249852][T12070] vhci_hcd: connection closed [ 154.254503][ T5250] vhci_hcd: release socket [ 154.260556][T12072] vhci_hcd: connection closed [ 154.263513][ T5250] vhci_hcd: disconnect device [ 154.268049][T12065] vhci_hcd: connection reset by peer [ 154.310621][ T5250] vhci_hcd: stop threads [ 154.314959][ T5250] vhci_hcd: release socket [ 154.319403][ T5250] vhci_hcd: disconnect device [ 154.334528][ T5250] vhci_hcd: stop threads [ 154.337402][T12083] syzkaller1: entered promiscuous mode [ 154.338930][ T5250] vhci_hcd: release socket [ 154.344293][T12083] syzkaller1: entered allmulticast mode [ 154.348760][ T5250] vhci_hcd: disconnect device [ 154.388934][ T5250] vhci_hcd: stop threads [ 154.393274][ T5250] vhci_hcd: release socket [ 154.397760][ T5250] vhci_hcd: disconnect device [ 154.415967][ T5250] vhci_hcd: stop threads [ 154.420308][ T5250] vhci_hcd: release socket [ 154.424906][ T5250] vhci_hcd: disconnect device [ 154.517560][ T5258] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4955: inode #18: block 9: comm kworker/u8:57: unable to read itable block [ 154.532141][ T5258] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 154.540523][ T5258] EXT4-fs (loop5): I/O error while writing superblock [ 154.554918][ T5258] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4955: inode #12: block 7: comm kworker/u8:57: unable to read itable block [ 154.574343][ T5258] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 154.598945][ T5258] EXT4-fs (loop5): I/O error while writing superblock [ 154.621623][ T4528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.649616][T12104] loop6: detected capacity change from 0 to 512 [ 154.652206][ T4528] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 154.664817][ T4528] EXT4-fs (loop5): I/O error while writing superblock [ 154.677959][T12104] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.3354: corrupted in-inode xattr: invalid ea_ino [ 154.719099][T12104] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.3354: couldn't read orphan inode 15 (err -117) [ 154.745877][T12104] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.854878][T12104] loop6: detected capacity change from 512 to 0 [ 154.875272][T12104] EXT4-fs error (device loop6): ext4_get_inode_loc:4970: inode #12: block 7: comm syz.6.3354: unable to read itable block [ 154.891470][T12104] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 154.920384][T12104] EXT4-fs (loop6): I/O error while writing superblock [ 154.930489][T12131] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3366'. [ 154.943526][T12131] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.950987][T12131] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.970282][ T5376] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 154.981390][T12139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12139 comm=syz.8.3366 [ 155.000223][T12139] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3366'. [ 155.051879][T12112] lo speed is unknown, defaulting to 1000 [ 155.259516][T12112] chnl_net:caif_netlink_parms(): no params data found [ 155.299484][T12165] loop8: detected capacity change from 0 to 512 [ 155.317720][T12165] EXT4-fs: Ignoring removed i_version option [ 155.323824][T12165] EXT4-fs: Ignoring removed bh option [ 155.334095][T12159] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.346779][ T5258] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4955: inode #18: block 9: comm kworker/u8:57: unable to read itable block [ 155.361587][ T5258] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 155.370499][ T5258] EXT4-fs (loop6): I/O error while writing superblock [ 155.378717][ T5258] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4955: inode #12: block 7: comm kworker/u8:57: unable to read itable block [ 155.392736][ T5258] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 155.401625][ T5258] EXT4-fs (loop6): I/O error while writing superblock [ 155.409689][ T9771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.410111][T12159] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.419489][T12165] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.445453][ T9771] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 155.457464][T12112] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.464592][T12112] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.473395][T12112] bridge_slave_0: entered allmulticast mode [ 155.480093][ T9771] EXT4-fs (loop6): I/O error while writing superblock [ 155.490333][T12112] bridge_slave_0: entered promiscuous mode [ 155.503300][T12159] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.537889][T12112] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.545282][T12112] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.553545][T10689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.562724][T12112] bridge_slave_1: entered allmulticast mode [ 155.570587][T12112] bridge_slave_1: entered promiscuous mode [ 155.583277][T12159] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.596129][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 155.596147][ T29] audit: type=1326 audit(155.579:5923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12175 comm="syz.9.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d96aaefc9 code=0x7ffc0000 [ 155.631631][ T29] audit: type=1326 audit(155.579:5924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12175 comm="syz.9.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d96aaefc9 code=0x7ffc0000 [ 155.654721][ T29] audit: type=1326 audit(155.599:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12175 comm="syz.9.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d96aaefc9 code=0x7ffc0000 [ 155.677729][ T29] audit: type=1326 audit(155.599:5926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12175 comm="syz.9.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d96aaefc9 code=0x7ffc0000 [ 155.700703][ T29] audit: type=1326 audit(155.599:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12175 comm="syz.9.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d96aaefc9 code=0x7ffc0000 [ 155.723650][ T29] audit: type=1326 audit(155.599:5928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12175 comm="syz.9.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d96aaefc9 code=0x7ffc0000 [ 155.746814][ T29] audit: type=1326 audit(155.599:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12175 comm="syz.9.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d96aaefc9 code=0x7ffc0000 [ 155.769721][ T29] audit: type=1326 audit(155.599:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12175 comm="syz.9.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d96aaefc9 code=0x7ffc0000 [ 155.792796][ T29] audit: type=1326 audit(155.599:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12175 comm="syz.9.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d96aaefc9 code=0x7ffc0000 [ 155.816913][ T29] audit: type=1326 audit(155.659:5932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12175 comm="syz.9.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d96aaefc9 code=0x7ffc0000 [ 155.818471][T12112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.851007][T12112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.872432][T12112] team0: Port device team_slave_0 added [ 155.879122][T12112] team0: Port device team_slave_1 added [ 155.900998][T12112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.908668][T12112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.934643][T12112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.954407][ T5248] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.994293][ T5250] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.004853][ T5250] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.023470][T12112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.030551][T12112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.056519][T12112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.070342][ T5020] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.090483][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.106824][ T5250] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.117267][ T5250] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.148198][T12112] hsr_slave_0: entered promiscuous mode [ 156.156246][T12112] hsr_slave_1: entered promiscuous mode [ 156.162533][T12112] debugfs: 'hsr0' already exists in 'hsr' [ 156.168352][T12112] Cannot create hsr debugfs directory [ 156.178092][ T5250] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.188478][ T5250] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.203479][ T5020] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.237861][ T5250] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.248247][ T5250] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.357475][T12190] lo speed is unknown, defaulting to 1000 [ 156.461058][ T5250] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 156.537177][ T5250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.547421][ T5250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.557766][ T5250] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 156.567808][ T5250] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 156.576299][ T5250] veth0: left promiscuous mode [ 156.582044][ T5250] bond0 (unregistering): Released all slaves [ 156.591752][ T5250] bond1 (unregistering): Released all slaves [ 156.659064][T12190] chnl_net:caif_netlink_parms(): no params data found [ 156.668762][ T5250] tipc: Disabling bearer [ 156.674096][ T5250] tipc: Left network mode [ 156.725493][T12190] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.732659][T12190] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.742757][T12190] bridge_slave_0: entered allmulticast mode [ 156.749513][T12190] bridge_slave_0: entered promiscuous mode [ 156.758388][ T5250] hsr_slave_0: left promiscuous mode [ 156.764079][ T5250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.771523][ T5250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.779275][ T5250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.786754][ T5250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.796101][ T5250] veth1_macvtap: left promiscuous mode [ 156.801613][ T5250] veth0_macvtap: left promiscuous mode [ 156.807219][ T5250] veth1_vlan: left promiscuous mode [ 156.812558][ T5250] veth0_vlan: left promiscuous mode [ 156.884573][ T5250] team0 (unregistering): Port device team_slave_1 removed [ 156.895404][ T5250] team0 (unregistering): Port device C removed [ 156.930411][T12190] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.937572][T12190] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.945274][T12190] bridge_slave_1: entered allmulticast mode [ 156.952186][T12190] bridge_slave_1: entered promiscuous mode [ 156.976606][T12190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.987736][T12190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.009664][T12190] team0: Port device team_slave_0 added [ 157.016714][T12190] team0: Port device team_slave_1 added [ 157.034602][T12190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.041625][T12190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.067724][T12190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.105263][T12190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.112248][T12190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.138240][T12190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.204234][T12190] hsr_slave_0: entered promiscuous mode [ 157.228096][T12190] hsr_slave_1: entered promiscuous mode [ 157.235045][T12190] debugfs: 'hsr0' already exists in 'hsr' [ 157.240815][T12190] Cannot create hsr debugfs directory [ 157.298339][T12112] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 157.314988][T12112] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 157.339219][T12112] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 157.348688][T12112] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 157.372035][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3403'. [ 157.381971][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3403'. [ 157.455310][T12112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.475479][T12112] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.486918][ T5020] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.494116][ T5020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.513932][ T5020] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.521080][ T5020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.537512][T12112] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 157.548007][T12112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.642338][T12112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.725713][T12190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 157.739756][T12190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 157.751821][T12190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 157.761914][T12190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 157.793675][T12275] loop8: detected capacity change from 0 to 2048 [ 157.811925][T12112] veth0_vlan: entered promiscuous mode [ 157.818582][T12275] EXT4-fs (loop8): failed to initialize system zone (-117) [ 157.826089][T12275] EXT4-fs (loop8): mount failed [ 157.827238][T12112] veth1_vlan: entered promiscuous mode [ 157.849875][T12190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.863339][T12112] veth0_macvtap: entered promiscuous mode [ 157.875423][T12112] veth1_macvtap: entered promiscuous mode [ 157.887966][T12112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.903827][T12112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.913762][T12190] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.933706][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.940854][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.950635][ T5248] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.959758][ T5248] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.969041][ T5248] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.978095][ T5248] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.991408][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.998556][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.039574][T12190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.129800][T12190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.304694][T12322] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3424'. [ 158.345190][T12190] veth0_vlan: entered promiscuous mode [ 158.369767][T12190] veth1_vlan: entered promiscuous mode [ 158.416700][T12190] veth0_macvtap: entered promiscuous mode [ 158.429194][T12190] veth1_macvtap: entered promiscuous mode [ 158.454123][T12190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.468900][T12190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.495422][ T5248] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.512623][ T5248] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.539749][ T5248] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.563119][ T5248] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.612766][T12343] sg_write: process 237 (syz.9.3432) changed security contexts after opening file descriptor, this is not allowed. [ 158.645484][T12348] vlan2: entered allmulticast mode [ 158.747213][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3439'. [ 158.926555][T12386] lo speed is unknown, defaulting to 1000 [ 158.970941][T12388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3453'. [ 159.044026][T12397] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.134270][T12397] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.147530][T12412] loop8: detected capacity change from 0 to 512 [ 159.173734][T12412] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 159.189093][T12412] EXT4-fs (loop8): 1 truncate cleaned up [ 159.197240][T12412] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.215820][T12397] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.244867][ T23] usb 17-1: enqueue for inactive port 0 [ 159.275009][ T23] usb 17-1: enqueue for inactive port 0 [ 159.302563][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3467'. [ 159.341189][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3467'. [ 159.356021][ T23] vhci_hcd: vhci_device speed not set [ 159.391675][T12425] pim6reg: entered allmulticast mode [ 159.399325][T12425] pim6reg: left allmulticast mode [ 159.531592][T12433] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3473'. [ 159.608091][T12441] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 159.729159][T12449] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3482'. [ 159.742353][T12451] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3481'. [ 159.882575][T10689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.106674][T12482] loop9: detected capacity change from 0 to 2048 [ 160.116965][T12397] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.151770][T12482] Alternate GPT is invalid, using primary GPT. [ 160.158296][T12482] loop9: p2 p3 p7 [ 160.313080][T12505] syzkaller1: entered promiscuous mode [ 160.318703][T12505] syzkaller1: entered allmulticast mode [ 160.441377][T12513] netem: change failed [ 160.570304][T12294] IPVS: starting estimator thread 0... [ 160.616286][T12528] loop8: detected capacity change from 0 to 256 [ 160.630814][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 160.630832][ T29] audit: type=1400 audit(160.609:5982): avc: denied { remount } for pid=12527 comm="syz.8.3515" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 160.664817][T12524] IPVS: using max 1968 ests per chain, 98400 per kthread [ 160.738493][ T29] audit: type=1400 audit(160.719:5983): avc: denied { create } for pid=12533 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 160.784913][ T29] audit: type=1400 audit(160.739:5984): avc: denied { write } for pid=12533 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 160.795244][T12534] infiniband syz0: set active [ 160.808842][T12534] infiniband syz0: added bond_slave_0 [ 160.820037][T12534] RDS/IB: syz0: added [ 160.824215][T12534] smc: adding ib device syz0 with port count 1 [ 160.830719][T12534] smc: ib device syz0 port 1 has no pnetid [ 161.341215][ T5020] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.361107][ T5020] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.379341][ T5020] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.394449][ T5020] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.403724][T12546] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 161.404822][ T3699] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 161.410326][T12546] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.424059][T12546] vhci_hcd vhci_hcd.0: Device attached [ 161.469617][T12552] xt_connbytes: Forcing CT accounting to be enabled [ 161.477051][T12552] Cannot find set identified by id 0 to match [ 161.484371][T12546] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 161.490924][T12546] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 161.498665][T12546] vhci_hcd vhci_hcd.0: Device attached [ 161.514943][T12546] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 161.521508][T12546] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 161.529166][T12546] vhci_hcd vhci_hcd.0: Device attached [ 161.540817][T12546] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 161.550498][T12546] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 161.557130][T12546] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 161.564913][T12546] vhci_hcd vhci_hcd.0: Device attached [ 161.575796][T12546] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 161.585880][T12546] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(15) [ 161.592522][T12546] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 161.600158][T12546] vhci_hcd vhci_hcd.0: Device attached [ 161.606720][T12560] vhci_hcd: connection closed [ 161.606982][ T5020] vhci_hcd: stop threads [ 161.616036][ T5020] vhci_hcd: release socket [ 161.620469][ T5020] vhci_hcd: disconnect device [ 161.625497][T12558] vhci_hcd: connection closed [ 161.625600][T12553] vhci_hcd: connection closed [ 161.625659][T12547] vhci_hcd: connection closed [ 161.625786][T12556] vhci_hcd: connection closed [ 161.640267][ T5020] vhci_hcd: stop threads [ 161.649597][ T5020] vhci_hcd: release socket [ 161.654049][ T5020] vhci_hcd: disconnect device [ 161.659489][ T5020] vhci_hcd: stop threads [ 161.663754][ T5020] vhci_hcd: release socket [ 161.668228][ T5020] vhci_hcd: disconnect device [ 161.673394][ T5020] vhci_hcd: stop threads [ 161.677698][ T5020] vhci_hcd: release socket [ 161.682150][ T5020] vhci_hcd: disconnect device [ 161.687550][ T5020] vhci_hcd: stop threads [ 161.691847][ T5020] vhci_hcd: release socket [ 161.696320][ T5020] vhci_hcd: disconnect device [ 161.701027][ T3387] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 161.709498][ T3387] usb 9-1: enqueue for inactive port 0 [ 161.715131][ T3387] usb 9-1: enqueue for inactive port 0 [ 161.720881][ T3387] usb 9-1: enqueue for inactive port 0 [ 161.770547][ T29] audit: type=1400 audit(161.749:5985): avc: denied { setopt } for pid=12566 comm="syz.2.3526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.805721][ T3387] vhci_hcd: vhci_device speed not set [ 161.818435][T12572] pim6reg: entered allmulticast mode [ 161.826537][T12572] pim6reg: left allmulticast mode [ 161.972661][ T29] audit: type=1400 audit(161.949:5986): avc: denied { listen } for pid=12577 comm="syz.9.3531" lport=34873 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 162.024960][ T29] audit: type=1400 audit(161.949:5987): avc: denied { accept } for pid=12577 comm="syz.9.3531" lport=34873 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 162.047603][ T29] audit: type=1400 audit(161.989:5988): avc: denied { setopt } for pid=12577 comm="syz.9.3531" lport=34873 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 162.071538][ T29] audit: type=1400 audit(162.009:5989): avc: denied { shutdown } for pid=12581 comm="syz.2.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 162.077069][T12584] netlink: 'syz.9.3534': attribute type 7 has an invalid length. [ 162.260163][T12596] raw_sendmsg: syz.2.3541 forgot to set AF_INET. Fix it! [ 162.268367][T12600] loop9: detected capacity change from 0 to 128 [ 162.275396][ T29] audit: type=1400 audit(162.259:5990): avc: denied { bind } for pid=12597 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 162.325762][ T29] audit: type=1400 audit(162.309:5991): avc: denied { mount } for pid=12599 comm="syz.9.3543" name="/" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 162.464564][T12616] veth0: entered promiscuous mode [ 162.517604][T12619] __nla_validate_parse: 15 callbacks suppressed [ 162.517625][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3551'. [ 162.608449][T12618] lo speed is unknown, defaulting to 1000 [ 162.814153][ T5248] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 163.261292][T12635] loop2: detected capacity change from 0 to 2048 [ 163.298006][T12641] syzkaller1: entered promiscuous mode [ 163.303687][T12641] syzkaller1: entered allmulticast mode [ 163.309388][T12635] Alternate GPT is invalid, using primary GPT. [ 163.315999][T12635] loop2: p2 p3 p7 [ 163.352460][T12644] netlink: 'syz.2.3561': attribute type 1 has an invalid length. [ 163.458693][T12650] loop9: detected capacity change from 0 to 512 [ 163.482776][T12650] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.520363][T10759] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.627894][T12674] syzkaller1: entered promiscuous mode [ 163.633506][T12674] syzkaller1: entered allmulticast mode [ 163.671861][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3576'. [ 163.681543][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3576'. [ 163.690989][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3576'. [ 163.703560][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3576'. [ 163.704519][ T9] hid_parser_main: 17 callbacks suppressed [ 163.704541][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 163.735288][ T9] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 164.017950][T12703] lo speed is unknown, defaulting to 1000 [ 164.572608][T12721] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.583036][T12721] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 164.617711][T12721] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.628218][T12721] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 164.697649][T12721] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.708130][T12721] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 164.758391][T12721] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.768740][T12721] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 164.838731][ T5250] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 164.848069][ T5250] netdevsim netdevsim9 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 164.862076][ T5250] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 164.870501][ T5250] netdevsim netdevsim9 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 164.887301][ T5250] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 164.895801][ T5250] netdevsim netdevsim9 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 164.910134][ T5250] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 164.918529][ T5250] netdevsim netdevsim9 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 164.975430][T12740] syzkaller1: entered promiscuous mode [ 164.981007][T12740] syzkaller1: entered allmulticast mode [ 165.127894][T12755] netlink: 'syz.1.3610': attribute type 1 has an invalid length. [ 165.153340][T12755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.215968][T12755] bond1: (slave gretap1): making interface the new active one [ 165.245068][T12755] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 165.423807][T12770] smc: net device bond0 applied user defined pnetid SYZ0 [ 165.449547][T12770] smc: net device bond0 erased user defined pnetid SYZ0 [ 165.511988][T12780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12780 comm=syz.1.3622 [ 165.533303][T12784] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3623'. [ 165.613889][T12794] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 165.620483][T12794] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 165.628067][T12794] vhci_hcd vhci_hcd.0: Device attached [ 165.636777][T12794] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 165.643327][T12794] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 165.651110][T12794] vhci_hcd vhci_hcd.0: Device attached [ 165.674945][T12794] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 165.681536][T12794] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 165.689153][T12794] vhci_hcd vhci_hcd.0: Device attached [ 165.702221][T12806] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12806 comm=syz.4.3632 [ 165.704316][T12794] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 165.714981][T12806] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12806 comm=syz.4.3632 [ 165.743543][T12794] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 165.750202][T12794] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 165.757933][T12794] vhci_hcd vhci_hcd.0: Device attached [ 165.768800][T12794] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 165.798627][T12794] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(15) [ 165.805309][T12794] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 165.813020][T12794] vhci_hcd vhci_hcd.0: Device attached [ 165.822954][T12819] vhci_hcd: connection closed [ 165.823122][ T5250] vhci_hcd: stop threads [ 165.823091][T12809] vhci_hcd: connection closed [ 165.827895][ T5250] vhci_hcd: release socket [ 165.832424][T12796] vhci_hcd: connection closed [ 165.837053][ T5250] vhci_hcd: disconnect device [ 165.837137][T12801] vhci_hcd: connection closed [ 165.841675][T12799] vhci_hcd: connection closed [ 165.865714][ T5250] vhci_hcd: stop threads [ 165.874198][T12294] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 165.874781][ T5250] vhci_hcd: release socket [ 165.874796][ T5250] vhci_hcd: disconnect device [ 165.891909][ T5250] vhci_hcd: stop threads [ 165.896316][ T5250] vhci_hcd: release socket [ 165.900794][ T5250] vhci_hcd: disconnect device [ 165.910161][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 165.910175][ T29] audit: type=1400 audit(165.889:6083): avc: denied { append } for pid=12826 comm="syz.1.3639" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 165.920613][ T5250] vhci_hcd: stop threads [ 165.943927][ T5250] vhci_hcd: release socket [ 165.948430][ T5250] vhci_hcd: disconnect device [ 165.953613][ T5250] vhci_hcd: stop threads [ 165.957980][ T5250] vhci_hcd: release socket [ 165.962410][ T5250] vhci_hcd: disconnect device [ 166.035594][ T29] audit: type=1400 audit(166.019:6084): avc: denied { watch watch_reads } for pid=12836 comm="syz.4.3645" path="/26/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 166.082522][ T29] audit: type=1400 audit(166.019:6085): avc: denied { mac_admin } for pid=12836 comm="syz.4.3645" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 166.103211][ T29] audit: type=1400 audit(166.019:6086): avc: denied { relabelto } for pid=12836 comm="syz.4.3645" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 166.128853][ T29] audit: type=1400 audit(166.019:6087): avc: denied { associate } for pid=12836 comm="syz.4.3645" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 166.207675][ T29] audit: type=1400 audit(166.069:6088): avc: denied { unmount } for pid=12190 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 166.227389][ T29] audit: type=1400 audit(166.159:6089): avc: denied { ioctl } for pid=12839 comm="+}[@" path="socket:[37826]" dev="sockfs" ino=37826 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.384647][T12852] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12852 comm=syz.2.3650 [ 166.397394][T12852] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12852 comm=syz.2.3650 [ 166.669630][T12867] @: renamed from hsr0 (while UP) [ 166.729334][ T29] audit: type=1400 audit(166.709:6090): avc: denied { mount } for pid=12871 comm="syz.1.3659" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 166.846425][ T29] audit: type=1326 audit(166.829:6091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12877 comm="syz.2.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060eabefc9 code=0x7ffc0000 [ 166.847394][ T29] audit: type=1326 audit(166.829:6092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12877 comm="syz.2.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060eabefc9 code=0x7ffc0000 [ 166.922727][T12881] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12881 comm=syz.1.3663 [ 166.922800][T12881] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12881 comm=syz.1.3663 [ 167.185127][T12897] SELinux: Context system_u:object_r:audit_spool_t:s0 is not valid (left unmapped). [ 167.394662][T12911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3678'. [ 167.409030][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3677'. [ 167.593078][T12925] syzkaller1: entered promiscuous mode [ 167.598667][T12925] syzkaller1: entered allmulticast mode [ 167.636106][T12929] netlink: 'syz.8.3686': attribute type 1 has an invalid length. [ 167.662829][T12929] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.703023][T12935] bond2: (slave gretap1): making interface the new active one [ 167.711840][T12935] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 167.737885][T12937] pimreg: entered allmulticast mode [ 167.753159][T12937] pimreg: left allmulticast mode [ 167.867707][T12945] tipc: Enabled bearer , priority 0 [ 167.889899][T12945] tipc: Disabling bearer [ 168.193608][T12968] netlink: 'syz.2.3701': attribute type 3 has an invalid length. [ 168.276132][T12971] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3703'. [ 169.452170][ T5248] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 169.462179][ T5248] netdevsim netdevsim9 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 169.563607][ T5248] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 169.573651][ T5248] netdevsim netdevsim9 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 169.669414][ T5248] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 169.679344][ T5248] netdevsim netdevsim9 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 169.736851][ T5248] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 169.746866][ T5248] netdevsim netdevsim9 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 169.808619][T13040] netlink: 'syz.4.3731': attribute type 1 has an invalid length. [ 169.850453][T13040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.866661][T13025] lo speed is unknown, defaulting to 1000 [ 169.872880][ T5248] bridge_slave_1: left allmulticast mode [ 169.878670][ T5248] bridge_slave_1: left promiscuous mode [ 169.884408][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.897727][ T5248] bridge_slave_0: left allmulticast mode [ 169.903429][ T5248] bridge_slave_0: left promiscuous mode [ 169.909165][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.910165][T12975] syz.1.3704 (12975) used greatest stack depth: 6136 bytes left [ 170.025065][ T5248] bond1 (unregistering): (slave geneve2): Releasing active interface [ 170.078296][T13054] ref_ctr_offset mismatch. inode: 0x437 offset: 0x0 ref_ctr_offset(old): 0x72 ref_ctr_offset(new): 0x0 [ 170.119455][ T5248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.130679][ T5248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.140670][ T5248] bond0 (unregistering): Released all slaves [ 170.150228][ T5248] bond1 (unregistering): Released all slaves [ 170.167534][T13040] bond1: (slave gretap1): making interface the new active one [ 170.176157][T13040] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 170.396099][ T5248] hsr_slave_0: left promiscuous mode [ 170.409502][ T5248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.417096][ T5248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.428229][ T5248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.435844][ T5248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.451944][ T5248] veth1_macvtap: left promiscuous mode [ 170.464833][ T5248] veth0_macvtap: left promiscuous mode [ 170.470418][ T5248] veth1_vlan: left promiscuous mode [ 170.484891][ T5248] veth0_vlan: left promiscuous mode [ 170.487076][T13088] loop7: detected capacity change from 0 to 16384 [ 170.633496][ T5248] team0 (unregistering): Port device team_slave_1 removed [ 170.644485][ T5248] team0 (unregistering): Port device team_slave_0 removed [ 170.788271][T13025] chnl_net:caif_netlink_parms(): no params data found [ 170.899249][T13025] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.906381][T13025] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.913598][T13025] bridge_slave_0: entered allmulticast mode [ 170.920352][T13025] bridge_slave_0: entered promiscuous mode [ 170.928110][T13025] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.935406][T13025] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.942636][T13025] bridge_slave_1: entered allmulticast mode [ 170.950511][T13025] bridge_slave_1: entered promiscuous mode [ 170.964858][T12294] usb 5-1: enqueue for inactive port 0 [ 170.980589][T12294] usb 5-1: enqueue for inactive port 0 [ 170.982952][T13025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.044420][ T5248] IPVS: stop unused estimator thread 0... [ 171.059364][T13025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.064818][T12294] vhci_hcd: vhci_device speed not set [ 171.089368][T13025] team0: Port device team_slave_0 added [ 171.102322][T13025] team0: Port device team_slave_1 added [ 171.146110][T13025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.153203][T13025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.179218][T13025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.232783][T13025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.235589][T13117] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3764'. [ 171.239839][T13025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.275424][T13025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.385416][T13025] hsr_slave_0: entered promiscuous mode [ 171.392752][T13025] hsr_slave_1: entered promiscuous mode [ 171.412045][T13115] lo speed is unknown, defaulting to 1000 [ 171.740391][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 171.740409][ T29] audit: type=1400 audit(171.719:6152): avc: denied { connect } for pid=13135 comm="syz.1.3773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 171.756072][T13025] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 171.795490][T13025] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 171.838990][T13025] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 171.843522][ T29] audit: type=1400 audit(171.819:6153): avc: denied { create } for pid=13143 comm="syz.1.3777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.866643][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3777'. [ 171.867310][T13025] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 171.882507][ T29] audit: type=1400 audit(171.849:6154): avc: denied { ioctl } for pid=13143 comm="syz.1.3777" path="socket:[39750]" dev="sockfs" ino=39750 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.912077][T13146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3778'. [ 171.935389][T13144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.955790][T13144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.040264][T13025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.054059][T13025] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.064052][ T5020] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.071189][ T5020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.099965][ T5020] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.107085][ T5020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.139516][T13025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.149937][T13025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.287356][T13025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.318105][T13168] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 172.528219][T13025] veth0_vlan: entered promiscuous mode [ 172.568191][T13025] veth1_vlan: entered promiscuous mode [ 172.641087][T13025] veth0_macvtap: entered promiscuous mode [ 172.665494][T13025] veth1_macvtap: entered promiscuous mode [ 172.704528][T13025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.738507][T13025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.767466][ T5250] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.786714][ T5250] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.829130][ T5250] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.849941][ T29] audit: type=1400 audit(172.829:6155): avc: denied { add_name } for pid=13025 comm="syz-executor" name="syz9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 172.874305][ T29] audit: type=1400 audit(172.829:6156): avc: denied { create } for pid=13025 comm="syz-executor" name="syz9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 172.880686][T13194] pimreg: entered allmulticast mode [ 172.894429][ T29] audit: type=1400 audit(172.829:6157): avc: denied { associate } for pid=13025 comm="syz-executor" name="syz9" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 173.106871][T13202] pimreg: left allmulticast mode [ 173.115176][ T5248] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.247965][ T29] audit: type=1400 audit(173.229:6158): avc: denied { read } for pid=13206 comm="syz.8.3795" path="socket:[40805]" dev="sockfs" ino=40805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 173.317345][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3797'. [ 173.369955][T13220] syzkaller0: entered allmulticast mode [ 173.382690][T13220] syzkaller0: entered promiscuous mode [ 173.398861][T13220] syzkaller0 (unregistering): left allmulticast mode [ 173.405733][T13220] syzkaller0 (unregistering): left promiscuous mode [ 173.647893][ T29] audit: type=1326 audit(173.629:6159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13233 comm="syz.2.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060eabefc9 code=0x7ffc0000 [ 173.701422][ T29] audit: type=1326 audit(173.629:6160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13233 comm="syz.2.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f060eabefc9 code=0x7ffc0000 [ 173.724554][ T29] audit: type=1326 audit(173.629:6161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13233 comm="syz.2.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060eabefc9 code=0x7ffc0000 [ 173.751673][T13238] loop2: detected capacity change from 0 to 256 [ 173.758624][T13238] FAT-fs (loop2): bogus number of FAT sectors [ 173.764914][T13238] FAT-fs (loop2): Can't find a valid FAT filesystem [ 173.819011][T13236] smc: net device hsr0 applied user defined pnetid SYZ2 [ 173.835975][T13236] smc: net device hsr0 erased user defined pnetid SYZ2 [ 174.277532][T13266] loop2: detected capacity change from 0 to 8192 [ 174.338230][T13275] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3825'. [ 174.362507][T13279] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3826'. [ 174.549584][T13290] loop2: detected capacity change from 0 to 512 [ 174.580930][T13290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.668643][T12112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.707749][T13299] geneve2: entered promiscuous mode [ 174.713019][T13299] geneve2: entered allmulticast mode [ 174.739633][T13301] IPv6: NLM_F_CREATE should be specified when creating new route [ 174.849359][T13305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3836'. [ 174.953545][T13310] SELinux: failed to load policy [ 175.171441][T13325] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3846'. [ 175.388962][T13347] loop8: detected capacity change from 0 to 1024 [ 175.409189][T13347] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.417910][T13347] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.437974][T13347] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.475551][T13357] IPv6: Can't replace route, no match found [ 175.501783][T10689] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.592625][T13367] bridge0: port 3(macsec1) entered blocking state [ 175.599191][T13367] bridge0: port 3(macsec1) entered disabled state [ 175.635441][T13367] macsec1: entered allmulticast mode [ 175.645489][T13367] macsec1: left allmulticast mode [ 175.774971][T13376] lo speed is unknown, defaulting to 1000 [ 176.239315][T13391] netem: change failed [ 176.371937][T13403] pimreg: entered allmulticast mode [ 176.425257][T13403] pimreg: left allmulticast mode [ 176.672000][T13438] ref_ctr_offset mismatch. inode: 0x9e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300001118 [ 177.235799][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 177.235814][ T29] audit: type=1326 audit(177.219:6203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13459 comm="syz.1.3906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 177.264974][ T29] audit: type=1326 audit(177.219:6204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13459 comm="syz.1.3906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 177.291115][ T29] audit: type=1326 audit(177.229:6205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13459 comm="syz.1.3906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 177.314192][ T29] audit: type=1326 audit(177.229:6206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13459 comm="syz.1.3906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 177.337242][ T29] audit: type=1326 audit(177.229:6207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13459 comm="syz.1.3906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 177.360278][ T29] audit: type=1326 audit(177.229:6208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13459 comm="syz.1.3906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 177.383274][ T29] audit: type=1326 audit(177.229:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13459 comm="syz.1.3906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 177.406345][ T29] audit: type=1326 audit(177.229:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13459 comm="syz.1.3906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 177.429339][ T29] audit: type=1326 audit(177.229:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13459 comm="syz.1.3906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 177.452252][ T29] audit: type=1326 audit(177.249:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13459 comm="syz.1.3906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 178.069739][T13497] loop9: detected capacity change from 0 to 1024 [ 178.085014][T13497] EXT4-fs: Ignoring removed bh option [ 178.088089][T13499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3923'. [ 178.090811][T13497] EXT4-fs: inline encryption not supported [ 178.099581][T13499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3923'. [ 178.115762][T13497] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 178.138259][T13497] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 178.153635][T13497] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.3922: lblock 2 mapped to illegal pblock 2 (length 1) [ 178.167938][T13497] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.3922: lblock 0 mapped to illegal pblock 48 (length 1) [ 178.182427][T13497] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.3922: Failed to acquire dquot type 0 [ 178.194930][T13497] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 178.210950][T13497] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.3922: mark_inode_dirty error [ 178.222696][T13497] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 178.233255][T13497] EXT4-fs (loop9): 1 orphan inode deleted [ 178.240419][T13497] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.289956][ C1] sd 0:0:1:0: [sda] tag#7012 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 178.300447][ C1] sd 0:0:1:0: [sda] tag#7012 CDB: Write(6) 0a 00 00 00 06 00 00 00 02 00 00 00 [ 178.325124][ T37] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 178.369447][ T37] EXT4-fs error (device loop9): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0 [ 178.405302][T13025] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.418379][T13512] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 178.424887][T13025] EXT4-fs error (device loop9): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 178.439848][T13025] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 178.476876][T13025] EXT4-fs error (device loop9): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 178.851344][T13547] netlink: 'syz.4.3945': attribute type 4 has an invalid length. [ 178.950784][T13555] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13555 comm=syz.9.3948 [ 178.963500][T13555] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13555 comm=syz.9.3948 [ 179.648909][T13614] lo speed is unknown, defaulting to 1000 [ 179.742767][T13624] loop9: detected capacity change from 0 to 7 [ 179.762390][T13624] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.794439][T13624] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.802550][T13624] loop9: unable to read partition table [ 179.814200][T13624] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 179.814200][T13624] ) failed (rc=-5) [ 180.099480][T13651] IPv6: NLM_F_CREATE should be specified when creating new route [ 180.148040][T13657] loop4: detected capacity change from 0 to 2048 [ 180.154925][T13657] msdos: Unknown parameter 'GPL' [ 180.195742][T13660] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 180.278464][T13667] lo speed is unknown, defaulting to 1000 [ 180.381765][T13676] netlink: 'syz.2.3999': attribute type 6 has an invalid length. [ 180.699926][T13705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4013'. [ 180.718838][T13705] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4013'. [ 180.841642][T13725] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4023'. [ 180.959956][T13735] netlink: 'syz.1.4028': attribute type 6 has an invalid length. [ 181.086250][T13729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.099415][T13729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.740251][T13791] sd 0:0:1:0: device reset [ 181.820270][T13799] loop9: detected capacity change from 0 to 7 [ 181.829292][T13799] Buffer I/O error on dev loop9, logical block 0, async page read [ 181.837374][T13799] Buffer I/O error on dev loop9, logical block 0, async page read [ 181.845507][T13799] loop9: unable to read partition table [ 181.853758][T13799] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 181.853758][T13799] ) failed (rc=-5) [ 181.907432][T13805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4051'. [ 181.966546][T13817] sd 0:0:1:0: device reset [ 182.124791][ T5741] Bluetooth: hci0: command 0x1003 tx timeout [ 182.131003][ T3699] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 182.138309][T13809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.163757][T13809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.265762][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 182.265781][ T29] audit: type=1326 audit(182.249:6392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.8.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf36fefc9 code=0x7ffc0000 [ 182.322718][ T29] audit: type=1326 audit(182.249:6393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.8.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf36fefc9 code=0x7ffc0000 [ 182.345754][ T29] audit: type=1326 audit(182.249:6394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.8.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdf36fefc9 code=0x7ffc0000 [ 182.369100][ T29] audit: type=1326 audit(182.249:6395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.8.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf36fefc9 code=0x7ffc0000 [ 182.392132][ T29] audit: type=1326 audit(182.249:6396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.8.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf36fefc9 code=0x7ffc0000 [ 182.415152][ T29] audit: type=1326 audit(182.249:6397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.8.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efdf36fefc9 code=0x7ffc0000 [ 182.438166][ T29] audit: type=1326 audit(182.249:6398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.8.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf36fefc9 code=0x7ffc0000 [ 182.461283][ T29] audit: type=1326 audit(182.249:6399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.8.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7efdf36fefc9 code=0x7ffc0000 [ 182.484181][ T29] audit: type=1326 audit(182.279:6400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.8.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf36fefc9 code=0x7ffc0000 [ 182.507176][ T29] audit: type=1326 audit(182.279:6401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.8.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf36fefc9 code=0x7ffc0000 [ 182.768726][T13884] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4085'. [ 182.871482][T13891] loop4: detected capacity change from 0 to 764 [ 182.881390][T13891] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 183.396545][T13912] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4098'. [ 184.298725][T13990] SELinux: Context @ is not valid (left unmapped). [ 184.315414][T13994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.370454][T13997] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4114'. [ 184.443415][T13999] loop4: detected capacity change from 0 to 8192 [ 184.950688][T14023] pim6reg1: entered promiscuous mode [ 184.956117][T14023] pim6reg1: entered allmulticast mode [ 185.008877][T14026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.130306][T14035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4131'. [ 185.139344][T14035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4131'. [ 185.263215][T14044] netlink: 'syz.2.4135': attribute type 3 has an invalid length. [ 185.317726][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4137'. [ 185.340445][T14052] netlink: 'syz.1.4139': attribute type 10 has an invalid length. [ 185.348592][T14052] dummy0: entered promiscuous mode [ 185.355169][T14052] bond0: (slave dummy0): Releasing backup interface [ 185.368310][T14052] bridge0: port 4(dummy0) entered blocking state [ 185.374869][T14052] bridge0: port 4(dummy0) entered disabled state [ 185.668526][T14096] SELinux: Context is not valid (left unmapped). [ 185.729778][T14106] loop4: detected capacity change from 0 to 128 [ 185.742967][T14106] syz.4.4164: attempt to access beyond end of device [ 185.742967][T14106] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 185.767761][T14106] syz.4.4164: attempt to access beyond end of device [ 185.767761][T14106] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 185.781623][T14106] syz.4.4164: attempt to access beyond end of device [ 185.781623][T14106] loop4: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 185.797461][T14106] syz.4.4164: attempt to access beyond end of device [ 185.797461][T14106] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 185.811632][T14106] syz.4.4164: attempt to access beyond end of device [ 185.811632][T14106] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 185.828097][T14106] syz.4.4164: attempt to access beyond end of device [ 185.828097][T14106] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 185.841965][T14106] syz.4.4164: attempt to access beyond end of device [ 185.841965][T14106] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 185.855993][T14106] syz.4.4164: attempt to access beyond end of device [ 185.855993][T14106] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 185.869949][T14106] syz.4.4164: attempt to access beyond end of device [ 185.869949][T14106] loop4: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 185.888927][T14113] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 185.935751][T14119] __nla_validate_parse: 1 callbacks suppressed [ 185.935766][T14119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4170'. [ 185.970468][T14124] bridge0: entered promiscuous mode [ 185.981286][T14124] bridge0: left promiscuous mode [ 186.300259][T14181] lo speed is unknown, defaulting to 1000 [ 186.384512][T14183] siw: device registration error -23 [ 186.845643][T14244] vhci_hcd: invalid port number 255 [ 186.850933][T14244] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 186.947676][T14252] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.958160][T14252] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.997868][T14252] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.008339][T14252] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.077914][T14252] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.088382][T14252] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.150465][T14252] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.160912][T14252] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.241452][ T5225] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.250644][ T5225] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.284323][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 187.284341][ T29] audit: type=1326 audit(187.249:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14263 comm="syz.2.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f060eab5e67 code=0x7ffc0000 [ 187.286876][ T5225] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.290639][ T29] audit: type=1326 audit(187.249:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14263 comm="syz.2.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f060ea5b099 code=0x7ffc0000 [ 187.313598][ T5225] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.321687][ T29] audit: type=1326 audit(187.259:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14263 comm="syz.2.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f060eabefc9 code=0x7ffc0000 [ 187.321720][ T29] audit: type=1326 audit(187.259:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14263 comm="syz.2.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f060eab5e67 code=0x7ffc0000 [ 187.321747][ T29] audit: type=1326 audit(187.259:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14263 comm="syz.2.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f060ea5b099 code=0x7ffc0000 [ 187.421200][ T29] audit: type=1326 audit(187.259:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14263 comm="syz.2.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f060eabefc9 code=0x7ffc0000 [ 187.454747][ T5020] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.463075][ T5020] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.494744][ T5020] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.502969][ T5020] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.532537][ T29] audit: type=1326 audit(187.409:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14274 comm="syz.8.4244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf36fefc9 code=0x7ffc0000 [ 187.555598][ T29] audit: type=1326 audit(187.409:6520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14274 comm="syz.8.4244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf36fefc9 code=0x7ffc0000 [ 187.578678][ T29] audit: type=1326 audit(187.409:6521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14274 comm="syz.8.4244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efdf36fefc9 code=0x7ffc0000 [ 187.601572][ T29] audit: type=1326 audit(187.409:6522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14274 comm="syz.8.4244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf36fefc9 code=0x7ffc0000 [ 187.625655][T14277] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4246'. [ 188.019255][T14294] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4253'. [ 188.150215][T14303] SELinux: ebitmap: truncated map [ 188.163583][T14303] SELinux: failed to load policy [ 188.243963][T14309] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 188.252230][T14309] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 188.575236][T14346] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4278'. [ 188.584254][T14346] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4278'. [ 188.713183][T14367] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4289'. [ 188.839741][T14381] xt_hashlimit: max too large, truncated to 1048576 [ 188.848570][T14381] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.094394][T14406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4300'. [ 189.520903][T14454] xt_hashlimit: max too large, truncated to 1048576 [ 189.538629][T14454] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.876968][T14496] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.927010][T14496] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.992939][T14496] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.060638][T14507] SELinux: ebitmap: truncated map [ 190.066814][T14507] SELinux: failed to load policy [ 190.110936][T14496] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.144659][T14516] loop8: detected capacity change from 0 to 128 [ 190.160782][T14516] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 190.202040][T14516] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.221659][ T5262] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.241195][T14522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14522 comm=syz.4.4354 [ 190.254762][ T5262] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.306091][ T5261] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.333633][ T5239] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.352548][T10689] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 16: comm syz-executor: path /321/file0/lost+fond: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=1024 fake=0 [ 190.399277][T10689] EXT4-fs error (device loop8): ext4_empty_dir:3120: inode #11: block 16: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11264, inode=3, rec_len=0, size=1024 fake=0 [ 190.449254][T10689] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 16: comm syz-executor: path /321/file0/lost+fond: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=1024 fake=0 [ 190.501380][T10689] EXT4-fs error (device loop8): ext4_empty_dir:3120: inode #11: block 16: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11264, inode=3, rec_len=0, size=1024 fake=0 [ 190.558036][T10689] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 16: comm syz-executor: path /321/file0/lost+fond: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=1024 fake=0 [ 190.580735][T10689] EXT4-fs error (device loop8): ext4_empty_dir:3120: inode #11: block 16: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11264, inode=3, rec_len=0, size=1024 fake=0 [ 190.601623][T10689] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 16: comm syz-executor: path /321/file0/lost+fond: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=1024 fake=0 [ 190.627104][T10689] EXT4-fs error (device loop8): ext4_empty_dir:3120: inode #11: block 16: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11264, inode=3, rec_len=0, size=1024 fake=0 [ 190.648541][T10689] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 16: comm syz-executor: path /321/file0/lost+fond: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=1024 fake=0 [ 190.671436][T10689] EXT4-fs error (device loop8): ext4_empty_dir:3120: inode #11: block 16: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11264, inode=3, rec_len=0, size=1024 fake=0 [ 190.754160][T14535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4360'. [ 190.924428][T11355] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.131171][ T5225] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.141159][ T5225] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.216612][ T5225] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.226537][ T5225] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.308593][ T5225] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.318423][ T5225] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.372004][ T5225] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.372091][ T5225] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.494914][ T5225] bridge_slave_1: left allmulticast mode [ 191.500606][ T5225] bridge_slave_1: left promiscuous mode [ 191.506406][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.516309][ T5225] bridge_slave_0: left allmulticast mode [ 191.521989][ T5225] bridge_slave_0: left promiscuous mode [ 191.527690][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.592329][ T5225] bond2 (unregistering): (slave gretap1): Releasing active interface [ 191.638989][ T5225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.649958][ T5225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.660701][ T5225] bond0 (unregistering): Released all slaves [ 191.669851][ T5225] bond1 (unregistering): Released all slaves [ 191.679289][ T5225] bond2 (unregistering): Released all slaves [ 191.688081][T12330] syz0: Port: 1 Link DOWN [ 191.731972][ T5225] tipc: Left network mode [ 191.752074][T14565] lo speed is unknown, defaulting to 1000 [ 191.801251][ T5225] hsr_slave_0: left promiscuous mode [ 191.807280][ T5225] hsr_slave_1: left promiscuous mode [ 191.812995][ T5225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.820475][ T5225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.828288][ T5225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.835834][ T5225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.846264][ T5225] veth1_macvtap: left promiscuous mode [ 191.851790][ T5225] veth0_macvtap: left promiscuous mode [ 191.857425][ T5225] veth1_vlan: left promiscuous mode [ 191.862649][ T5225] veth0_vlan: left promiscuous mode [ 191.966578][T14586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.975426][T14586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.019764][ T5218] smc: removing ib device syz0 [ 192.133281][T14565] chnl_net:caif_netlink_parms(): no params data found [ 192.169396][T14594] netlink: 'syz.4.4382': attribute type 4 has an invalid length. [ 192.191141][T14594] netlink: 'syz.4.4382': attribute type 4 has an invalid length. [ 192.229075][T14565] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.236508][T14565] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.245216][T14565] bridge_slave_0: entered allmulticast mode [ 192.251658][T14565] bridge_slave_0: entered promiscuous mode [ 192.258669][T14565] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.265750][T14565] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.273050][T14565] bridge_slave_1: entered allmulticast mode [ 192.279679][T14565] bridge_slave_1: entered promiscuous mode [ 192.302660][T14565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.313452][T14565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.333726][T14565] team0: Port device team_slave_0 added [ 192.340457][T14565] team0: Port device team_slave_1 added [ 192.358054][T14565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.365111][T14565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.391201][T14565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.402722][T14565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.409951][T14565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.436213][T14565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.467358][T14565] hsr_slave_0: entered promiscuous mode [ 192.473529][T14565] hsr_slave_1: entered promiscuous mode [ 192.480203][T14565] debugfs: 'hsr0' already exists in 'hsr' [ 192.486028][T14565] Cannot create hsr debugfs directory [ 192.619969][T14618] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4390'. [ 192.992728][ T3419] IPVS: starting estimator thread 0... [ 193.046081][T14643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4399'. [ 193.055183][T14643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4399'. [ 193.077220][T14565] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 193.088016][T14643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4399'. [ 193.097059][T14643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4399'. [ 193.097337][T14640] IPVS: using max 2352 ests per chain, 117600 per kthread [ 193.113423][T14565] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 193.125043][T14565] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 193.149569][T14565] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 193.185027][T14565] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.192154][T14565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.199600][T14565] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.206744][T14565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.228920][T14658] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 193.243217][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 193.243233][ T29] audit: type=1326 audit(193.219:6765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.1.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 193.243585][T14565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.249545][ T29] audit: type=1326 audit(193.219:6766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.1.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 193.273076][ T29] audit: type=1326 audit(193.239:6767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.1.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 193.325407][ T29] audit: type=1326 audit(193.239:6768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.1.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 193.326275][T14658] SELinux: failed to load policy [ 193.348422][ T29] audit: type=1326 audit(193.239:6769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.1.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 193.380105][ T29] audit: type=1326 audit(193.369:6770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.1.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 193.403300][ T29] audit: type=1326 audit(193.369:6771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.1.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 193.426240][ T29] audit: type=1326 audit(193.369:6772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.1.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 193.449272][ T29] audit: type=1326 audit(193.369:6773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.1.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 193.454346][T14664] loop9: detected capacity change from 0 to 512 [ 193.472208][ T29] audit: type=1326 audit(193.369:6774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.1.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 193.501950][ T5265] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.515472][ T5265] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.537375][T14664] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.552053][T14565] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.593498][ T5261] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.600624][ T5261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.611630][T13025] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.626650][ T5261] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.633746][ T5261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.773021][T14691] loop4: detected capacity change from 0 to 512 [ 193.773248][T14565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.808285][T14691] EXT4-fs (loop4): orphan cleanup on readonly fs [ 193.819303][T14691] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.4417: EA inode hash validation failed [ 193.832575][T14691] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 193.846817][T14691] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.4417: corrupted inode contents [ 193.865091][T14691] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.4417: mark_inode_dirty error [ 193.879682][T14691] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.4417: corrupted inode contents [ 193.903525][T14691] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.4417: mark_inode_dirty error [ 193.918716][T14691] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.4417: mark inode dirty (error -117) [ 193.935837][T14691] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 193.949889][T14691] EXT4-fs (loop4): 1 orphan inode deleted [ 193.965536][T14691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 194.005970][T12190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.008758][T14565] veth0_vlan: entered promiscuous mode [ 194.025402][T14565] veth1_vlan: entered promiscuous mode [ 194.066564][T14565] veth0_macvtap: entered promiscuous mode [ 194.075592][T14565] veth1_macvtap: entered promiscuous mode [ 194.101601][T14565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.113258][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4424'. [ 194.127636][T14565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.146493][T14719] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4424'. [ 194.150105][ T5265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.181443][ T5265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.214067][ T5265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.232274][ T5265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.336924][T14731] loop3: detected capacity change from 0 to 8192 [ 194.399524][T14740] netlink: 'syz.2.4432': attribute type 4 has an invalid length. [ 194.437476][T14740] netlink: 'syz.2.4432': attribute type 4 has an invalid length. [ 194.475941][T14740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4432'. [ 194.602334][T14740] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.609587][T14740] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.779632][T14740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.818246][T14740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.014923][ T3387] syz1: Port: 1 Link DOWN [ 195.014967][ T5248] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.063354][ T5248] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.103484][ T5248] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.138168][ T5248] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.217064][T14781] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4458'. [ 195.226096][T14781] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4458'. [ 196.223067][T14821] syzkaller1: entered promiscuous mode [ 196.228743][T14821] syzkaller1: entered allmulticast mode [ 196.469776][T14835] delete_channel: no stack [ 196.547150][T14857] program syz.4.4481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.560808][T14857] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 196.599238][T14863] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 196.701279][T14871] loop3: detected capacity change from 0 to 128 [ 196.724436][T14871] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.842617][T14565] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.898857][T14880] pim6reg: entered allmulticast mode [ 196.916453][T14880] pim6reg: left allmulticast mode [ 197.203689][ T9] lo speed is unknown, defaulting to 1000 [ 197.481632][T14952] rdma_rxe: rxe_newlink: failed to add bond0 [ 197.858957][T14974] No such timeout policy "syz1" [ 198.267512][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 198.267532][ T29] audit: type=1326 audit(198.219:7007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14961 comm="syz.1.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72c080b099 code=0x7ffc0000 [ 198.299658][T14990] loop9: detected capacity change from 0 to 128 [ 198.336734][ T29] audit: type=1326 audit(198.249:7008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14961 comm="syz.1.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f72c0865e67 code=0x7ffc0000 [ 198.359735][ T29] audit: type=1326 audit(198.249:7009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14961 comm="syz.1.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72c080b099 code=0x7ffc0000 [ 198.382620][ T29] audit: type=1326 audit(198.259:7010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14961 comm="syz.1.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 198.405443][ T29] audit: type=1326 audit(198.259:7011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14961 comm="syz.1.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f72c0865e67 code=0x7ffc0000 [ 198.425526][T14990] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.428344][ T29] audit: type=1326 audit(198.259:7012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14961 comm="syz.1.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72c080b099 code=0x7ffc0000 [ 198.463205][ T29] audit: type=1326 audit(198.259:7013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14961 comm="syz.1.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 198.486002][ T29] audit: type=1326 audit(198.279:7014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14961 comm="syz.1.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f72c0865e67 code=0x7ffc0000 [ 198.508843][ T29] audit: type=1326 audit(198.279:7015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14961 comm="syz.1.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72c080b099 code=0x7ffc0000 [ 198.531683][ T29] audit: type=1326 audit(198.289:7016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14961 comm="syz.1.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f72c086efc9 code=0x7ffc0000 [ 198.562182][T13025] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.707535][T15007] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 198.767046][T15020] x_tables: duplicate underflow at hook 2 [ 198.810481][T15027] tipc: Started in network mode [ 198.815462][T15027] tipc: Node identity b23ef8794961, cluster identity 4711 [ 198.822882][T15027] tipc: Enabled bearer , priority 0 [ 198.831121][T15027] tipc: Disabling bearer [ 198.881363][T15036] netlink: 'syz.3.4558': attribute type 10 has an invalid length. [ 198.889308][T15036] __nla_validate_parse: 4 callbacks suppressed [ 198.889326][T15036] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4558'. [ 198.904879][T15036] team0: entered promiscuous mode [ 198.909945][T15036] team_slave_0: entered promiscuous mode [ 198.915731][T15036] team_slave_1: entered promiscuous mode [ 198.922759][T15036] bridge0: port 3(team0) entered blocking state [ 198.930017][T15036] bridge0: port 3(team0) entered disabled state [ 198.936787][T15036] team0: entered allmulticast mode [ 198.941934][T15036] team_slave_0: entered allmulticast mode [ 198.947864][T15036] team_slave_1: entered allmulticast mode [ 198.956111][T15036] bridge0: port 3(team0) entered blocking state [ 198.962498][T15036] bridge0: port 3(team0) entered forwarding state [ 199.089021][T15049] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.153145][T15049] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.186813][T15066] pim6reg1: entered promiscuous mode [ 199.192163][T15066] pim6reg1: entered allmulticast mode [ 199.218470][T15049] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.279582][T15049] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.367422][ T4337] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.397275][ T4337] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.414881][ T4337] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.434373][ T4337] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.452624][T15082] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4574'. [ 199.593984][T15104] loop9: detected capacity change from 0 to 128 [ 199.662538][T15115] syz.9.4589: attempt to access beyond end of device [ 199.662538][T15115] loop9: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 199.685957][T15115] syz.9.4589: attempt to access beyond end of device [ 199.685957][T15115] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 199.699786][T15115] syz.9.4589: attempt to access beyond end of device [ 199.699786][T15115] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 199.714555][T15115] syz.9.4589: attempt to access beyond end of device [ 199.714555][T15115] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 199.728324][T15115] syz.9.4589: attempt to access beyond end of device [ 199.728324][T15115] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 199.744569][T15115] syz.9.4589: attempt to access beyond end of device [ 199.744569][T15115] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 199.759948][T15115] syz.9.4589: attempt to access beyond end of device [ 199.759948][T15115] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 199.774549][T15115] syz.9.4589: attempt to access beyond end of device [ 199.774549][T15115] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 199.788356][T15115] syz.9.4589: attempt to access beyond end of device [ 199.788356][T15115] loop9: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 199.802960][T15115] syz.9.4589: attempt to access beyond end of device [ 199.802960][T15115] loop9: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 200.094772][T15146] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4605'. [ 200.236997][T15167] loop3: detected capacity change from 0 to 512 [ 200.254567][T15167] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.4615: error while reading EA inode 32 err=-116 [ 200.276275][T15167] EXT4-fs (loop3): Remounting filesystem read-only [ 200.286662][T15167] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 200.299847][T15167] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 200.310924][T15167] EXT4-fs (loop3): 1 orphan inode deleted [ 200.317284][T15167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.330541][T15167] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.323701][T15207] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4630'. [ 201.334817][T15207] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4630'. [ 201.343973][T15207] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4630'. [ 201.394518][T15207] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4630'. [ 201.410988][T15207] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4630'. [ 201.420885][T15207] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4630'. [ 201.477747][T15207] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4630'. [ 201.657073][T15247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.681195][T15247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.824029][T15248] ================================================================== [ 201.832259][T15248] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 201.841249][T15248] [ 201.843602][T15248] read to 0xffff8881183e9b20 of 4 bytes by task 15250 on cpu 0: [ 201.851258][T15248] selinux_inode_permission+0x334/0x740 [ 201.856875][T15248] security_inode_permission+0x6d/0xb0 [ 201.862384][T15248] inode_permission+0x106/0x310 [ 201.867281][T15248] link_path_walk+0x162/0x900 [ 201.872090][T15248] path_openat+0x1de/0x2170 [ 201.876617][T15248] do_filp_open+0x109/0x230 [ 201.881145][T15248] io_openat2+0x272/0x390 [ 201.885505][T15248] io_openat+0x1b/0x30 [ 201.889615][T15248] __io_issue_sqe+0xfe/0x2e0 [ 201.894240][T15248] io_issue_sqe+0x56/0xa80 [ 201.898694][T15248] io_wq_submit_work+0x3f7/0x5f0 [ 201.903662][T15248] io_worker_handle_work+0x44e/0x9b0 [ 201.908993][T15248] io_wq_worker+0x22e/0x860 [ 201.913521][T15248] ret_from_fork+0x122/0x1b0 [ 201.918112][T15248] ret_from_fork_asm+0x1a/0x30 [ 201.922911][T15248] [ 201.925230][T15248] write to 0xffff8881183e9b20 of 4 bytes by task 15248 on cpu 1: [ 201.932941][T15248] selinux_inode_permission+0x3ac/0x740 [ 201.938492][T15248] security_inode_permission+0x6d/0xb0 [ 201.943954][T15248] inode_permission+0x106/0x310 [ 201.948858][T15248] link_path_walk+0x162/0x900 [ 201.953549][T15248] path_openat+0x1de/0x2170 [ 201.958059][T15248] do_filp_open+0x109/0x230 [ 201.962564][T15248] io_openat2+0x272/0x390 [ 201.966901][T15248] io_openat+0x1b/0x30 [ 201.970974][T15248] __io_issue_sqe+0xfe/0x2e0 [ 201.975588][T15248] io_issue_sqe+0x56/0xa80 [ 201.980045][T15248] io_submit_sqes+0x675/0x1060 [ 201.984827][T15248] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 201.990421][T15248] __x64_sys_io_uring_enter+0x78/0x90 [ 201.995816][T15248] x64_sys_call+0x2df0/0x3000 [ 202.000516][T15248] do_syscall_64+0xd2/0x200 [ 202.005019][T15248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.010911][T15248] [ 202.013232][T15248] value changed: 0x00000000 -> 0x00000001 [ 202.018957][T15248] [ 202.021285][T15248] Reported by Kernel Concurrency Sanitizer on: [ 202.027440][T15248] CPU: 1 UID: 0 PID: 15248 Comm: syz.3.4647 Not tainted syzkaller #0 PREEMPT(voluntary) [ 202.037262][T15248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 202.047318][T15248] ==================================================================