last executing test programs: 1m46.061826575s ago: executing program 0 (id=785): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.dequeue\x00', 0x275a, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) close(r4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x2004c014) 1m45.899212802s ago: executing program 0 (id=777): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000940), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 1m45.842647867s ago: executing program 0 (id=778): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000020, &(0x7f00000004c0)=0x3fa, 0x23) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) 1m45.741482467s ago: executing program 0 (id=779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xe, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0x10c, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1m45.516525099s ago: executing program 0 (id=793): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001200), 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") chdir(0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000)) fstat(r3, &(0x7f0000000340)) close(r2) 1m45.477551803s ago: executing program 0 (id=795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f0000000080)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x0, 0x28, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e) 1m30.37354079s ago: executing program 32 (id=795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f0000000080)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x0, 0x28, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e) 5.673509901s ago: executing program 1 (id=2050): r0 = gettid() signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x6d, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xc, 0xffff}, {0xa, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 5.657372593s ago: executing program 1 (id=2051): r0 = epoll_create(0x3ff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000002b7080000ffff7ee07b8af8ff00000000bfa20000000400000000000000ffffffb70300000800000000000085000000ffff000095000000df426c123138a1b000", @ANYBLOB="1800000003000000000000000000000018110000", @ANYRESDEC=r0, @ANYRES16=r0], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x80002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 5.572212451s ago: executing program 1 (id=2053): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0xfffffffe, r0}, 0x38) syz_pidfd_open(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) 5.506730527s ago: executing program 1 (id=2056): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) 5.445204753s ago: executing program 1 (id=2058): bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000007c0)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) dup3(r3, r1, 0x80000) 4.417990424s ago: executing program 1 (id=2063): setreuid(0xee00, 0x0) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x27) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") gettid() r1 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r1}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0185879, &(0x7f0000000040)={@desc={0x1, 0x0, @desc4}}) 2.769580127s ago: executing program 5 (id=2086): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r2, 0x1, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r3, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) 2.527100141s ago: executing program 3 (id=2089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.628203339s ago: executing program 3 (id=2092): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) socketpair(0x18, 0x0, 0x2, &(0x7f0000004080)) 1.020201219s ago: executing program 4 (id=2100): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x700, 0x7800, 0x3, 0x2, {{0xb, 0x4, 0x1, 0x2, 0x2c, 0x68, 0x0, 0x2, 0x29, 0x0, @private=0xa010102, @empty, {[@timestamp_addr={0x44, 0x14, 0xcf, 0x1, 0x3, [{@multicast2, 0x76c}, {@multicast2}]}, @noop]}}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 1.01045777s ago: executing program 5 (id=2101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f000000b240)=@base={0x1b, 0x3, 0x5, 0x40, 0x0, 0xffffffffffffffff, 0xe94f, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0xe64, 0x0, @loopback, 0xc4}, 0x1c) sendto$inet6(r2, 0x0, 0xffffff21, 0x24000881, &(0x7f0000000100)={0xa, 0x4e24, 0x5, @loopback, 0x7fffffff}, 0x1c) 999.547911ms ago: executing program 4 (id=2102): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x17) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000003e3ffff070000000001000005000000000000000001000000000000000000fef7e6c4e630a9e69e3c1ce25cdc1013c10708394e6474ed806824dd52e4c7b3233e437c7ade74f68a0ac6ba554c8f2e8165f610efcab33bfe14ef368335d8cffdd4585cfe076021f97d0c4f1a04819114407eae8205b43d2a471ab5522789b4b86b513544db81acc7a095a7524d66ae9bf1ad9d5cebddb5746e9d22afc8101b451b40132c35187b6652"], &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 986.077213ms ago: executing program 5 (id=2104): syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 966.275644ms ago: executing program 4 (id=2106): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xa) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r4, 0xfe, 0x2) getdents64(r4, 0x0, 0x4f) 956.548755ms ago: executing program 2 (id=2107): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) mlockall(0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000000)) 945.935876ms ago: executing program 4 (id=2108): r0 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r3, 0x627, 0xc1040000, 0x43, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000015}) 935.840147ms ago: executing program 2 (id=2109): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x11}, 0x64) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000240), 0x4) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r4}) 914.2289ms ago: executing program 2 (id=2110): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18050000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "2ea101ab090c0a75e57de560ecd9e9980fa794b73644cc05cd4d079809556e06", "777f7aef52eb9fa85d4b788af65280a2d857f95d446f1ee8049e26b9751e9b78", "4db01cdef103294f3acb7a7dfed1411e139c0e05d8c80fa87a21705be3111664", "2bd1f1e94cf5344e6dc0d0b93043a7096d44905b996ba7c55518eac44aaa3163", "e0f569720c553c0a577f8f99e81dd584822ed1f66d1024ba5d75fdc1591cab2d", "68fc0fe43b73999d43efb405", 0x2, 0xe, 0x4, 0x200, 0x7}}) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCGETSGCNT_IN6(r1, 0x89e1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xffc, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x34}, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xd, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 901.151721ms ago: executing program 4 (id=2111): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0xa, 0x300) socket$kcm(0x2, 0xa, 0x73) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$kcm(0x2, 0xa, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 884.487632ms ago: executing program 2 (id=2112): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpid() mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a00000015000300686173683a69702c706f72742c6e6574000000000bf22680e12c1767cb32561d370f37abc0beda13e8d15f70af4babd75a5ec7870df21b9d"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 736.839947ms ago: executing program 3 (id=2113): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r2, 0x1, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r3, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) 736.098497ms ago: executing program 5 (id=2114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x2}) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@restrict={0x3}]}, {0x0, [0x0, 0x5f, 0x2e, 0x5f]}}, &(0x7f0000000280)=""/18, 0x2a, 0x12, 0x1, 0x7fffffff, 0x10000, @value=r3}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendto$packet(r5, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x33, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 707.12401ms ago: executing program 4 (id=2115): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x642, &(0x7f0000000b40)="$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") umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 647.527746ms ago: executing program 5 (id=2116): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@remote, r5}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) dup2(r0, r4) 646.727646ms ago: executing program 3 (id=2117): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x18) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) pipe2(&(0x7f0000000040), 0x4000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1d457f0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0507000400"/21], 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 645.854666ms ago: executing program 2 (id=2118): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x2b08}}, 0x4000806) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000340)=@gcm_128={{0x303}, "5138dc07938076ff", "442f1eecb65fbc48d42a2ecc5cb5474a", "29b06cfb", "9db20548b0a3668d"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) 545.289316ms ago: executing program 3 (id=2119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000480)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab4", 0xffffffffffffffca, 0x840, 0x0, 0x0) r1 = dup2(r0, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) write(r1, &(0x7f0000000300)="4fa3", 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r0, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) 544.175126ms ago: executing program 3 (id=2120): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9ee6, 0x200000005}, 0x104022, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) waitid(0x0, r4, 0x0, 0x8, 0xfffffffffffffffd) waitid(0x1, r4, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) 486.870601ms ago: executing program 5 (id=2121): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x4, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f1", 0x1) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 0s ago: executing program 2 (id=2122): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, 0x0, 0x2004c000) sendmsg$nl_route(r2, 0x0, 0x0) open(0x0, 0x80100, 0x1) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) rename(0x0, 0x0) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) kernel console output (not intermixed with test programs): W filter on device bond4 [ 106.781735][ T3450] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 106.808156][ T6991] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 106.818185][ T6991] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 106.841130][ T3450] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 106.922035][ T176] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 106.930384][ T176] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 106.947512][ T176] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 106.955908][ T176] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 106.970887][ T7004] tipc: Enabled bearer , priority 0 [ 106.983069][ T176] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 106.991378][ T176] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 107.007423][ T7003] tipc: Resetting bearer [ 107.030167][ T7003] tipc: Disabling bearer [ 107.059560][ T176] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 107.067912][ T176] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 107.179778][ T6998] loop4: detected capacity change from 0 to 32768 [ 107.209796][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 107.209811][ T29] audit: type=1326 audit(2000000013.700:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7015 comm="syz.1.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 107.239478][ T29] audit: type=1326 audit(2000000013.700:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7015 comm="syz.1.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 107.299593][ T29] audit: type=1326 audit(2000000013.700:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7015 comm="syz.1.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 107.323193][ T29] audit: type=1326 audit(2000000013.760:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7015 comm="syz.1.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 107.346634][ T29] audit: type=1326 audit(2000000013.760:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7015 comm="syz.1.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 107.370286][ T29] audit: type=1326 audit(2000000013.760:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7015 comm="syz.1.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 107.394033][ T29] audit: type=1326 audit(2000000013.760:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7015 comm="syz.1.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 107.417677][ T29] audit: type=1326 audit(2000000013.760:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7015 comm="syz.1.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 107.428780][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1088'. [ 107.441143][ T29] audit: type=1326 audit(2000000013.760:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7015 comm="syz.1.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 107.473041][ T6998] loop4: p1 p3 < > [ 107.828919][ T29] audit: type=1326 audit(2000000014.320:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.2.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36299efc9 code=0x7ffc0000 [ 108.637266][ T7044] loop4: detected capacity change from 0 to 1024 [ 108.662407][ T7044] EXT4-fs: Ignoring removed orlov option [ 108.681138][ T7044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.731612][ T7050] tipc: Enabling of bearer rejected, failed to enable media [ 109.573498][ T7074] netlink: 'syz.5.1106': attribute type 4 has an invalid length. [ 109.619683][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.648210][ T7076] netlink: 'syz.5.1106': attribute type 4 has an invalid length. [ 109.948862][ T7088] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.070107][ T7088] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.088591][ T7092] tipc: Enabled bearer , priority 0 [ 110.096266][ T7091] tipc: Resetting bearer [ 110.117750][ T7091] tipc: Disabling bearer [ 110.135952][ T7088] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.177010][ T7098] __nla_validate_parse: 3 callbacks suppressed [ 110.177029][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1117'. [ 110.324288][ T7088] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.343933][ T31] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.369094][ T31] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.384899][ T31] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.393186][ T31] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.535684][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.556475][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.575059][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.604458][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.662529][ T7130] netlink: 'syz.4.1129': attribute type 83 has an invalid length. [ 112.018357][ T7150] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1132'. [ 112.028616][ T7150] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1132'. [ 112.223076][ T7154] pim6reg1: entered promiscuous mode [ 112.228481][ T7154] pim6reg1: entered allmulticast mode [ 112.596933][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 112.596950][ T29] audit: type=1400 audit(2000000019.090:4093): avc: denied { create } for pid=7162 comm="syz.4.1141" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 112.627666][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 112.654648][ T29] audit: type=1400 audit(2000000019.120:4094): avc: denied { read } for pid=7162 comm="syz.4.1141" name="file0" dev="tmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 112.677109][ T29] audit: type=1400 audit(2000000019.120:4095): avc: denied { open } for pid=7162 comm="syz.4.1141" path="/251/file0" dev="tmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 112.700065][ T29] audit: type=1400 audit(2000000019.120:4096): avc: denied { ioctl } for pid=7162 comm="syz.4.1141" path="/251/file0" dev="tmpfs" ino=1341 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 112.732699][ T29] audit: type=1326 audit(2000000019.170:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.3.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bcc3efc9 code=0x7ffc0000 [ 112.756369][ T29] audit: type=1326 audit(2000000019.170:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.3.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bcc3efc9 code=0x7ffc0000 [ 112.779820][ T29] audit: type=1326 audit(2000000019.180:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.3.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6bcc3efc9 code=0x7ffc0000 [ 112.803365][ T29] audit: type=1326 audit(2000000019.180:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.3.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bcc3efc9 code=0x7ffc0000 [ 112.826852][ T29] audit: type=1326 audit(2000000019.180:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.3.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bcc3efc9 code=0x7ffc0000 [ 112.828978][ T7164] loop5: detected capacity change from 0 to 1024 [ 112.850332][ T29] audit: type=1326 audit(2000000019.180:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.3.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6bcc3efc9 code=0x7ffc0000 [ 112.880698][ T7164] EXT4-fs: Ignoring removed orlov option [ 112.892985][ T7164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.339681][ T6654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.603163][ T7190] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1147'. [ 113.614420][ T7190] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1147'. [ 114.067384][ T7212] veth2: entered promiscuous mode [ 114.072488][ T7212] veth2: entered allmulticast mode [ 114.135636][ T7217] atomic_op ffff88811a899928 conn xmit_atomic 0000000000000000 [ 114.299308][ T7226] loop5: detected capacity change from 0 to 512 [ 114.451605][ T7226] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 114.482174][ T7226] EXT4-fs (loop5): orphan cleanup on readonly fs [ 114.493948][ T7226] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 114.510248][ T7226] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 114.517484][ T7226] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1159: bg 0: block 40: padding at end of block bitmap is not set [ 114.534833][ T7226] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 114.556889][ T7226] EXT4-fs (loop5): 1 truncate cleaned up [ 114.597594][ T7226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.642644][ T7226] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.904548][ T7244] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1166'. [ 114.914033][ T7244] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1166'. [ 115.352617][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'. [ 115.669151][ T7140] Bluetooth: hci0: Frame reassembly failed (-90) [ 115.682064][ T7262] Bluetooth: hci0: Frame reassembly failed (-84) [ 116.230743][ T7272] loop4: detected capacity change from 0 to 512 [ 116.255691][ T7272] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 116.263946][ T7272] EXT4-fs (loop4): orphan cleanup on readonly fs [ 116.270555][ T7272] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 116.285745][ T7272] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 116.292931][ T7272] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1175: bg 0: block 40: padding at end of block bitmap is not set [ 116.307432][ T7272] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 116.316497][ T7272] EXT4-fs (loop4): 1 truncate cleaned up [ 116.322846][ T7272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.335997][ T7272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.563392][ T7285] loop4: detected capacity change from 0 to 4096 [ 116.574087][ T7285] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 116.586281][ T7285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.702935][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.896466][ T7310] loop5: detected capacity change from 0 to 764 [ 116.906088][ T7310] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 116.963009][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1189'. [ 116.973769][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1189'. [ 117.134823][ T7325] netlink: 'syz.3.1194': attribute type 4 has an invalid length. [ 117.144605][ T7325] netlink: 'syz.3.1194': attribute type 4 has an invalid length. [ 117.333386][ T7339] loop5: detected capacity change from 0 to 128 [ 117.377007][ T7344] netlink: 'syz.1.1202': attribute type 1 has an invalid length. [ 117.384914][ T7344] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1202'. [ 117.470094][ T7350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1205'. [ 117.519720][ T7357] netlink: 'syz.5.1208': attribute type 2 has an invalid length. [ 117.528304][ T7357] netlink: 'syz.5.1208': attribute type 2 has an invalid length. [ 117.626988][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 117.627007][ T29] audit: type=1326 audit(2000000024.120:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.1.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 117.656740][ T3731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 117.664323][ T29] audit: type=1326 audit(2000000024.120:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.1.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 117.704006][ T29] audit: type=1326 audit(2000000024.190:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.1.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f108d4ad810 code=0x7ffc0000 [ 117.727710][ T29] audit: type=1326 audit(2000000024.190:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.1.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 117.751697][ T29] audit: type=1326 audit(2000000024.190:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.1.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 117.775468][ T29] audit: type=1326 audit(2000000024.220:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.1.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 117.798946][ T29] audit: type=1326 audit(2000000024.220:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.1.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 117.822540][ T29] audit: type=1326 audit(2000000024.220:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.1.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 117.846150][ T29] audit: type=1326 audit(2000000024.220:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.1.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 117.869880][ T29] audit: type=1400 audit(2000000024.290:4183): avc: denied { getopt } for pid=7363 comm="syz.2.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.915767][ T7371] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1212'. [ 118.079681][ T7380] netlink: 'syz.2.1216': attribute type 13 has an invalid length. [ 118.175342][ T7384] loop4: detected capacity change from 0 to 512 [ 118.184092][ T7384] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 118.197362][ T7384] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm wޣ: bg 0: block 104: invalid block bitmap [ 118.211207][ T7384] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 118.221443][ T7384] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm wޣ: invalid indirect mapped block 1 (level 1) [ 118.236205][ T7384] EXT4-fs (loop4): 1 truncate cleaned up [ 118.243757][ T7384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.390447][ T7135] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.417738][ T7135] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.458002][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.481504][ T7135] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.565959][ T7135] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.951526][ T7420] bridge2: entered allmulticast mode [ 118.958130][ T7418] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1231'. [ 119.038342][ T7429] veth0: entered promiscuous mode [ 119.055608][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1236'. [ 119.328644][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1234'. [ 119.355513][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1242'. [ 120.050199][ T7467] v: renamed from ip6_vti0 (while UP) [ 120.075588][ T7463] netlink: 'syz.3.1247': attribute type 2 has an invalid length. [ 120.345572][ T7481] netlink: 'syz.1.1253': attribute type 1 has an invalid length. [ 121.244650][ T7504] tipc: Started in network mode [ 121.249890][ T7504] tipc: Node identity ac14140f, cluster identity 4711 [ 121.277416][ T7504] tipc: New replicast peer: 255.255.255.83 [ 121.283384][ T7504] tipc: Enabled bearer , priority 10 [ 121.553614][ T7520] loop5: detected capacity change from 0 to 2048 [ 121.788278][ T7520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.809395][ T7520] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.074493][ T6654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.108990][ T7535] serio: Serial port ptm0 [ 122.275222][ T23] tipc: Node number set to 2886997007 [ 122.282697][ T7547] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=7547 comm=syz.1.1276 [ 122.316782][ T7547] __nla_validate_parse: 3 callbacks suppressed [ 122.316802][ T7547] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1276'. [ 122.448430][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1283'. [ 122.665599][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 122.665618][ T29] audit: type=1326 audit(2000000029.160:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 122.701153][ T29] audit: type=1326 audit(2000000029.160:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 122.724729][ T29] audit: type=1326 audit(2000000029.190:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 122.748147][ T29] audit: type=1326 audit(2000000029.190:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 122.771607][ T29] audit: type=1326 audit(2000000029.190:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 122.799114][ T29] audit: type=1326 audit(2000000029.190:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 122.822622][ T29] audit: type=1326 audit(2000000029.220:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 122.846072][ T29] audit: type=1326 audit(2000000029.220:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 122.869617][ T29] audit: type=1326 audit(2000000029.290:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 122.893919][ T29] audit: type=1326 audit(2000000029.290:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 123.007366][ T7591] tipc: Enabling of bearer rejected, failed to enable media [ 123.035914][ T7596] loop5: detected capacity change from 0 to 512 [ 123.067993][ T7599] netlink: 'syz.3.1299': attribute type 26 has an invalid length. [ 123.077224][ T7596] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.094975][ T7596] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.107861][ T7596] netlink: 'syz.5.1296': attribute type 2 has an invalid length. [ 123.115674][ T7596] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1296'. [ 123.141982][ T7602] netlink: 'syz.2.1298': attribute type 13 has an invalid length. [ 123.178447][ T6654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.189410][ T7604] netlink: 'syz.3.1300': attribute type 1 has an invalid length. [ 123.226131][ T7604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1300'. [ 123.236450][ T7604] 8021q: adding VLAN 0 to HW filter on device bond5 [ 123.275710][ T7613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1303'. [ 123.288357][ T7614] netlink: 'syz.1.1304': attribute type 4 has an invalid length. [ 123.306743][ T7614] netlink: 'syz.1.1304': attribute type 4 has an invalid length. [ 123.384067][ T7623] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1307'. [ 123.541576][ T7640] netlink: 'syz.2.1313': attribute type 1 has an invalid length. [ 123.561123][ T7641] sch_fq: defrate 4294967295 ignored. [ 123.590517][ T7640] bond4: (slave geneve2): making interface the new active one [ 123.601279][ T7640] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 123.609997][ T7136] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 123.614301][ T7640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1313'. [ 123.628437][ T7640] 8021q: adding VLAN 0 to HW filter on device bond4 [ 123.645041][ T7136] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 123.657922][ T7136] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 123.666375][ T7136] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 123.677651][ T7650] netlink: 'syz.2.1317': attribute type 1 has an invalid length. [ 123.692310][ T7650] 8021q: adding VLAN 0 to HW filter on device bond5 [ 123.704550][ T7650] ip6erspan0: entered promiscuous mode [ 123.712826][ T7650] bond5: (slave ip6erspan0): making interface the new active one [ 123.722169][ T7650] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 123.735911][ T7650] macvlan0: entered promiscuous mode [ 123.741677][ T7650] bond5: entered promiscuous mode [ 123.747116][ T7650] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 123.755263][ T7650] bond5: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 123.771366][ T7650] bond5: left promiscuous mode [ 124.212949][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1334'. [ 124.250886][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1334'. [ 124.305861][ T7702] netlink: 'syz.1.1337': attribute type 9 has an invalid length. [ 124.348865][ T7706] netlink: 'syz.1.1340': attribute type 6 has an invalid length. [ 124.767335][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1343'. [ 125.106011][ T7140] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.122414][ T7140] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.145787][ T7724] loop5: detected capacity change from 0 to 512 [ 125.159394][ T7140] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.186282][ T7724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.195628][ T7140] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.227537][ T7724] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.286523][ T7724] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1345: corrupted inode contents [ 125.339274][ T7724] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.1345: mark_inode_dirty error [ 125.367312][ T7724] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1345: corrupted inode contents [ 125.424487][ T7724] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.1345: mark_inode_dirty error [ 125.506599][ T7724] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #19: comm syz.5.1345: corrupted inode contents [ 125.518798][ T7724] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #19: comm syz.5.1345: mark_inode_dirty error [ 125.530734][ T7724] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #19: comm syz.5.1345: corrupted inode contents [ 125.543943][ T7724] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #19: comm syz.5.1345: mark_inode_dirty error [ 125.558186][ T7724] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #19: comm syz.5.1345: mark inode dirty (error -117) [ 125.590544][ T7724] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 125.627076][ T7743] serio: Serial port ptm0 [ 125.637393][ T6654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.666533][ T7745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7745 comm=syz.5.1353 [ 126.440236][ T7758] syz_tun: entered allmulticast mode [ 127.324069][ T7790] tipc: Started in network mode [ 127.329103][ T7790] tipc: Node identity fffffe01, cluster identity 64 [ 127.335821][ T7790] tipc: Node number set to 4294966785 [ 127.341357][ T7790] tipc: Cannot configure node identity twice [ 127.422430][ T7792] ref_ctr increment failed for inode: 0x1b4 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810abf2840 [ 127.637707][ T7805] wireguard0: entered promiscuous mode [ 127.643220][ T7805] wireguard0: entered allmulticast mode [ 127.659502][ T7808] loop4: detected capacity change from 0 to 128 [ 127.669612][ T7796] SELinux: security policydb version 15 (MLS) not backwards compatible [ 127.677971][ T7796] SELinux: failed to load policy [ 127.748476][ T7810] bio_check_eod: 2 callbacks suppressed [ 127.748492][ T7810] syz.4.1375: attempt to access beyond end of device [ 127.748492][ T7810] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 127.775480][ T7810] syz.4.1375: attempt to access beyond end of device [ 127.775480][ T7810] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 127.798465][ T7810] syz.4.1375: attempt to access beyond end of device [ 127.798465][ T7810] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 127.906983][ T7810] syz.4.1375: attempt to access beyond end of device [ 127.906983][ T7810] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 127.933114][ T7810] syz.4.1375: attempt to access beyond end of device [ 127.933114][ T7810] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 127.948010][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 127.956696][ T12] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 127.994628][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 128.003269][ T12] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 128.003975][ T7810] syz.4.1375: attempt to access beyond end of device [ 128.003975][ T7810] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 128.058912][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 128.061914][ T7810] syz.4.1375: attempt to access beyond end of device [ 128.061914][ T7810] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 128.067482][ T12] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 128.169852][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 128.170859][ T7810] syz.4.1375: attempt to access beyond end of device [ 128.170859][ T7810] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 128.178537][ T12] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 128.241597][ T29] kauditd_printk_skb: 292 callbacks suppressed [ 128.241617][ T29] audit: type=1400 audit(2000000034.730:4607): avc: denied { read write } for pid=7824 comm="syz.1.1380" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 128.271395][ T29] audit: type=1400 audit(2000000034.730:4608): avc: denied { open } for pid=7824 comm="syz.1.1380" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 128.308859][ T7826] xfrm0: entered allmulticast mode [ 128.315426][ T7810] syz.4.1375: attempt to access beyond end of device [ 128.315426][ T7810] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 128.345589][ T7810] syz.4.1375: attempt to access beyond end of device [ 128.345589][ T7810] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 128.359605][ T7815] __nla_validate_parse: 2 callbacks suppressed [ 128.359694][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1377'. [ 128.415151][ T29] audit: type=1326 audit(2000000034.870:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7831 comm="syz.1.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 128.438723][ T29] audit: type=1326 audit(2000000034.870:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7831 comm="syz.1.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 128.462472][ T29] audit: type=1326 audit(2000000034.870:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7831 comm="syz.1.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 128.485773][ T29] audit: type=1326 audit(2000000034.870:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7831 comm="syz.1.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 128.509420][ T29] audit: type=1326 audit(2000000034.870:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7831 comm="syz.1.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 128.532929][ T29] audit: type=1326 audit(2000000034.870:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7831 comm="syz.1.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 128.556622][ T29] audit: type=1326 audit(2000000034.870:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7831 comm="syz.1.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 128.580073][ T29] audit: type=1326 audit(2000000034.870:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7831 comm="syz.1.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 128.598351][ T7838] siw: device registration error -23 [ 129.107406][ T7856] validate_nla: 4 callbacks suppressed [ 129.107427][ T7856] netlink: 'syz.3.1390': attribute type 13 has an invalid length. [ 129.181757][ T7859] pim6reg1: entered promiscuous mode [ 129.187177][ T7859] pim6reg1: entered allmulticast mode [ 129.363941][ T7136] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 129.372558][ T7136] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 129.380993][ T7136] netdevsim netdevsim3 eth0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 129.410490][ T7136] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 129.419144][ T7136] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 129.427632][ T7136] netdevsim netdevsim3 eth1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 129.438227][ T7136] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 129.446784][ T7136] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 129.455233][ T7136] netdevsim netdevsim3 eth2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 129.464521][ T7136] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 129.473112][ T7136] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 129.481600][ T7136] netdevsim netdevsim3 eth3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 129.630982][ T7870] bridge3: entered allmulticast mode [ 129.659101][ T7873] loop5: detected capacity change from 0 to 128 [ 129.781942][ T7881] netlink: 'syz.2.1399': attribute type 1 has an invalid length. [ 129.789746][ T7881] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1399'. [ 129.987185][ T7884] loop5: detected capacity change from 0 to 512 [ 129.995570][ T7887] siw: device registration error -23 [ 130.079250][ T7884] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 130.152143][ T7884] EXT4-fs (loop5): orphan cleanup on readonly fs [ 130.198799][ T7884] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.1400: corrupted inode contents [ 130.266424][ T7884] EXT4-fs (loop5): Remounting filesystem read-only [ 130.273160][ T7884] EXT4-fs (loop5): 1 truncate cleaned up [ 130.286983][ T7135] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 130.297607][ T7135] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 130.313553][ T7135] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 130.326356][ T7884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.339908][ T3397] IPVS: starting estimator thread 0... [ 130.397818][ T6654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.431866][ T7909] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.435194][ T7900] IPVS: using max 1968 ests per chain, 98400 per kthread [ 130.528637][ T7909] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.547788][ T7918] netlink: 'syz.4.1413': attribute type 1 has an invalid length. [ 130.555684][ T7918] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1413'. [ 130.601068][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 130.627536][ T7909] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.651638][ T7929] loop4: detected capacity change from 0 to 1024 [ 130.658674][ T7929] EXT4-fs: Ignoring removed orlov option [ 130.666990][ T7929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.720386][ T7909] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.803608][ T1005] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.825661][ T1005] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.850413][ T1005] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.859325][ T7938] netlink: 5464 bytes leftover after parsing attributes in process `syz.3.1421'. [ 130.879950][ T1005] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.078295][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.088852][ T7946] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 131.279737][ T7958] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1428'. [ 131.506992][ T7946] Process accounting paused [ 132.417632][ T8026] tipc: Enabling of bearer rejected, failed to enable media [ 132.465777][ T8028] loop5: detected capacity change from 0 to 512 [ 132.474291][ T8028] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1434: inode has both inline data and extents flags [ 132.489712][ T8028] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1434: couldn't read orphan inode 15 (err -117) [ 132.489776][ T8030] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 132.512576][ T8028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.527617][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1436'. [ 132.626246][ T8030] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 132.696703][ T8030] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 132.781026][ T6654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.797680][ T8030] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 132.815983][ T8044] netlink: 'syz.5.1438': attribute type 13 has an invalid length. [ 132.861007][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.861322][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.963282][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.966119][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.007875][ T53] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.021105][ T53] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.021212][ T53] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.021248][ T53] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.021278][ T53] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 133.029267][ T7993] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 133.066998][ T7993] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 133.067039][ T7993] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 133.157872][ T8051] loop5: detected capacity change from 0 to 512 [ 133.158612][ T8051] ext2: Unknown parameter 'pcr' [ 133.183170][ T8052] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1441'. [ 133.303683][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 133.303701][ T29] audit: type=1400 audit(2000000039.790:4762): avc: denied { create } for pid=8057 comm="syz.5.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 133.305211][ T29] audit: type=1400 audit(2000000039.800:4763): avc: denied { setopt } for pid=8057 comm="syz.5.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 133.314236][ T8058] siw: device registration error -23 [ 133.332443][ T29] audit: type=1400 audit(2000000039.800:4764): avc: denied { create } for pid=8057 comm="syz.5.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 133.375359][ T29] audit: type=1400 audit(2000000039.800:4765): avc: denied { listen } for pid=8057 comm="syz.5.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 133.394826][ T29] audit: type=1400 audit(2000000039.800:4766): avc: denied { ioctl } for pid=8057 comm="syz.5.1445" path="socket:[22080]" dev="sockfs" ino=22080 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 133.441909][ T29] audit: type=1326 audit(2000000039.930:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8062 comm="syz.5.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce373efc9 code=0x7ffc0000 [ 133.441943][ T29] audit: type=1326 audit(2000000039.930:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8062 comm="syz.5.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce373efc9 code=0x7ffc0000 [ 133.442467][ T29] audit: type=1326 audit(2000000039.930:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8062 comm="syz.5.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fcce373efc9 code=0x7ffc0000 [ 133.442532][ T29] audit: type=1326 audit(2000000039.930:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8062 comm="syz.5.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce373efc9 code=0x7ffc0000 [ 133.442659][ T29] audit: type=1326 audit(2000000039.930:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8062 comm="syz.5.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce373efc9 code=0x7ffc0000 [ 133.517183][ T8066] tipc: Enabled bearer , priority 0 [ 133.517682][ T8066] syzkaller0: entered promiscuous mode [ 133.517698][ T8066] syzkaller0: entered allmulticast mode [ 133.519553][ T8066] tipc: Resetting bearer [ 133.550314][ T8065] tipc: Resetting bearer [ 133.642341][ T8065] tipc: Disabling bearer [ 133.718266][ T8079] vlan0: entered allmulticast mode [ 133.760360][ T8083] tipc: Enabled bearer , priority 0 [ 133.771774][ T8083] syzkaller0: entered promiscuous mode [ 133.777383][ T8083] syzkaller0: entered allmulticast mode [ 133.796202][ T8083] tipc: Resetting bearer [ 133.804922][ T8081] tipc: Resetting bearer [ 133.812517][ T8081] tipc: Disabling bearer [ 133.876481][ T8089] ip6t_srh: unknown srh match flags 4000 [ 133.992383][ T8097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.001471][ T8097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.030089][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1459'. [ 134.752410][ T8115] macvtap0: entered allmulticast mode [ 134.758021][ T8115] bridge0: entered allmulticast mode [ 134.763947][ T8115] bridge0: port 1(macvtap0) entered blocking state [ 134.770668][ T8115] bridge0: port 1(macvtap0) entered disabled state [ 134.779258][ T8115] bridge0: left allmulticast mode [ 134.990886][ T8135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1473'. [ 135.026325][ T8135] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8135 comm=syz.3.1473 [ 135.258069][ T8129] Set syz1 is full, maxelem 65536 reached [ 135.503417][ T8154] ref_ctr increment failed for inode: 0x62b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810005dc00 [ 136.385748][ T8188] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1492'. [ 136.467849][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 136.476891][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 136.493565][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 136.571068][ T8174] Set syz1 is full, maxelem 65536 reached [ 136.577188][ T8163] 9pnet_fd: p9_fd_create_tcp (8163): problem connecting socket to 127.0.0.1 [ 136.627030][ T8199] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 136.646308][ T8201] netlink: 'syz.4.1496': attribute type 1 has an invalid length. [ 136.662078][ T8201] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.679021][ T8201] veth5: entered promiscuous mode [ 136.687241][ T8201] bond2: (slave veth5): Enslaving as an active interface with a down link [ 136.701814][ T8201] bond2: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 136.788874][ T8207] loop4: detected capacity change from 0 to 512 [ 136.797206][ T8207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.826466][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.964924][ T8217] loop4: detected capacity change from 0 to 512 [ 136.971534][ T8217] EXT4-fs: Ignoring removed i_version option [ 136.977755][ T8217] EXT4-fs: Ignoring removed bh option [ 137.006909][ T8217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.024962][ T8217] ext4 filesystem being mounted at /325/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.056700][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.533653][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1508'. [ 137.559137][ T8239] netlink: 'syz.1.1509': attribute type 4 has an invalid length. [ 137.567649][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1508'. [ 137.649329][ T8242] loop5: detected capacity change from 0 to 512 [ 137.664131][ T8020] Bluetooth: hci0: Frame reassembly failed (-90) [ 137.727498][ T8242] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 137.751065][ T8242] EXT4-fs (loop5): orphan cleanup on readonly fs [ 137.842254][ T8242] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.1506: corrupted inode contents [ 137.888167][ T8242] EXT4-fs (loop5): Remounting filesystem read-only [ 137.902846][ T8242] EXT4-fs (loop5): 1 truncate cleaned up [ 137.925485][ T8020] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 137.936138][ T8020] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 137.980566][ T8020] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 137.991486][ T8242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.077634][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1510'. [ 138.092140][ T8263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1516'. [ 138.287241][ T8232] Set syz1 is full, maxelem 65536 reached [ 138.347878][ T6654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.543181][ T8275] tipc: Enabled bearer , priority 0 [ 138.551108][ T8275] syzkaller0: entered promiscuous mode [ 138.556736][ T8275] syzkaller0: entered allmulticast mode [ 138.566172][ T8275] tipc: Resetting bearer [ 138.585055][ T8273] tipc: Resetting bearer [ 138.594492][ T8273] tipc: Disabling bearer [ 138.763034][ T29] kauditd_printk_skb: 403 callbacks suppressed [ 138.763054][ T29] audit: type=1326 audit(2000000045.250:5169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.4.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 138.821367][ T29] audit: type=1326 audit(2000000045.280:5170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.4.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 138.821467][ T29] audit: type=1326 audit(2000000045.280:5171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.4.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 138.821501][ T29] audit: type=1326 audit(2000000045.280:5172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.4.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 138.821595][ T29] audit: type=1326 audit(2000000045.280:5173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.4.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 138.821629][ T29] audit: type=1326 audit(2000000045.280:5174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.4.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 138.821670][ T29] audit: type=1326 audit(2000000045.280:5175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.4.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 138.821704][ T29] audit: type=1326 audit(2000000045.280:5176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.4.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 138.821737][ T29] audit: type=1326 audit(2000000045.280:5177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.4.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 138.821844][ T29] audit: type=1326 audit(2000000045.290:5178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.4.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 139.725035][ T3731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 139.745544][ T8327] __nla_validate_parse: 8 callbacks suppressed [ 139.745563][ T8327] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1536'. [ 139.788193][ T8331] pim6reg1: entered promiscuous mode [ 139.793582][ T8331] pim6reg1: entered allmulticast mode [ 140.389220][ T8411] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1540'. [ 140.400700][ T8414] tipc: Enabled bearer , priority 0 [ 140.410537][ T8414] syzkaller0: entered promiscuous mode [ 140.416108][ T8414] syzkaller0: entered allmulticast mode [ 140.431749][ T8414] tipc: Resetting bearer [ 140.438893][ T8412] tipc: Resetting bearer [ 140.446669][ T8412] tipc: Disabling bearer [ 140.803551][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1550'. [ 140.812648][ T8410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.821233][ T8410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.080091][ T8468] loop4: detected capacity change from 0 to 1024 [ 141.086969][ T8468] EXT4-fs: Ignoring removed i_version option [ 141.093108][ T8468] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.100126][ T8468] EXT4-fs (loop4): stripe (14) is not aligned with cluster size (16), stripe is disabled [ 141.119613][ T8468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.580289][ T8468] netlink: 'syz.4.1553': attribute type 12 has an invalid length. [ 141.732584][ T8480] tipc: Enabled bearer , priority 0 [ 141.740032][ T8480] syzkaller0: entered promiscuous mode [ 141.745745][ T8480] syzkaller0: entered allmulticast mode [ 141.754480][ T8480] tipc: Resetting bearer [ 142.108425][ T8479] tipc: Resetting bearer [ 142.125508][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.135788][ T8479] tipc: Disabling bearer [ 142.216787][ T8491] loop4: detected capacity change from 0 to 1024 [ 142.249765][ T8491] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 142.260770][ T8491] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 142.319975][ T8501] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 142.328950][ T8491] JBD2: no valid journal superblock found [ 142.329002][ T8501] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1564'. [ 142.334896][ T8491] EXT4-fs (loop4): Could not load journal inode [ 142.390218][ T8491] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 142.690283][ T8507] loop4: detected capacity change from 0 to 32768 [ 142.855653][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1567'. [ 143.140255][ T8533] loop5: detected capacity change from 0 to 764 [ 143.159112][ T8533] rock: directory entry would overflow storage [ 143.165349][ T8533] rock: sig=0x4f50, size=4, remaining=3 [ 143.170942][ T8533] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 143.175385][ T8537] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1575'. [ 143.230470][ T8542] veth6: entered promiscuous mode [ 143.235652][ T8542] veth6: entered allmulticast mode [ 143.750108][ T8555] netlink: 'syz.4.1582': attribute type 39 has an invalid length. [ 144.111656][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1586'. [ 144.207342][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1588'. [ 144.255197][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1588'. [ 144.422584][ T8571] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1591'. [ 144.474487][ T8567] netlink: 'syz.2.1589': attribute type 12 has an invalid length. [ 144.625842][ T3397] hid-generic 0009:0007:0000.0001: unknown main item tag 0x0 [ 144.633306][ T3397] hid-generic 0009:0007:0000.0001: unknown main item tag 0x0 [ 144.640750][ T3397] hid-generic 0009:0007:0000.0001: unknown main item tag 0x0 [ 144.648184][ T3397] hid-generic 0009:0007:0000.0001: unknown main item tag 0x0 [ 144.655693][ T3397] hid-generic 0009:0007:0000.0001: unknown main item tag 0x0 [ 144.663098][ T3397] hid-generic 0009:0007:0000.0001: unknown main item tag 0x0 [ 144.670564][ T3397] hid-generic 0009:0007:0000.0001: unknown main item tag 0x0 [ 144.678103][ T3397] hid-generic 0009:0007:0000.0001: unknown main item tag 0x0 [ 144.685717][ T3397] hid-generic 0009:0007:0000.0001: unknown main item tag 0x0 [ 144.693117][ T3397] hid-generic 0009:0007:0000.0001: unknown main item tag 0x0 [ 144.767396][ T8581] __nla_validate_parse: 1 callbacks suppressed [ 144.767418][ T8581] netlink: 5452 bytes leftover after parsing attributes in process `syz.2.1593'. [ 144.775886][ T3397] hid-generic 0009:0007:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 144.809833][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 144.809850][ T29] audit: type=1400 audit(2000000051.300:5237): avc: denied { ioctl } for pid=8582 comm="syz.4.1595" path="socket:[24628]" dev="sockfs" ino=24628 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.891109][ T8589] netlink: 'syz.2.1598': attribute type 4 has an invalid length. [ 144.899970][ T8589] netlink: 'syz.2.1598': attribute type 4 has an invalid length. [ 144.978236][ T29] audit: type=1326 audit(2000000051.470:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 145.001906][ T29] audit: type=1326 audit(2000000051.470:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 145.025558][ T29] audit: type=1326 audit(2000000051.470:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 145.049023][ T29] audit: type=1326 audit(2000000051.470:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 145.072484][ T29] audit: type=1326 audit(2000000051.470:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 145.090674][ T8598] loop4: detected capacity change from 0 to 1024 [ 145.095988][ T29] audit: type=1326 audit(2000000051.470:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 145.125778][ T29] audit: type=1326 audit(2000000051.470:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 145.149313][ T29] audit: type=1326 audit(2000000051.470:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 145.156178][ T8598] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 145.172843][ T29] audit: type=1326 audit(2000000051.470:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 145.310188][ T8598] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1601: Invalid block bitmap block 0 in block_group 0 [ 145.326411][ T8598] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1601: Failed to acquire dquot type 0 [ 145.348331][ T8598] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.1601: Freeing blocks not in datazone - block = 0, count = 4096 [ 145.380378][ T8598] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1601: Invalid inode bitmap blk 0 in block_group 0 [ 145.404986][ T53] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 145.431422][ T8598] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 145.454950][ T8598] EXT4-fs (loop4): 1 orphan inode deleted [ 145.483775][ T8598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.608042][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.689152][ T8610] lo: entered allmulticast mode [ 145.694129][ T8610] tunl0: entered allmulticast mode [ 145.699462][ T8610] gre0: entered allmulticast mode [ 145.704631][ T8610] gretap0: entered allmulticast mode [ 145.710103][ T8610] erspan0: entered allmulticast mode [ 145.715571][ T8610] ip_vti0: entered allmulticast mode [ 145.720952][ T8610] ip6_vti0: entered allmulticast mode [ 145.726473][ T8610] sit0: entered allmulticast mode [ 145.731637][ T8610] ip6tnl0: entered allmulticast mode [ 145.737041][ T8610] ip6gre0: entered allmulticast mode [ 145.742402][ T8610] syz_tun: entered allmulticast mode [ 145.747846][ T8610] ip6gretap0: entered allmulticast mode [ 145.753537][ T8610] bridge0: entered allmulticast mode [ 145.758982][ T8610] vcan0: entered allmulticast mode [ 145.764170][ T8610] team0: entered allmulticast mode [ 145.769351][ T8610] vlan3: entered allmulticast mode [ 145.776575][ T8610] nlmon0: entered allmulticast mode [ 145.781866][ T8610] caif0: entered allmulticast mode [ 145.787105][ T8610] vxcan0: entered allmulticast mode [ 145.792518][ T8610] vxcan1: entered allmulticast mode [ 145.797889][ T8610] veth0: entered allmulticast mode [ 145.803140][ T8610] veth1: entered allmulticast mode [ 145.808375][ T8610] wg1: entered allmulticast mode [ 145.813414][ T8610] wg2: entered allmulticast mode [ 145.818630][ T8610] veth0_to_bridge: entered allmulticast mode [ 145.824736][ T8610] veth1_to_bridge: entered allmulticast mode [ 145.830844][ T8610] bridge_slave_1: entered allmulticast mode [ 145.836858][ T8610] veth0_to_bond: entered allmulticast mode [ 145.842777][ T8610] bond_slave_0: entered allmulticast mode [ 145.848673][ T8610] veth1_to_bond: entered allmulticast mode [ 145.854646][ T8610] bond_slave_1: entered allmulticast mode [ 145.860550][ T8610] veth0_to_team: entered allmulticast mode [ 145.866489][ T8610] team_slave_0: entered allmulticast mode [ 145.872297][ T8610] veth0_to_batadv: entered allmulticast mode [ 145.878521][ T8610] batadv_slave_0: entered allmulticast mode [ 145.884515][ T8610] veth1_to_batadv: entered allmulticast mode [ 145.890633][ T8610] batadv_slave_1: entered allmulticast mode [ 145.896708][ T8610] xfrm0: entered allmulticast mode [ 145.901900][ T8610] veth0_to_hsr: entered allmulticast mode [ 145.907734][ T8610] hsr_slave_0: entered allmulticast mode [ 145.913451][ T8610] veth1_to_hsr: entered allmulticast mode [ 145.919265][ T8610] hsr_slave_1: entered allmulticast mode [ 145.925052][ T8610] hsr0: entered allmulticast mode [ 145.930237][ T8610] veth1_virt_wifi: entered allmulticast mode [ 145.936324][ T8610] veth0_virt_wifi: entered allmulticast mode [ 145.942476][ T8610] geneve0: entered allmulticast mode [ 145.947883][ T8610] geneve1: entered allmulticast mode [ 145.953247][ T8610] team1: left promiscuous mode [ 145.958343][ T8610] ip6tnl1: entered allmulticast mode [ 145.963994][ T8610] bridge1: entered allmulticast mode [ 145.969646][ T8610] bridge2: entered allmulticast mode [ 145.975066][ T8610] bond0: entered allmulticast mode [ 145.980364][ T8610] : entered allmulticast mode [ 145.985218][ T8610] bridge3: entered allmulticast mode [ 145.990593][ T8610] bond1: left promiscuous mode [ 145.995478][ T8610] bond1: entered allmulticast mode [ 146.000747][ T8610] batadv0: entered allmulticast mode [ 146.021788][ T8610] netdevsim netdevsim4 eth0: entered allmulticast mode [ 146.029104][ T8610] netdevsim netdevsim4 eth1: entered allmulticast mode [ 146.036215][ T8610] netdevsim netdevsim4 eth2: entered allmulticast mode [ 146.043591][ T8610] netdevsim netdevsim4 eth3: entered allmulticast mode [ 146.050861][ T8610] : entered allmulticast mode [ 146.055897][ T8610] veth2: left promiscuous mode [ 146.060847][ T8610] veth3: entered allmulticast mode [ 146.066697][ T8610] gtp0: entered allmulticast mode [ 146.072643][ T8610] bond2: entered allmulticast mode [ 146.078395][ T8610] veth4: entered allmulticast mode [ 146.083841][ T8610] veth5: left promiscuous mode [ 146.088677][ T8610] veth5: entered allmulticast mode [ 146.095221][ T8610] bridge4: entered allmulticast mode [ 146.105135][ T8610] veth6: left promiscuous mode [ 146.110112][ T8610] veth7: entered allmulticast mode [ 146.429905][ T8639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1612'. [ 146.513560][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1615'. [ 146.731281][ T8650] bridge0: port 1(syz_tun) entered blocking state [ 146.737896][ T8650] bridge0: port 1(syz_tun) entered disabled state [ 146.744981][ T8650] syz_tun: entered promiscuous mode [ 146.856664][ T8657] tipc: New replicast peer: 10.1.1.2 [ 146.862142][ T8657] tipc: Enabled bearer , priority 10 [ 146.892593][ T8659] tipc: Bearer : already 2 bearers with priority 10 [ 146.899990][ T8659] tipc: Bearer : trying with adjusted priority [ 146.907309][ T8659] tipc: New replicast peer: 255.255.255.255 [ 146.913445][ T8659] tipc: Enabled bearer , priority 9 [ 147.078572][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1626'. [ 147.098841][ T8674] loop5: detected capacity change from 0 to 256 [ 147.105959][ T8674] FAT-fs (loop5): bogus number of FAT sectors [ 147.112256][ T8674] FAT-fs (loop5): Can't find a valid FAT filesystem [ 147.237102][ T8690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1633'. [ 147.262314][ T8690] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8690 comm=syz.3.1633 [ 147.466262][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'. [ 147.632789][ T8710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1641'. [ 147.641974][ T8710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1641'. [ 147.673759][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1641'. [ 147.802402][ T8717] loop4: detected capacity change from 0 to 8192 [ 147.840788][ T8722] netlink: 'syz.2.1645': attribute type 1 has an invalid length. [ 147.849376][ T8717] loop4: p1 p2 p3 p4 [ 147.854764][ T8717] loop4: p3 start 331777 is beyond EOD, truncated [ 147.861294][ T8717] loop4: p4 size 262144 extends beyond EOD, truncated [ 147.874605][ T8722] 8021q: adding VLAN 0 to HW filter on device bond6 [ 147.892149][ T8722] bond6: entered allmulticast mode [ 147.900595][ T8717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1644'. [ 147.912855][ T8722] bond6: (slave ip6gretap0): making interface the new active one [ 147.920700][ T8722] ip6gretap0: entered allmulticast mode [ 147.927696][ T8722] bond6: (slave ip6gretap0): Enslaving as an active interface with an up link [ 148.295554][ T8750] loop5: detected capacity change from 0 to 2048 [ 148.335579][ T8750] loop5: p1 < > p4 [ 148.340293][ T8750] loop5: p4 size 8388608 extends beyond EOD, truncated [ 148.491794][ T8759] SELinux: Context system_u:object is not valid (left unmapped). [ 148.602296][ T8768] loop4: detected capacity change from 0 to 512 [ 148.617296][ T8768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.638730][ T8766] tipc: Enabled bearer , priority 0 [ 148.647357][ T8766] tipc: Disabling bearer [ 148.665681][ T8768] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.740624][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.753090][ T8780] tipc: Enabling of bearer rejected, already enabled [ 148.763639][ T8780] tipc: Enabling of bearer rejected, failed to enable media [ 148.830748][ T8784] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 148.847008][ T8786] loop4: detected capacity change from 0 to 512 [ 148.855425][ T8786] EXT4-fs: Ignoring removed nobh option [ 148.864332][ T8786] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 148.912393][ T8784] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 148.943183][ T8798] netlink: 'syz.4.1675': attribute type 1 has an invalid length. [ 148.966123][ T8798] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.982801][ T8798] veth9: entered promiscuous mode [ 148.991256][ T8798] bond3: (slave veth9): Enslaving as a backup interface with a down link [ 149.001983][ T8784] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 149.136086][ T8784] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 149.262332][ T7993] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 149.267210][ T7993] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 149.299508][ T7993] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 149.299552][ T7993] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 149.694567][ T8822] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 149.746064][ T8822] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 149.826614][ T8822] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 149.866134][ T8822] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 150.057020][ T8842] __nla_validate_parse: 8 callbacks suppressed [ 150.057040][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1690'. [ 150.076227][ T8839] loop4: detected capacity change from 0 to 1024 [ 150.102172][ T8839] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.123121][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1690'. [ 150.145682][ T8839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.177969][ T8849] syzkaller0: entered promiscuous mode [ 150.183613][ T8849] syzkaller0: entered allmulticast mode [ 150.218710][ T7993] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 150.234867][ T7993] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 150.265727][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 150.265747][ T29] audit: type=1400 audit(2000000056.760:5343): avc: denied { lock } for pid=8838 comm="syz.4.1691" path="/368/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.302363][ T7993] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 150.306170][ T29] audit: type=1400 audit(2000000056.790:5344): avc: denied { append } for pid=8838 comm="syz.4.1691" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.319262][ T8854] bridge3: entered allmulticast mode [ 150.338440][ T7993] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 150.347110][ T8839] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 150.365252][ T8839] EXT4-fs (loop4): Remounting filesystem read-only [ 150.409923][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.623343][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'. [ 150.632537][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'. [ 150.641499][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1700'. [ 150.653427][ T8868] tipc: Enabled bearer , priority 0 [ 150.684203][ T8868] tipc: Disabling bearer [ 150.692534][ T8870] tipc: Enabled bearer , priority 10 [ 150.716380][ T8870] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 150.724623][ T8870] tipc: Enabled bearer , priority 10 [ 150.787172][ T29] audit: type=1326 audit(2000000057.280:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8875 comm="syz.1.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 150.817380][ T29] audit: type=1326 audit(2000000057.280:5346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8875 comm="syz.1.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 150.841015][ T29] audit: type=1326 audit(2000000057.310:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8875 comm="syz.1.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 150.864672][ T29] audit: type=1326 audit(2000000057.310:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8875 comm="syz.1.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 150.888301][ T29] audit: type=1326 audit(2000000057.310:5349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8875 comm="syz.1.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 150.912278][ T29] audit: type=1326 audit(2000000057.310:5350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8875 comm="syz.1.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 150.935719][ T29] audit: type=1326 audit(2000000057.310:5351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8875 comm="syz.1.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 150.959274][ T29] audit: type=1326 audit(2000000057.310:5352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8875 comm="syz.1.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 150.975711][ T8876] SELinux: Context @ is not valid (left unmapped). [ 150.993168][ T3404] IPVS: starting estimator thread 0... [ 150.998633][ T8880] : port 1(veth0_to_bridge) entered blocking state [ 151.005757][ T8880] : port 1(veth0_to_bridge) entered disabled state [ 151.024702][ T8884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1705'. [ 151.025023][ T8880] veth0_to_bridge: entered allmulticast mode [ 151.040490][ T8880] veth0_to_bridge: entered promiscuous mode [ 151.052788][ T8880] : port 2(veth0_to_team) entered blocking state [ 151.059570][ T8880] : port 2(veth0_to_team) entered disabled state [ 151.066635][ T8880] veth0_to_team: entered allmulticast mode [ 151.073133][ T8880] veth0_to_team: entered promiscuous mode [ 151.094847][ T8882] IPVS: using max 2448 ests per chain, 122400 per kthread [ 151.144032][ T8889] veth0: entered promiscuous mode [ 151.150504][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1707'. [ 151.195478][ T8889] veth0 (unregistering): left promiscuous mode [ 151.301354][ T8896] loop5: detected capacity change from 0 to 1024 [ 151.324668][ T8896] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.349222][ T8896] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.433817][ T8906] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 151.465346][ T8906] EXT4-fs (loop5): Remounting filesystem read-only [ 151.510212][ T8910] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 151.532909][ T6654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.643830][ T8920] netlink: 'syz.3.1719': attribute type 1 has an invalid length. [ 151.672156][ T8920] 8021q: adding VLAN 0 to HW filter on device bond6 [ 151.713627][ T8920] veth9: entered promiscuous mode [ 151.718920][ T3404] tipc: Node number set to 2245101962 [ 151.742040][ T8920] bond6: (slave veth9): Enslaving as a backup interface with a down link [ 151.784088][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 152.096824][ T8942] siw: device registration error -23 [ 152.492972][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1734'. [ 152.610102][ T8974] wireguard0: entered promiscuous mode [ 152.615773][ T8974] wireguard0: entered allmulticast mode [ 153.854484][ T3731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 153.858348][ T7261] Bluetooth: hci0: command 0x1003 tx timeout [ 153.960267][ T9025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1753'. [ 154.256949][ T9038] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 154.602185][ T9056] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 154.826685][ T9067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1768'. [ 155.007877][ T9077] loop4: detected capacity change from 0 to 128 [ 155.332691][ T9086] hub 6-0:1.0: USB hub found [ 155.337487][ T9086] hub 6-0:1.0: 8 ports detected [ 155.494741][ T9089] hub 6-0:1.0: USB hub found [ 155.503235][ T9089] hub 6-0:1.0: 8 ports detected [ 156.139568][ T9108] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 156.164604][ T9113] __nla_validate_parse: 10 callbacks suppressed [ 156.164668][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1783'. [ 156.282452][ T9120] lo: entered allmulticast mode [ 156.287508][ T9120] tunl0: entered allmulticast mode [ 156.292754][ T9120] gre0: entered allmulticast mode [ 156.297974][ T9120] gretap0: entered allmulticast mode [ 156.303446][ T9120] erspan0: entered allmulticast mode [ 156.308824][ T9120] ip_vti0: entered allmulticast mode [ 156.314281][ T9120] v: entered allmulticast mode [ 156.319164][ T9120] sit0: entered allmulticast mode [ 156.324251][ T9120] ip6tnl0: entered allmulticast mode [ 156.329721][ T9120] ip6gre0: entered allmulticast mode [ 156.335206][ T9120] syz_tun: entered allmulticast mode [ 156.340616][ T9120] ip6gretap0: entered allmulticast mode [ 156.346282][ T9120] bridge0: entered allmulticast mode [ 156.351743][ T9120] vcan0: entered allmulticast mode [ 156.357081][ T9120] bond0: entered allmulticast mode [ 156.362212][ T9120] bond_slave_0: entered allmulticast mode [ 156.368083][ T9120] bond_slave_1: entered allmulticast mode [ 156.374056][ T9120] team0: entered allmulticast mode [ 156.379229][ T9120] team_slave_0: entered allmulticast mode [ 156.384977][ T9120] team_slave_1: entered allmulticast mode [ 156.390980][ T9120] dummy0: entered allmulticast mode [ 156.396347][ T9120] nlmon0: entered allmulticast mode [ 156.401727][ T9120] caif0: entered allmulticast mode [ 156.407000][ T9120] vxcan0: entered allmulticast mode [ 156.412300][ T9120] vxcan1: entered allmulticast mode [ 156.417597][ T9120] wg0: entered allmulticast mode [ 156.422705][ T9120] wg1: entered allmulticast mode [ 156.427790][ T9120] wg2: entered allmulticast mode [ 156.432801][ T9120] veth0_to_bridge: entered allmulticast mode [ 156.438919][ T9120] veth1_to_bridge: entered allmulticast mode [ 156.445068][ T9120] veth0_to_bond: entered allmulticast mode [ 156.451096][ T9120] veth1_to_bond: entered allmulticast mode [ 156.457226][ T9120] veth0_to_team: entered allmulticast mode [ 156.463218][ T9120] veth1_to_team: entered allmulticast mode [ 156.469238][ T9120] veth0_to_batadv: entered allmulticast mode [ 156.475432][ T9120] batadv_slave_0: entered allmulticast mode [ 156.481470][ T9120] veth1_to_batadv: entered allmulticast mode [ 156.487565][ T9120] batadv_slave_1: entered allmulticast mode [ 156.493584][ T9120] xfrm0: entered allmulticast mode [ 156.498976][ T9120] veth0_to_hsr: entered allmulticast mode [ 156.505053][ T9120] hsr_slave_0: entered allmulticast mode [ 156.510843][ T9120] veth1_to_hsr: entered allmulticast mode [ 156.516738][ T9120] hsr_slave_1: entered allmulticast mode [ 156.522536][ T9120] hsr0: entered allmulticast mode [ 156.527782][ T9120] veth1_virt_wifi: entered allmulticast mode [ 156.533913][ T9120] veth0_virt_wifi: entered allmulticast mode [ 156.540069][ T9120] veth1_macvtap: entered allmulticast mode [ 156.546118][ T9120] veth0_macvtap: entered allmulticast mode [ 156.552023][ T9120] macvtap0: entered allmulticast mode [ 156.557693][ T9120] macsec0: entered allmulticast mode [ 156.563109][ T9120] geneve0: entered allmulticast mode [ 156.568526][ T9120] geneve1: entered allmulticast mode [ 156.573993][ T9120] bridge1: entered allmulticast mode [ 156.579569][ T9120] netdevsim netdevsim5 eth0: entered allmulticast mode [ 156.586695][ T9120] netdevsim netdevsim5 eth1: entered allmulticast mode [ 156.593764][ T9120] netdevsim netdevsim5 eth2: entered allmulticast mode [ 156.601594][ T9120] netdevsim netdevsim5 eth3: entered allmulticast mode [ 156.622038][ T9127] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1786'. [ 156.794145][ T9137] ip6gre1: entered allmulticast mode [ 157.192200][ T9149] syzkaller0: entered promiscuous mode [ 157.197958][ T9149] syzkaller0: entered allmulticast mode [ 157.260608][ T9155] ref_ctr increment failed for inode: 0x7d9 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810abf4500 [ 157.261252][ T9157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1802'. [ 157.502840][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 157.502857][ T29] audit: type=1400 audit(2000000063.970:5423): avc: denied { read } for pid=9167 comm="syz.1.1817" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 157.532018][ T29] audit: type=1400 audit(2000000063.970:5424): avc: denied { open } for pid=9167 comm="syz.1.1817" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 157.555735][ T29] audit: type=1400 audit(2000000063.970:5425): avc: denied { ioctl } for pid=9167 comm="syz.1.1817" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 157.793192][ T3384] kernel read not supported for file /mISDNtimer (pid: 3384 comm: kworker/0:3) [ 157.813665][ T9185] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1808'. [ 157.831258][ T9183] netlink: 'syz.2.1810': attribute type 10 has an invalid length. [ 157.840229][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1810'. [ 157.965613][ T29] audit: type=1326 audit(2000000064.460:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9192 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36299efc9 code=0x7ffc0000 [ 157.989120][ T29] audit: type=1326 audit(2000000064.460:5427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9192 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36299efc9 code=0x7ffc0000 [ 158.042034][ T29] audit: type=1326 audit(2000000064.460:5428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9192 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb36299efc9 code=0x7ffc0000 [ 158.065575][ T29] audit: type=1326 audit(2000000064.460:5429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9192 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36299efc9 code=0x7ffc0000 [ 158.089071][ T29] audit: type=1326 audit(2000000064.460:5430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9192 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36299efc9 code=0x7ffc0000 [ 158.112550][ T29] audit: type=1326 audit(2000000064.520:5431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9192 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fb36299efc9 code=0x7ffc0000 [ 158.138524][ T29] audit: type=1326 audit(2000000064.630:5432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9192 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36299efc9 code=0x7ffc0000 [ 158.337347][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1814'. [ 158.368582][ T9201] syzkaller0: entered promiscuous mode [ 158.374162][ T9201] syzkaller0: entered allmulticast mode [ 158.380535][ T9205] veth0_to_team: entered promiscuous mode [ 158.386489][ T9205] veth0_to_team: entered allmulticast mode [ 158.461986][ T9214] loop4: detected capacity change from 0 to 1024 [ 158.469591][ T9214] EXT4-fs: Ignoring removed orlov option [ 158.687040][ T9214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.091186][ T9221] ref_ctr increment failed for inode: 0x788 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810005dc00 [ 159.389979][ T9224] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 159.531437][ T9231] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1827'. [ 159.540631][ T9231] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1827'. [ 159.582222][ T9231] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1827'. [ 159.591276][ T9231] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1827'. [ 159.896753][ T9255] netlink: 'syz.3.1836': attribute type 1 has an invalid length. [ 159.910877][ T9255] 8021q: adding VLAN 0 to HW filter on device bond7 [ 159.925034][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.936542][ T9255] veth11: entered promiscuous mode [ 159.946086][ T9255] bond7: (slave veth11): Enslaving as an active interface with a down link [ 159.956194][ T9224] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 159.961497][ T9258] Bluetooth: hci0: Frame reassembly failed (-90) [ 159.973155][ T7959] Bluetooth: hci0: Frame reassembly failed (-84) [ 159.987186][ T9260] netlink: 'syz.1.1847': attribute type 39 has an invalid length. [ 159.999815][ T9255] bond7: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 160.056708][ T9224] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 160.145851][ T9224] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 160.220233][ T7959] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 160.243478][ T7959] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 160.261986][ T7959] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 160.276024][ T7959] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 160.293456][ T9277] ref_ctr increment failed for inode: 0x80b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810005e780 [ 161.601044][ T9295] Process accounting resumed [ 162.165453][ T7261] Bluetooth: hci0: command 0x1003 tx timeout [ 162.165492][ T3731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 162.238225][ T9313] __nla_validate_parse: 6 callbacks suppressed [ 162.238271][ T9313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1857'. [ 162.633582][ T9325] netlink: 'syz.5.1859': attribute type 1 has an invalid length. [ 162.741590][ T9325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.771116][ T9328] veth1: entered promiscuous mode [ 162.782035][ T9328] bond1: (slave veth1): Enslaving as an active interface with a down link [ 162.806985][ T9330] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 162.853193][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 162.853213][ T29] audit: type=1326 audit(2000000069.340:5518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 162.883234][ T29] audit: type=1326 audit(2000000069.340:5519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 162.930524][ T29] audit: type=1326 audit(2000000069.400:5520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 162.954113][ T29] audit: type=1326 audit(2000000069.400:5521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 162.977627][ T29] audit: type=1326 audit(2000000069.400:5522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 163.001076][ T29] audit: type=1326 audit(2000000069.400:5523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 163.024491][ T29] audit: type=1326 audit(2000000069.410:5524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 163.047993][ T29] audit: type=1326 audit(2000000069.410:5525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 163.071749][ T29] audit: type=1326 audit(2000000069.410:5526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 163.071923][ T29] audit: type=1326 audit(2000000069.410:5527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fabd1efc9 code=0x7ffc0000 [ 163.158022][ T9345] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1864'. [ 163.296057][ T9355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1872'. [ 164.040234][ T3415] hid_parser_main: 3 callbacks suppressed [ 164.040257][ T3415] hid-generic 0009:0007:0000.0002: unknown main item tag 0x0 [ 164.053774][ T3415] hid-generic 0009:0007:0000.0002: unknown main item tag 0x0 [ 164.061261][ T3415] hid-generic 0009:0007:0000.0002: unknown main item tag 0x0 [ 164.068742][ T3415] hid-generic 0009:0007:0000.0002: unknown main item tag 0x0 [ 164.076195][ T3415] hid-generic 0009:0007:0000.0002: unknown main item tag 0x0 [ 164.083639][ T3415] hid-generic 0009:0007:0000.0002: unknown main item tag 0x0 [ 164.091124][ T3415] hid-generic 0009:0007:0000.0002: unknown main item tag 0x0 [ 164.098666][ T3415] hid-generic 0009:0007:0000.0002: unknown main item tag 0x0 [ 164.106214][ T3415] hid-generic 0009:0007:0000.0002: unknown main item tag 0x0 [ 164.113632][ T3415] hid-generic 0009:0007:0000.0002: unknown main item tag 0x0 [ 164.172580][ T9382] netlink: 5452 bytes leftover after parsing attributes in process `syz.5.1879'. [ 164.204501][ T9379] pim6reg1: entered promiscuous mode [ 164.209895][ T9379] pim6reg1: entered allmulticast mode [ 164.277591][ T3415] hid-generic 0009:0007:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 164.349092][ T9386] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1883'. [ 164.358258][ T9386] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1883'. [ 164.421164][ T9386] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1883'. [ 164.430261][ T9386] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1883'. [ 164.539213][ T9386] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1883'. [ 164.548303][ T9386] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1883'. [ 165.208052][ T9403] tipc: Enabled bearer , priority 0 [ 165.216206][ T9399] tipc: Resetting bearer [ 165.228259][ T9399] tipc: Disabling bearer [ 166.106116][ T9421] loop4: detected capacity change from 0 to 256 [ 166.114281][ T9421] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 166.144463][ T3404] hid-generic 0009:0007:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 167.274379][ T9439] __nla_validate_parse: 2 callbacks suppressed [ 167.274403][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1901'. [ 167.498047][ T9445] netlink: 'syz.5.1903': attribute type 4 has an invalid length. [ 167.517030][ T9445] netlink: 'syz.5.1903': attribute type 4 has an invalid length. [ 167.584262][ T9447] loop5: detected capacity change from 0 to 512 [ 167.604635][ T9447] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 167.631790][ T9447] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1904: Invalid block bitmap block 0 in block_group 0 [ 167.645845][ T9447] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 167.654744][ T9447] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.1904: attempt to clear invalid blocks 983261 len 1 [ 167.668537][ T9447] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.1904: Invalid inode table block 0 in block_group 0 [ 167.681521][ T9447] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 167.691187][ T9447] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 167.700246][ T9447] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.1904: Invalid inode table block 0 in block_group 0 [ 167.713405][ T9447] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 167.723059][ T9447] EXT4-fs error (device loop5): ext4_truncate:4637: inode #11: comm syz.5.1904: mark_inode_dirty error [ 167.736552][ T9447] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 167.745633][ T9447] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.1904: Invalid inode table block 0 in block_group 0 [ 167.798889][ T9447] EXT4-fs (loop5): 1 truncate cleaned up [ 167.817192][ T9447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.857651][ T9454] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 167.860184][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 167.860198][ T29] audit: type=1326 audit(2000000074.350:5554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 168.027962][ T29] audit: type=1326 audit(2000000074.470:5555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 168.051471][ T29] audit: type=1326 audit(2000000074.470:5556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 168.074900][ T29] audit: type=1326 audit(2000000074.470:5557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 168.098404][ T29] audit: type=1326 audit(2000000074.470:5558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 168.121837][ T29] audit: type=1326 audit(2000000074.470:5559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 168.145350][ T29] audit: type=1326 audit(2000000074.470:5560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 168.168800][ T29] audit: type=1326 audit(2000000074.470:5561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 168.192161][ T29] audit: type=1326 audit(2000000074.470:5562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 168.215850][ T29] audit: type=1326 audit(2000000074.470:5563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f108d4aefc9 code=0x7ffc0000 [ 168.371631][ T6654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.460596][ T9475] tipc: Bearer : already 2 bearers with priority 10 [ 168.467969][ T9475] tipc: Bearer : trying with adjusted priority [ 168.475428][ T9475] tipc: New replicast peer: 255.255.255.255 [ 168.481613][ T9475] tipc: Enabled bearer , priority 9 [ 168.966788][ T9494] lo: entered allmulticast mode [ 168.971762][ T9494] tunl0: entered allmulticast mode [ 168.977053][ T9494] gre0: entered allmulticast mode [ 168.982168][ T9494] gretap0: entered allmulticast mode [ 168.987614][ T9494] erspan0: entered allmulticast mode [ 168.993088][ T9494] ip_vti0: entered allmulticast mode [ 168.998488][ T9494] ip6_vti0: entered allmulticast mode [ 169.003923][ T9494] sit0: entered allmulticast mode [ 169.009061][ T9494] ip6tnl0: entered allmulticast mode [ 169.014472][ T9494] ip6gre0: entered allmulticast mode [ 169.019856][ T9494] vcan0: entered allmulticast mode [ 169.025184][ T9494] .`: entered allmulticast mode [ 169.030212][ T9494] team0: entered allmulticast mode [ 169.035410][ T9494] nlmon0: entered allmulticast mode [ 169.040874][ T9494] caif0: entered allmulticast mode [ 169.046171][ T9494] veth0: entered allmulticast mode [ 169.051378][ T9494] veth1: entered allmulticast mode [ 169.056591][ T9494] wg0: entered allmulticast mode [ 169.061582][ T9494] wg1: entered allmulticast mode [ 169.066599][ T9494] wg2: left promiscuous mode [ 169.071400][ T9494] veth0_to_bridge: entered allmulticast mode [ 169.077475][ T9494] veth1_to_bridge: entered allmulticast mode [ 169.083483][ T9494] bridge_slave_1: entered allmulticast mode [ 169.089495][ T9494] veth0_to_bond: entered allmulticast mode [ 169.095358][ T9494] bond_slave_0: entered allmulticast mode [ 169.101110][ T9494] veth1_to_bond: entered allmulticast mode [ 169.107063][ T9494] bond_slave_1: entered allmulticast mode [ 169.113306][ T9494] veth0_to_team: left promiscuous mode [ 169.119420][ T9494] team_slave_0: entered allmulticast mode [ 169.125240][ T9494] veth1_to_team: entered allmulticast mode [ 169.131164][ T9494] team_slave_1: entered allmulticast mode [ 169.137026][ T9494] veth0_to_batadv: entered allmulticast mode [ 169.143066][ T9494] batadv_slave_0: entered allmulticast mode [ 169.149081][ T9494] veth1_to_batadv: entered allmulticast mode [ 169.155267][ T9494] batadv_slave_1: entered allmulticast mode [ 169.161343][ T9494] veth0_to_hsr: entered allmulticast mode [ 169.167177][ T9494] hsr_slave_0: entered allmulticast mode [ 169.172956][ T9494] veth1_to_hsr: entered allmulticast mode [ 169.178906][ T9494] hsr_slave_1: entered allmulticast mode [ 169.184639][ T9494] hsr0: entered allmulticast mode [ 169.189832][ T9494] veth1_virt_wifi: entered allmulticast mode [ 169.196028][ T9494] veth0_virt_wifi: entered allmulticast mode [ 169.202079][ T9494] geneve0: entered allmulticast mode [ 169.207543][ T9494] geneve1: entered allmulticast mode [ 169.212991][ T9494] team1: left promiscuous mode [ 169.217920][ T9494] bond2: entered allmulticast mode [ 169.223039][ T9494] geneve2: entered allmulticast mode [ 169.228584][ T9494] batadv0: entered allmulticast mode [ 169.233943][ T9494] bond0: entered allmulticast mode [ 169.239126][ T9494] ip6gretap1: entered allmulticast mode [ 169.244913][ T9494] ip6tnl1: entered allmulticast mode [ 169.250315][ T9494] bond3: entered allmulticast mode [ 169.255782][ T9494] ip6tnl2: entered allmulticast mode [ 169.270042][ T9494] bridge0: entered allmulticast mode [ 169.276171][ T9494] gre1: entered allmulticast mode [ 169.281850][ T9494] veth2: entered allmulticast mode [ 169.287118][ T9494] veth3: entered allmulticast mode [ 169.292349][ T9494] netdevsim netdevsim1 eth0: entered allmulticast mode [ 169.299489][ T9494] netdevsim netdevsim1 eth1: entered allmulticast mode [ 169.306525][ T9494] netdevsim netdevsim1 eth2: entered allmulticast mode [ 169.313493][ T9494] netdevsim netdevsim1 eth3: entered allmulticast mode [ 169.320618][ T9499] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1921'. [ 169.332192][ T9504] tipc: New replicast peer: 255.255.255.255 [ 169.338391][ T9504] tipc: Enabled bearer , priority 10 [ 169.390135][ T9506] syzkaller0: entered promiscuous mode [ 169.395778][ T9506] syzkaller0: entered allmulticast mode [ 169.510270][ T9517] loop4: detected capacity change from 0 to 256 [ 169.517202][ T9517] FAT-fs (loop4): bogus number of FAT sectors [ 169.523300][ T9517] FAT-fs (loop4): Can't find a valid FAT filesystem [ 170.611113][ T9565] loop5: detected capacity change from 0 to 1024 [ 170.834669][ T9565] EXT4-fs: Ignoring removed orlov option [ 170.840417][ T9565] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.861368][ T9565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.884395][ T9565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.948101][ T9576] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 170.948101][ T9576] The task syz.4.1944 (9576) triggered the difference, watch for misbehavior. [ 170.969616][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1941'. [ 170.978555][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1941'. [ 170.987651][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1941'. [ 171.039123][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1941'. [ 171.048065][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1941'. [ 171.070179][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1941'. [ 171.096615][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1941'. [ 171.105566][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1941'. [ 171.878380][ T9597] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 172.030262][ T9600] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 172.126173][ T9600] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 172.206399][ T9600] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 172.266236][ T9600] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 172.332580][ T8020] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 172.346343][ T8020] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 172.389384][ T8020] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 172.410824][ T8020] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 172.768375][ T9625] loop4: detected capacity change from 0 to 1024 [ 172.931781][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 172.931799][ T29] audit: type=1400 audit(2000000079.420:5734): avc: denied { mounton } for pid=9615 comm="syz.4.1958" path="/415/file1" dev="tmpfs" ino=2207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 172.931816][ T9625] EXT4-fs: Ignoring removed orlov option [ 172.931853][ T9625] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.059676][ T9631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9631 comm=syz.1.1961 [ 173.072722][ T9625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.085773][ T9625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.094877][ T29] audit: type=1400 audit(2000000079.580:5735): avc: denied { mount } for pid=9615 comm="syz.4.1958" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 173.203086][ T29] audit: type=1400 audit(2000000079.690:5736): avc: denied { write } for pid=9620 comm="syz.5.1959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.331928][ T9616] __nla_validate_parse: 1 callbacks suppressed [ 173.331949][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 173.347091][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 173.395026][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 173.405721][ T29] audit: type=1400 audit(2000000079.900:5737): avc: denied { module_request } for pid=9615 comm="syz.4.1958" kmod="nft-expr-7-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 173.457171][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 173.466185][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 173.475415][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 173.501462][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 173.510534][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 173.547148][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 173.635571][ T9644] loop5: detected capacity change from 0 to 512 [ 174.110991][ T29] audit: type=1400 audit(2000000080.600:5738): avc: denied { mounton } for pid=9641 comm="syz.5.1962" path="/181/file2" dev="tmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 174.137611][ T9644] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 174.169992][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1963'. [ 174.211258][ T29] audit: type=1400 audit(2000000080.700:5739): avc: denied { firmware_load } for pid=9647 comm="syz.4.1963" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 174.264652][ T9644] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 174.380070][ T9644] EXT4-fs (loop5): 1 truncate cleaned up [ 174.400663][ T9644] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.594999][ T29] audit: type=1400 audit(2000000081.070:5740): avc: denied { create } for pid=9661 comm="syz.3.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.667016][ T6654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.700132][ T29] audit: type=1400 audit(2000000081.110:5741): avc: denied { read } for pid=9661 comm="syz.3.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.719523][ T29] audit: type=1400 audit(2000000081.120:5742): avc: denied { write } for pid=9661 comm="syz.3.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.738962][ T29] audit: type=1400 audit(2000000081.150:5743): avc: denied { unmount } for pid=6654 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 174.858989][ T9666] pim6reg1: entered promiscuous mode [ 174.864414][ T9666] pim6reg1: entered allmulticast mode [ 175.010322][ T9670] netlink: 'syz.5.1970': attribute type 12 has an invalid length. [ 175.886508][ T9697] syzkaller0: entered promiscuous mode [ 175.892018][ T9697] syzkaller0: entered allmulticast mode [ 176.678210][ T9721] loop4: detected capacity change from 0 to 256 [ 176.768850][ T9721] FAT-fs (loop4): bogus number of FAT sectors [ 176.775001][ T9721] FAT-fs (loop4): Can't find a valid FAT filesystem [ 177.717930][ T9730] syzkaller0: entered promiscuous mode [ 177.723479][ T9730] syzkaller0: entered allmulticast mode [ 177.743059][ T9734] netlink: 'syz.3.1994': attribute type 1 has an invalid length. [ 177.751919][ T9732] netlink: 'syz.1.1995': attribute type 4 has an invalid length. [ 177.766121][ T9732] netlink: 'syz.1.1995': attribute type 4 has an invalid length. [ 177.817653][ T9734] 8021q: adding VLAN 0 to HW filter on device bond9 [ 177.843048][ T9734] bond8: (slave bond9): making interface the new active one [ 177.871016][ T9734] bond8: (slave bond9): Enslaving as an active interface with an up link [ 177.988861][ T9734] bond8: (slave gretap1): Enslaving as a backup interface with an up link [ 178.020881][ T9734] 8021q: adding VLAN 0 to HW filter on device bond8 [ 178.088788][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 178.088803][ T29] audit: type=1400 audit(2000000084.580:5825): avc: denied { create } for pid=9756 comm="syz.3.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 178.126006][ T9757] sy0: rxe_newlink: already configured on team_slave_0 [ 178.134517][ T9759] loop5: detected capacity change from 0 to 1024 [ 178.147561][ T9757] C: renamed from team_slave_0 [ 178.176376][ T29] audit: type=1400 audit(2000000084.620:5826): avc: denied { write } for pid=9756 comm="syz.3.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 178.197785][ T29] audit: type=1400 audit(2000000084.670:5827): avc: denied { create } for pid=9765 comm="syz.3.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 178.198124][ T9759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.217467][ T29] audit: type=1400 audit(2000000084.670:5828): avc: denied { connect } for pid=9765 comm="syz.3.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 178.294697][ T9768] netlink: 'syz.3.2006': attribute type 13 has an invalid length. [ 178.313087][ T9768] gretap0: refused to change device tx_queue_len [ 178.327562][ T9768] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 178.402486][ T29] audit: type=1326 audit(2000000084.890:5829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9769 comm="syz.3.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bcc3efc9 code=0x7ffc0000 [ 178.425989][ T29] audit: type=1326 audit(2000000084.890:5830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9769 comm="syz.3.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bcc3efc9 code=0x7ffc0000 [ 178.514849][ T29] audit: type=1326 audit(2000000084.950:5831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9769 comm="syz.3.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fe6bcc3efc9 code=0x7ffc0000 [ 178.538404][ T29] audit: type=1326 audit(2000000084.950:5832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9769 comm="syz.3.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bcc3efc9 code=0x7ffc0000 [ 178.561836][ T29] audit: type=1326 audit(2000000084.950:5833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9769 comm="syz.3.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bcc3efc9 code=0x7ffc0000 [ 178.585491][ T29] audit: type=1400 audit(2000000084.970:5834): avc: denied { getopt } for pid=9772 comm="syz.3.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 178.642961][ T6654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.660651][ T9779] syzkaller0: entered promiscuous mode [ 178.666209][ T9779] syzkaller0: entered allmulticast mode [ 179.265437][ T9793] netlink: 'syz.4.2014': attribute type 1 has an invalid length. [ 179.431744][ T9793] 8021q: adding VLAN 0 to HW filter on device bond5 [ 179.442848][ T9793] bond4: (slave bond5): making interface the new active one [ 179.450561][ T9793] bond4: (slave bond5): Enslaving as an active interface with an up link [ 179.463320][ T9799] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 179.531354][ T9807] loop5: detected capacity change from 0 to 164 [ 179.538137][ T9793] __nla_validate_parse: 13 callbacks suppressed [ 179.538237][ T9793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2014'. [ 179.554850][ T9807] Unable to read rock-ridge attributes [ 179.583549][ T9807] Unable to read rock-ridge attributes [ 179.589801][ T9793] 8021q: adding VLAN 0 to HW filter on device bond4 [ 179.605446][ T9807] bio_check_eod: 143 callbacks suppressed [ 179.605459][ T9807] syz.5.2018: attempt to access beyond end of device [ 179.605459][ T9807] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 179.625164][ T9807] syz.5.2018: attempt to access beyond end of device [ 179.625164][ T9807] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 179.662855][ T9814] loop4: detected capacity change from 0 to 164 [ 179.673361][ T9814] Unable to read rock-ridge attributes [ 179.679898][ T9814] Unable to read rock-ridge attributes [ 179.686141][ T9814] netlink: 44 bytes leftover after parsing attributes in process `+}[@'. [ 179.777432][ T9824] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 179.841303][ T9829] loop4: detected capacity change from 0 to 128 [ 179.853317][ T9829] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 179.865635][ T9829] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.077395][ T9847] loop5: detected capacity change from 0 to 2048 [ 180.119512][ T9847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.497606][ T7998] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 180.534820][ T7998] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 180.547490][ T7998] EXT4-fs (loop5): This should not happen!! Data will be lost [ 180.547490][ T7998] [ 180.557183][ T7998] EXT4-fs (loop5): Total free blocks count 0 [ 180.563184][ T7998] EXT4-fs (loop5): Free/Dirty block details [ 180.569116][ T7998] EXT4-fs (loop5): free_blocks=2415919104 [ 180.574858][ T7998] EXT4-fs (loop5): dirty_blocks=8192 [ 180.580167][ T7998] EXT4-fs (loop5): Block reservation details [ 180.586267][ T7998] EXT4-fs (loop5): i_reserved_data_blocks=512 [ 180.623029][ T9860] syzkaller0: entered promiscuous mode [ 180.626880][ T7998] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 180.628639][ T9860] syzkaller0: entered allmulticast mode [ 180.836381][ T9873] loop5: detected capacity change from 0 to 512 [ 180.862595][ T9875] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2045'. [ 180.871690][ T9875] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2045'. [ 180.880686][ T9875] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2045'. [ 180.909895][ T9873] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 180.925682][ T9873] EXT4-fs (loop5): mount failed [ 180.955714][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2047'. [ 180.971808][ T9882] 8021q: adding VLAN 0 to HW filter on device bond6 [ 181.006434][ T9882] vlan0: entered allmulticast mode [ 181.011674][ T9882] bond6: entered allmulticast mode [ 181.048837][ T9886] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 181.175576][ T9886] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 181.208503][ T9893] loop4: detected capacity change from 0 to 512 [ 181.237285][ T9893] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 181.237863][ T9886] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 181.261640][ T9893] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 181.285393][ T9893] EXT4-fs (loop4): 1 truncate cleaned up [ 181.292100][ T9893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.343149][ T9886] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 181.355671][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.442858][ T8020] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 181.868221][ T8020] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 181.940411][ T7991] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 182.081718][ T7991] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 182.391987][ T9920] loop5: detected capacity change from 0 to 256 [ 182.427314][ T9920] FAT-fs (loop5): bogus number of FAT sectors [ 182.433448][ T9920] FAT-fs (loop5): Can't find a valid FAT filesystem [ 182.477848][ T9926] SELinux: syz.1.2063 (9926) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 182.504576][ T9927] bridge0: entered promiscuous mode [ 182.509874][ T9927] bridge0: entered allmulticast mode [ 182.528148][ T9927] team0: Port device bridge0 added [ 183.005645][ T9930] bridge0: port 1(team0) entered blocking state [ 183.012009][ T9930] bridge0: port 1(team0) entered disabled state [ 183.018522][ T9930] team0: entered allmulticast mode [ 183.024259][ T9930] team0: left allmulticast mode [ 183.206147][ T9942] loop5: detected capacity change from 0 to 1024 [ 183.249960][ T9942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.346343][ T9922] netlink: 'syz.4.2061': attribute type 2 has an invalid length. [ 183.394862][ T9922] loop4: detected capacity change from 0 to 8192 [ 183.411452][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 183.411467][ T29] audit: type=1400 audit(2000000089.900:5924): avc: denied { bind } for pid=9951 comm="syz.3.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.417997][ T6654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.456486][ T9922] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2061'. [ 183.479743][ T29] audit: type=1400 audit(2000000089.930:5925): avc: denied { listen } for pid=9951 comm="syz.3.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.499422][ T29] audit: type=1400 audit(2000000089.930:5926): avc: denied { accept } for pid=9951 comm="syz.3.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.519045][ T29] audit: type=1400 audit(2000000089.930:5927): avc: denied { write } for pid=9951 comm="syz.3.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.538647][ T29] audit: type=1400 audit(2000000089.940:5928): avc: denied { read } for pid=9951 comm="syz.3.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.660609][ T29] audit: type=1326 audit(2000000090.150:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9961 comm="syz.5.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce373efc9 code=0x7ffc0000 [ 183.684182][ T29] audit: type=1326 audit(2000000090.150:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9961 comm="syz.5.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce373efc9 code=0x7ffc0000 [ 183.718711][ T29] audit: type=1326 audit(2000000090.200:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9961 comm="syz.5.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcce373efc9 code=0x7ffc0000 [ 183.742206][ T29] audit: type=1326 audit(2000000090.200:5932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9961 comm="syz.5.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce373efc9 code=0x7ffc0000 [ 183.765918][ T29] audit: type=1326 audit(2000000090.200:5933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9961 comm="syz.5.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce373efc9 code=0x7ffc0000 [ 183.791977][ T9965] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2074'. [ 183.904540][ T9975] netlink: 'syz.5.2079': attribute type 4 has an invalid length. [ 183.935276][ T9977] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9977 comm=syz.4.2080 [ 183.943068][ T9975] netlink: 'syz.5.2079': attribute type 4 has an invalid length. [ 183.957873][ T9979] netlink: 'syz.3.2081': attribute type 4 has an invalid length. [ 184.003224][ T9979] netlink: 'syz.3.2081': attribute type 4 has an invalid length. [ 184.123210][ T9990] loop5: detected capacity change from 0 to 128 [ 185.178166][T10007] netlink: 'syz.4.2091': attribute type 12 has an invalid length. [ 185.579920][T10012] netlink: 44 bytes leftover after parsing attributes in process `+}[@'. [ 185.606647][T10016] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10016 comm=syz.2.2094 [ 185.709986][T10022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2097'. [ 185.750078][T10024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10024 comm=syz.2.2098 [ 185.763851][T10024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2098'. [ 185.900260][T10037] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 185.969288][T10049] syz_tun: entered allmulticast mode [ 185.975944][T10048] syz_tun: left allmulticast mode [ 186.240802][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2116'. [ 186.400964][T10092] loop5: detected capacity change from 0 to 1024 [ 186.416719][T10092] EXT4-fs: Ignoring removed oldalloc option [ 186.422705][T10092] EXT4-fs: Ignoring removed bh option [ 186.459619][T10092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.880331][T10092] ================================================================== [ 186.888492][T10092] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 186.896506][T10092] [ 186.898833][T10092] write to 0xffff8881004b29a4 of 4 bytes by task 10105 on cpu 0: [ 186.906553][T10092] xas_set_mark+0x12b/0x140 [ 186.911081][T10092] tag_pages_for_writeback+0xc2/0x290 [ 186.916474][T10092] ext4_do_writepages+0x6b2/0x2750 [ 186.922405][T10092] ext4_writepages+0x176/0x300 [ 186.927199][T10092] do_writepages+0x1c6/0x310 [ 186.931817][T10092] file_write_and_wait_range+0x156/0x2c0 [ 186.937481][T10092] generic_buffers_fsync_noflush+0x45/0x120 [ 186.943399][T10092] ext4_sync_file+0x1ab/0x690 [ 186.948087][T10092] vfs_fsync_range+0x10d/0x130 [ 186.952863][T10092] ext4_buffered_write_iter+0x34f/0x3c0 [ 186.958417][T10092] ext4_file_write_iter+0x387/0xf60 [ 186.963642][T10092] iter_file_splice_write+0x666/0xa60 [ 186.969045][T10092] direct_splice_actor+0x156/0x2a0 [ 186.974245][T10092] splice_direct_to_actor+0x312/0x680 [ 186.979621][T10092] do_splice_direct+0xda/0x150 [ 186.984395][T10092] do_sendfile+0x380/0x650 [ 186.988835][T10092] __x64_sys_sendfile64+0x105/0x150 [ 186.994053][T10092] x64_sys_call+0x2bb4/0x3000 [ 186.998735][T10092] do_syscall_64+0xd2/0x200 [ 187.003249][T10092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.009145][T10092] [ 187.011461][T10092] read to 0xffff8881004b29a4 of 4 bytes by task 10092 on cpu 1: [ 187.019085][T10092] file_write_and_wait_range+0x10e/0x2c0 [ 187.024730][T10092] generic_buffers_fsync_noflush+0x45/0x120 [ 187.030637][T10092] ext4_sync_file+0x1ab/0x690 [ 187.035318][T10092] vfs_fsync_range+0x10d/0x130 [ 187.040099][T10092] ext4_buffered_write_iter+0x34f/0x3c0 [ 187.045650][T10092] ext4_file_write_iter+0x387/0xf60 [ 187.050872][T10092] iter_file_splice_write+0x666/0xa60 [ 187.056243][T10092] direct_splice_actor+0x156/0x2a0 [ 187.061358][T10092] splice_direct_to_actor+0x312/0x680 [ 187.066736][T10092] do_splice_direct+0xda/0x150 [ 187.071509][T10092] do_sendfile+0x380/0x650 [ 187.075933][T10092] __x64_sys_sendfile64+0x105/0x150 [ 187.081141][T10092] x64_sys_call+0x2bb4/0x3000 [ 187.085823][T10092] do_syscall_64+0xd2/0x200 [ 187.090333][T10092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.096227][T10092] [ 187.098550][T10092] value changed: 0x02000021 -> 0x04000021 [ 187.104268][T10092] [ 187.106594][T10092] Reported by Kernel Concurrency Sanitizer on: [ 187.112757][T10092] CPU: 1 UID: 0 PID: 10092 Comm: gtp Not tainted syzkaller #0 PREEMPT(voluntary) [ 187.121957][T10092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 187.132014][T10092] ================================================================== [ 187.245483][ T6654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.