last executing test programs: 5m7.202234045s ago: executing program 32 (id=388): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 5m6.453967408s ago: executing program 33 (id=408): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) 5m1.433767642s ago: executing program 34 (id=536): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2001}) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0xb, 0x0, 0x0) 4m3.570102139s ago: executing program 35 (id=3030): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000180)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9p2000,version=9p2000.L,fscontext=']) 4m3.314311954s ago: executing program 36 (id=3038): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrlimit(0x5, &(0x7f0000000000)) 3m40.012648525s ago: executing program 37 (id=3820): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff881ffffff0100000000000000080003000b000000", 0x24) 2m45.923739201s ago: executing program 38 (id=5261): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2a630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0xa08, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x6, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 2m41.96365822s ago: executing program 7 (id=5820): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) personality(0x400000a) 2m41.891482007s ago: executing program 7 (id=5824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x41) 2m41.819927034s ago: executing program 7 (id=5829): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x21081e, &(0x7f0000000b80)={[{@resgid}, {@nogrpid}, {@grpquota}, {@noquota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x104b0d, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2m41.480260718s ago: executing program 7 (id=5842): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r2, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) 2m41.280637547s ago: executing program 7 (id=5856): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m41.190148516s ago: executing program 7 (id=5847): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x10) io_setup(0x3, &(0x7f0000000340)) 2m31.395177169s ago: executing program 5 (id=6086): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef006bbad110521256d686", 0x12, 0x0, 0x0, 0x0) 2m31.333904515s ago: executing program 5 (id=6087): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) openat$vcsa(0xffffffffffffff9c, 0x0, 0x266800, 0x0) pipe(&(0x7f0000000200)) 2m31.332515955s ago: executing program 5 (id=6090): r0 = socket$unix(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 2m31.245876774s ago: executing program 5 (id=6092): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m31.245677924s ago: executing program 5 (id=6093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m31.229125325s ago: executing program 5 (id=6094): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x53}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r2, &(0x7f00000000c0)=""/60, 0x3c, 0x40, 0x0, 0x0) 2m26.122150207s ago: executing program 39 (id=5847): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x10) io_setup(0x3, &(0x7f0000000340)) 2m16.174333075s ago: executing program 40 (id=6094): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x53}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r2, &(0x7f00000000c0)=""/60, 0x3c, 0x40, 0x0, 0x0) 2m4.597667703s ago: executing program 4 (id=6690): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[], 0xfffffd97) write$P9_RSETATTR(r2, &(0x7f0000000080)={0x7, 0x1b, 0x1}, 0x7) 2m4.501934612s ago: executing program 4 (id=6693): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c8d0}, 0x2000c800) 2m4.406003531s ago: executing program 4 (id=6697): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x59, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) 2m4.383701864s ago: executing program 4 (id=6698): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa95058, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) 2m4.3217084s ago: executing program 4 (id=6702): listen(0xffffffffffffffff, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000005}, 0x18) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000100)) 2m3.974097814s ago: executing program 4 (id=6711): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x1d6}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x2000000000000002) 2m3.923673169s ago: executing program 41 (id=6711): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x1d6}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x2000000000000002) 1m50.939868145s ago: executing program 0 (id=7109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0088a80180c2000002aaaaaaaaaabb86dd6d89cbdf001811"], 0x52) 1m50.78843615s ago: executing program 0 (id=7116): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000240)=[{0x400, 0x2, 0xd1, 0x80000001}]}) 1m50.705157998s ago: executing program 0 (id=7117): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}], 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}], 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000003c0)={r2, 0x101}, 0x8) 1m50.358432482s ago: executing program 1 (id=7129): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000640)='console\x00', r2}, 0x18) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x40000003}, 0x1c}}, 0x0) 1m50.320490276s ago: executing program 1 (id=7132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x4}, {0x0}, &(0x7f00000007c0)=[{&(0x7f00000016c0)=""/96, 0x60}], 0x1, 0x39, 0x2}}], 0x48, 0x4044001}, 0x0) 1m50.294654219s ago: executing program 1 (id=7134): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) 1m50.261853392s ago: executing program 1 (id=7135): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1c5008, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x500, 0x40) r1 = open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x172) 1m50.212358027s ago: executing program 1 (id=7138): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) 1m50.140205704s ago: executing program 1 (id=7139): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x5}, 0x18) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@cswp={0x58, 0x114, 0x7, {{0x40, 0x2}, &(0x7f0000000340)=0x4, 0x0, 0x7fffffffffffffff, 0x2, 0x2, 0x9, 0x20, 0x7}}], 0x58}, 0x40) 1m50.140043264s ago: executing program 42 (id=7139): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x5}, 0x18) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@cswp={0x58, 0x114, 0x7, {{0x40, 0x2}, &(0x7f0000000340)=0x4, 0x0, 0x7fffffffffffffff, 0x2, 0x2, 0x9, 0x20, 0x7}}], 0x58}, 0x40) 1m49.841832923s ago: executing program 0 (id=7148): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1c5008, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x500, 0x40) r1 = open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x172) 1m49.790378168s ago: executing program 0 (id=7149): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd8d}], 0x1}, 0x0) 1m49.478212719s ago: executing program 0 (id=7155): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 1m49.46644285s ago: executing program 43 (id=7155): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 1.177774414s ago: executing program 3 (id=11612): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffb", 0x11) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) 977.983264ms ago: executing program 8 (id=11621): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0xc, 0x0) io_uring_setup(0x5b54, &(0x7f0000000040)={0x0, 0xda34, 0x0, 0x0, 0x2b2}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) close_range(r0, 0xffffffffffffffff, 0x0) 897.893701ms ago: executing program 6 (id=11627): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x2711}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 877.252064ms ago: executing program 6 (id=11628): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xd64}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 842.275737ms ago: executing program 8 (id=11629): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000fc0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@block_validity}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodelalloc}, {@grpquota}, {@mblk_io_submit}, {@nodiscard}, {@bh}, {@dioread_nolock}], [{@subj_type={'subj_type', 0x3d, 'data_err=abort'}}, {@fsname={'fsname', 0x3d, '/@'}}, {@measure}, {@uid_gt}, {@dont_appraise}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 793.848301ms ago: executing program 6 (id=11631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_BETA={0x8, 0x5, 0x3}]}}]}, 0x40}}, 0x0) 759.984985ms ago: executing program 8 (id=11633): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000180)=0x7, 0x4) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4, 0xa, 0x1, 0x8}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x3f7, 0x4) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x5e, 0x0, 0x0, &(0x7f0000000280)=""/49, 0x2b}}], 0x1, 0x10042, 0x0) 743.149647ms ago: executing program 8 (id=11634): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) write$selinux_load(0xffffffffffffffff, 0x0, 0x603f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x6, 0x4, 0x6, 0x0, 0x20, 0xb, 0x1, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x5, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x6, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0x2, 0x1, 0x5, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x8, 0x0, 0x9, 0xfffffff4, 0x3b96, 0xfffff800, 0x8, 0x3, 0x2000f, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x7fffffff, 0x7, 0x9, 0x0, 0x40, 0x8, 0x8, 0x5, 0x8c, 0xaa93, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x1, 0xd12, 0x0, 0x23487474, 0x3cd2, 0xec19, 0x7, 0x5, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0xfffffffd, 0xfffffff8, 0x4c, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0x0, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x7fff, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x0, 0x2, 0xb, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x0, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x9, 0x1, 0x80000000, 0x3, 0x9, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0xd, 0x7, 0x9, 0x6, 0x0, 0x4, 0x81, 0x1, 0x100, 0x7, 0x3f, 0x3, 0x8, 0x9, 0x2, 0x6, 0x6dbf, 0x8, 0x5, 0x12c, 0x3, 0x5, 0x5, 0x7, 0x100, 0x7, 0x8, 0x9, 0x0, 0x3, 0xffffffff, 0x200, 0xfffffffe, 0x328d, 0xfffffe01, 0x9, 0x8, 0x3, 0xffff8000, 0x4f, 0x0, 0xd, 0x3, 0x8000, 0x2, 0x17, 0x88, 0x8, 0xc, 0xffff, 0x0, 0x3, 0x2, 0x42f, 0xffffff2c, 0x5, 0xbd, 0xe0, 0x6, 0xc26, 0x8e, 0x6, 0x3, 0xe, 0x1, 0x800, 0x1bf, 0x4, 0x5, 0x4, 0x8, 0x7ce7c36c, 0x3, 0x1eb, 0x10001, 0x8, 0x5102, 0x6ce, 0x6, 0x79, 0x2, 0x5, 0xfffffff9, 0x2, 0x4e30, 0x6, 0x6, 0x2, 0x90, 0x2, 0x2, 0xc80e, 0x4, 0x5, 0x450, 0xe0, 0x9, 0x5, 0xd, 0x5, 0x5, 0x9, 0x1045800, 0xfffffffd, 0xffffffde, 0x6a4, 0x5, 0x9, 0x6, 0x1f, 0xb89, 0x6, 0x7, 0x1ff, 0x6, 0xfffff77b, 0x3, 0xffffffff, 0xfffff400, 0x6, 0x6, 0x8, 0x9, 0x2, 0x7, 0x401, 0xa7d, 0x6, 0xfffff9f3, 0x1, 0x9, 0x1, 0xb4, 0x2, 0xc, 0x8, 0x7, 0x0, 0x5891, 0x8, 0x7, 0xb, 0x0, 0x8, 0xb, 0x0, 0xff, 0x4f, 0x8, 0x33f, 0x70fc7f4f, 0x0, 0x4, 0x0, 0xc, 0x9, 0x5, 0x6, 0x3, 0x2, 0x1, 0x0, 0x2c46512a, 0x7, 0x2640, 0x0, 0x10000, 0x0, 0x9, 0x3, 0x6, 0x7fffffff, 0xdc, 0x80000000, 0x26, 0xbb16, 0x4f7, 0x9, 0xbd1, 0x44, 0xffffff7f, 0xa3, 0x1, 0x4, 0x0, 0x3, 0x2, 0x5, 0x0, 0x9, 0x4, 0x4b, 0x1, 0x8000, 0x2, 0x4, 0x2e4, 0xc7, 0x4, 0x4, 0x4, 0x81, 0xff, 0x6, 0x1, 0x10, 0x6, 0x9, 0x1, 0x4e2, 0x104, 0x7, 0x3ff, 0x10000, 0x4, 0x1, 0x101, 0x800, 0x101, 0x5, 0x6, 0x9, 0x6, 0x101, 0x9, 0x9, 0x6, 0x800, 0x101, 0xf07, 0x0, 0x2, 0x81, 0x6, 0x80000001, 0x8, 0x2, 0xee8, 0x10001ff, 0x81, 0x24000, 0x6, 0x2, 0x2, 0x2, 0x10, 0x8001, 0xa, 0x8, 0x200, 0x6, 0x9, 0x8001, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8000}, 0x24018000) 685.858982ms ago: executing program 6 (id=11636): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffdffffffffffe}, 0x18) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x64, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0x15, 0x1, "f102dcf29effae15cd649e6a6437eb61af"}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 685.490112ms ago: executing program 8 (id=11637): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x81}, 0x18) r2 = memfd_secret(0x80000) fcntl$setlease(r2, 0x400, 0x0) close(r2) 659.028085ms ago: executing program 8 (id=11639): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000002c0)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x0, 0x3, 0x7, 0x1, 0x1}, 0x4) 606.17919ms ago: executing program 6 (id=11641): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x400}, {0x0}, &(0x7f0000000a80)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x4b, 0x8}}], 0x48}, 0x0) 593.170241ms ago: executing program 6 (id=11642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r3, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 369.220293ms ago: executing program 9 (id=11652): r0 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x15a}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) io_uring_enter(r0, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 261.166914ms ago: executing program 3 (id=11653): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='inet_sock_set_state\x00', r0, 0x0, 0x100000001}, 0x28) r1 = io_uring_setup(0x224a, &(0x7f00000002c0)={0x0, 0x1670, 0x40, 0x2, 0x3d3}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 198.20211ms ago: executing program 3 (id=11654): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 198.03159ms ago: executing program 3 (id=11655): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xa85, 0xf) 197.86213ms ago: executing program 3 (id=11656): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) io_setup(0x6, &(0x7f0000001000)=0x0) io_pgetevents(r2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={[0x9]}, 0x8}) 194.60731ms ago: executing program 9 (id=11657): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) 150.908995ms ago: executing program 9 (id=11658): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 131.167317ms ago: executing program 9 (id=11659): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 86.777471ms ago: executing program 3 (id=11661): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r1, 0xacf5e67dd0b583a1, 0x0, 0xc00e0000, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xffffffff}}}}}, 0x28}}, 0x0) 86.556341ms ago: executing program 9 (id=11662): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syncfs(r2) 86.397391ms ago: executing program 2 (id=11663): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000020000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000001180)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = io_uring_setup(0x2e71, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x131}) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000000300)={0x0}, 0x1) 86.233221ms ago: executing program 9 (id=11664): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffb", 0x11) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) 42.235575ms ago: executing program 2 (id=11665): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000f100000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x3ff}, 0x18) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x88c02, 0x0) write$cgroup_int(r2, 0x0, 0x2) 42.004015ms ago: executing program 2 (id=11666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 41.232195ms ago: executing program 2 (id=11667): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x2000000000}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 19.676547ms ago: executing program 2 (id=11668): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240", @ANYRESDEC=r2], 0x60}}, 0xc024) 0s ago: executing program 2 (id=11669): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01060000090000c8abab0fe777a0d30062726f6164636173742d6c696e"], 0x40}}, 0x0) kernel console output (not intermixed with test programs): 9501][T23101] program syz.6.7920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.586935][T23103] loop9: detected capacity change from 0 to 128 [ 271.602809][ T29] audit: type=1326 audit(2849.564:8892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23098 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 271.680763][T23108] loop6: detected capacity change from 0 to 1024 [ 271.690141][ T29] audit: type=1326 audit(2849.614:8893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23098 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 271.708327][T23108] EXT4-fs: inline encryption not supported [ 271.712710][ T29] audit: type=1326 audit(2849.614:8894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23098 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 271.741024][ T29] audit: type=1326 audit(2849.614:8895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23098 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 271.763420][ T29] audit: type=1326 audit(2849.644:8896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23098 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 271.788234][ T111] team0 (unregistering): Port device team_slave_1 removed [ 271.817605][ T111] team0 (unregistering): Port device team_slave_0 removed [ 271.850168][T23108] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.863487][T23114] loop9: detected capacity change from 0 to 2048 [ 271.873792][ T29] audit: type=1326 audit(2849.794:8897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23115 comm="syz.8.7916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 271.977175][T18651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.096406][ T111] IPVS: stop unused estimator thread 0... [ 272.164298][T23132] loop9: detected capacity change from 0 to 7 [ 272.170545][T23132] Buffer I/O error on dev loop9, logical block 0, async page read [ 272.191284][T23132] Buffer I/O error on dev loop9, logical block 0, async page read [ 272.199274][T23132] loop9: unable to read partition table [ 272.222727][T23132] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 272.222727][T23132] ) failed (rc=-5) [ 272.330889][T23146] smc: net device bond0 applied user defined pnetid SYZ0 [ 272.343624][T23146] smc: net device bond0 erased user defined pnetid SYZ0 [ 272.400236][T23155] loop6: detected capacity change from 0 to 512 [ 272.424614][T23155] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.7934: error while reading EA inode 32 err=-116 [ 272.439815][T23155] EXT4-fs (loop6): Remounting filesystem read-only [ 272.456451][T23165] netlink: 'syz.9.7938': attribute type 6 has an invalid length. [ 272.488662][T23155] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 272.525386][T23155] EXT4-fs (loop6): 1 orphan inode deleted [ 272.528845][T23175] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 272.531629][T23155] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.554446][T23155] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.670778][T23188] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 273.033885][T23234] __nla_validate_parse: 9 callbacks suppressed [ 273.033902][T23234] netlink: 272 bytes leftover after parsing attributes in process `syz.8.7965'. [ 273.154811][T23247] netlink: 60 bytes leftover after parsing attributes in process `syz.9.7977'. [ 273.198953][T23254] loop6: detected capacity change from 0 to 512 [ 273.268718][T23254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.333299][T23268] lo speed is unknown, defaulting to 1000 [ 273.368871][T18651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.403573][ T9] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 273.512908][T23296] netlink: 272 bytes leftover after parsing attributes in process `syz.9.7990'. [ 273.567528][T23300] 9pnet_fd: Insufficient options for proto=fd [ 273.623893][T23304] netlink: 'syz.3.7995': attribute type 3 has an invalid length. [ 274.074863][T23332] loop9: detected capacity change from 0 to 7 [ 274.074994][T23332] Buffer I/O error on dev loop9, logical block 0, async page read [ 274.075043][T23332] Buffer I/O error on dev loop9, logical block 0, async page read [ 274.075066][T23332] loop9: unable to read partition table [ 274.075139][T23332] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 274.075139][T23332] ) failed (rc=-5) [ 274.178922][T23336] geneve2: entered promiscuous mode [ 274.178939][T23336] geneve2: entered allmulticast mode [ 274.262883][T23340] netlink: 'syz.6.8013': attribute type 13 has an invalid length. [ 274.293238][T23340] gretap0: refused to change device tx_queue_len [ 274.293406][T23340] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 274.411419][T23358] vhci_hcd: invalid port number 23 [ 274.477199][T23368] loop6: detected capacity change from 0 to 512 [ 274.483938][T23368] EXT4-fs: Ignoring removed mblk_io_submit option [ 274.491553][T23368] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 274.502821][T23368] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.8027: attempt to clear invalid blocks 2 len 1 [ 274.516389][T23368] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 274.530918][T23368] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.8027: invalid indirect mapped block 1819239214 (level 0) [ 274.545528][T23368] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.8027: invalid indirect mapped block 1819239214 (level 1) [ 274.560214][T23368] EXT4-fs (loop6): 1 truncate cleaned up [ 274.566575][T23368] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.583800][T23368] EXT4-fs (loop6): Quota file not on filesystem root. Journaled quota will not work [ 274.605541][T18651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.701401][T23379] vhci_hcd: invalid port number 0 [ 274.947929][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811a2e2a00: rx timeout, send abort [ 274.947987][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811a2e2a00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 275.311758][T23428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8041'. [ 275.539597][T23447] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8046'. [ 275.547651][ T111] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.561228][T23447] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8046'. [ 275.604984][ T111] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.605077][ T111] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.605106][ T111] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.656163][T23462] Cannot find add_set index 0 as target [ 275.752324][T23474] pim6reg1: entered promiscuous mode [ 275.752346][T23474] pim6reg1: entered allmulticast mode [ 275.790945][T23477] loop9: detected capacity change from 0 to 7 [ 275.811049][T23477] Buffer I/O error on dev loop9, logical block 0, async page read [ 275.819560][T23477] Buffer I/O error on dev loop9, logical block 0, async page read [ 275.827478][T23477] loop9: unable to read partition table [ 275.833328][T23477] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 275.833328][T23477] ) failed (rc=-5) [ 275.864714][T23488] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8055'. [ 275.981352][T23511] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8063'. [ 275.984808][T23509] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8062'. [ 276.002663][T23511] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8063'. [ 276.023257][T23509] bridge_slave_1: left allmulticast mode [ 276.028966][T23509] bridge_slave_1: left promiscuous mode [ 276.034837][T23509] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.049862][T23509] bridge_slave_0: left allmulticast mode [ 276.055653][T23509] bridge_slave_0: left promiscuous mode [ 276.061430][T23509] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.115238][T23526] loop9: detected capacity change from 0 to 512 [ 276.125156][T23526] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 276.135311][T23526] EXT4-fs (loop9): orphan cleanup on readonly fs [ 276.142156][T23526] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.8067: Failed to acquire dquot type 1 [ 276.155416][T23526] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.8067: bg 0: block 40: padding at end of block bitmap is not set [ 276.171862][T23526] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 276.189098][T23526] EXT4-fs (loop9): 1 truncate cleaned up [ 276.200763][T23526] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 276.222216][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 276.222236][ T29] audit: type=1326 audit(2854.174:9045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23516 comm="syz.2.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 276.251618][ T29] audit: type=1326 audit(2854.174:9046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23516 comm="syz.2.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 276.291172][ T29] audit: type=1400 audit(2854.244:9047): avc: denied { relabelfrom } for pid=23542 comm="syz.6.8070" name="" dev="pipefs" ino=75258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 276.338524][T21044] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.367430][ T29] audit: type=1326 audit(2854.324:9048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23554 comm="syz.9.8074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cee1defc9 code=0x7ffc0000 [ 276.390540][ T29] audit: type=1326 audit(2854.324:9049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23554 comm="syz.9.8074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cee1defc9 code=0x7ffc0000 [ 276.451915][ T29] audit: type=1326 audit(2854.324:9050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23554 comm="syz.9.8074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cee1defc9 code=0x7ffc0000 [ 276.475125][ T29] audit: type=1326 audit(2854.324:9051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23554 comm="syz.9.8074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cee1defc9 code=0x7ffc0000 [ 276.498535][ T29] audit: type=1326 audit(2854.324:9052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23554 comm="syz.9.8074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cee1defc9 code=0x7ffc0000 [ 276.521582][ T29] audit: type=1326 audit(2854.324:9053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23554 comm="syz.9.8074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cee1defc9 code=0x7ffc0000 [ 276.528502][T23564] lo speed is unknown, defaulting to 1000 [ 276.545094][ T29] audit: type=1326 audit(2854.324:9054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23554 comm="syz.9.8074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cee1defc9 code=0x7ffc0000 [ 276.600201][T23573] bond1: entered promiscuous mode [ 276.638289][T23581] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 276.865131][T23621] netlink: 'syz.9.8087': attribute type 153 has an invalid length. [ 277.114652][T23634] loop9: detected capacity change from 0 to 32768 [ 277.172267][T23634] loop9: p1 p2 p3 < p5 p6 > [ 277.177436][T23634] loop9: p2 size 16775168 extends beyond EOD, truncated [ 277.185370][T23634] loop9: p5 start 4294970168 is beyond EOD, truncated [ 277.862153][T23722] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 278.018715][T23745] lo speed is unknown, defaulting to 1000 [ 278.293439][T23763] __nla_validate_parse: 10 callbacks suppressed [ 278.293456][T23763] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8147'. [ 278.664038][T23814] loop6: detected capacity change from 0 to 1024 [ 278.682100][T23814] EXT4-fs: Ignoring removed orlov option [ 278.688011][T23814] EXT4-fs: Ignoring removed nomblk_io_submit option [ 278.734108][T23814] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 278.742498][T23814] System zones: 0-1, 3-12 [ 278.751944][T23814] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.834459][T18651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.884059][T23829] loop9: detected capacity change from 0 to 1024 [ 278.906095][T23829] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 278.932837][T23829] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #11: comm syz.9.8175: iget: bogus i_mode (1) [ 278.956256][T23829] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.8175: couldn't read orphan inode 11 (err -117) [ 278.982066][T23829] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.007498][T23834] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23834 comm=syz.3.8177 [ 279.033433][T23829] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.096144][T23841] loop9: detected capacity change from 0 to 256 [ 279.121979][T23836] Falling back ldisc for ttyS3. [ 279.459825][T23890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8202'. [ 279.468876][T23890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8202'. [ 279.477879][T23890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8202'. [ 279.492200][T23890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8202'. [ 279.501233][T23890] netlink: 'syz.2.8202': attribute type 6 has an invalid length. [ 280.143949][T23919] loop6: detected capacity change from 0 to 512 [ 280.175097][T23919] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.8210: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 280.201091][T23919] EXT4-fs error (device loop6): ext4_quota_enable:7139: comm syz.6.8210: Bad quota inode: 3, type: 0 [ 280.212668][T23919] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 280.228403][T23919] EXT4-fs (loop6): mount failed [ 280.254319][T23927] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23927 comm=syz.3.8216 [ 280.349215][T23945] x_tables: duplicate entry at hook 1 [ 280.392003][T23953] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8230'. [ 280.410842][T23949] lo speed is unknown, defaulting to 1000 [ 280.419431][T23953] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8230'. [ 280.566071][T23971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8239'. [ 280.578465][T23975] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.788408][T23993] lo speed is unknown, defaulting to 1000 [ 280.856039][T23998] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8250'. [ 280.928866][T24006] netlink: 'syz.2.8254': attribute type 3 has an invalid length. [ 280.949721][T24010] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8255'. [ 281.073931][T24022] loop8: detected capacity change from 0 to 512 [ 281.080602][T24022] EXT4-fs: Ignoring removed bh option [ 281.094166][T24022] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.142765][T10849] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.263547][ T29] kauditd_printk_skb: 781 callbacks suppressed [ 281.263562][ T29] audit: type=1400 audit(5437.227:9836): avc: denied { create } for pid=24029 comm="syz.8.8265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 281.290047][ T29] audit: type=1400 audit(5437.227:9837): avc: denied { connect } for pid=24029 comm="syz.8.8265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 281.310428][ T29] audit: type=1400 audit(5437.267:9838): avc: denied { name_bind } for pid=24034 comm="syz.8.8266" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 281.331719][ T29] audit: type=1400 audit(5437.267:9839): avc: denied { node_bind } for pid=24034 comm="syz.8.8266" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 281.353826][ T29] audit: type=1326 audit(5437.277:9840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.3.8274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e2eb75e67 code=0x7ffc0000 [ 281.376917][ T29] audit: type=1326 audit(5437.277:9841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.3.8274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e2eb1b099 code=0x7ffc0000 [ 281.387391][T24033] lo speed is unknown, defaulting to 1000 [ 281.399813][ T29] audit: type=1326 audit(5437.277:9842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.3.8274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e2eb75e67 code=0x7ffc0000 [ 281.428480][ T29] audit: type=1326 audit(5437.277:9843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.3.8274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e2eb1b099 code=0x7ffc0000 [ 281.451694][ T29] audit: type=1326 audit(5437.277:9844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.3.8274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e2eb75e67 code=0x7ffc0000 [ 281.474640][ T29] audit: type=1326 audit(5437.277:9845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.3.8274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e2eb1b099 code=0x7ffc0000 [ 281.731305][T24072] lo speed is unknown, defaulting to 1000 [ 281.833008][T24084] loop6: detected capacity change from 0 to 128 [ 281.888742][T24090] hub 9-0:1.0: USB hub found [ 281.897869][T24090] hub 9-0:1.0: 8 ports detected [ 282.623923][T24216] SELinux: policydb version 896 does not match my version range 15-35 [ 282.639568][T24216] SELinux: failed to load policy [ 283.144624][T24298] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 283.152939][T24298] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 283.206312][T24304] loop8: detected capacity change from 0 to 1024 [ 283.213294][T24304] EXT4-fs: Ignoring removed nomblk_io_submit option [ 283.236274][T24304] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 283.244582][T24304] System zones: 0-1, 3-36 [ 283.258428][T24304] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.322813][T10849] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.334116][T24321] __nla_validate_parse: 5 callbacks suppressed [ 283.334134][T24321] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8338'. [ 283.389196][T24327] SELinux: failed to load policy [ 283.550023][T24346] netlink: 76 bytes leftover after parsing attributes in process `syz.9.8349'. [ 283.818240][T24398] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 283.827774][T24398] SELinux: failed to load policy [ 283.851035][T24399] sctp: [Deprecated]: syz.9.8372 (pid 24399) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.851035][T24399] Use struct sctp_sack_info instead [ 283.964942][T24410] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 24410 comm: syz.6.8378) [ 284.370250][T24429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.378917][T24429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.721437][T24458] blktrace: Concurrent blktraces are not allowed on loop4 [ 284.868252][T24477] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8408'. [ 284.999838][T24494] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8415'. [ 285.190154][T24512] loop6: detected capacity change from 0 to 512 [ 285.200856][T24512] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 285.345762][T19298] hid_parser_main: 51 callbacks suppressed [ 285.345781][T19298] hid-generic 0003:80000004:0000.000D: unknown main item tag 0x0 [ 285.359884][T19298] hid-generic 0003:80000004:0000.000D: unknown main item tag 0x0 [ 285.367915][T19298] hid-generic 0003:80000004:0000.000D: unknown main item tag 0x0 [ 285.375728][T19298] hid-generic 0003:80000004:0000.000D: unknown main item tag 0x0 [ 285.383593][T19298] hid-generic 0003:80000004:0000.000D: unknown main item tag 0x0 [ 285.391451][T19298] hid-generic 0003:80000004:0000.000D: unknown main item tag 0x0 [ 285.399220][T19298] hid-generic 0003:80000004:0000.000D: unknown main item tag 0x0 [ 285.407034][T19298] hid-generic 0003:80000004:0000.000D: unknown main item tag 0x0 [ 285.415062][T19298] hid-generic 0003:80000004:0000.000D: unknown main item tag 0x0 [ 285.422868][T19298] hid-generic 0003:80000004:0000.000D: unknown main item tag 0x0 [ 285.436588][T19298] hid-generic 0003:80000004:0000.000D: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 285.552306][T24537] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 285.702210][T24559] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8443'. [ 285.752992][T24566] loop8: detected capacity change from 0 to 764 [ 285.765966][T24567] SELinux: policydb version 0 does not match my version range 15-35 [ 285.775958][T24567] SELinux: failed to load policy [ 285.794537][T24566] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 285.876716][T24580] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8453'. [ 285.885869][T24580] unsupported nlmsg_type 40 [ 286.038263][T24599] loop8: detected capacity change from 0 to 512 [ 286.045061][T24599] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.051925][T24599] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 286.062988][T24599] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.8461: iget: bogus i_mode (2355) [ 286.075173][T24599] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.8461: couldn't read orphan inode 15 (err -117) [ 286.087635][T24599] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.100354][T24599] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.218203][T24607] netlink: 536 bytes leftover after parsing attributes in process `syz.8.8464'. [ 286.227434][T24607] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8464'. [ 286.302566][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 286.302584][ T29] audit: type=1326 audit(5442.268:10099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.8.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 286.334181][ T29] audit: type=1326 audit(5442.268:10100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.8.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 286.357400][ T29] audit: type=1326 audit(5442.278:10101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.8.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 286.380687][ T29] audit: type=1326 audit(5442.278:10102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.8.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 286.403986][ T29] audit: type=1326 audit(5442.278:10103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.8.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 286.427157][ T29] audit: type=1326 audit(5442.278:10104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.8.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 286.450293][ T29] audit: type=1326 audit(5442.278:10105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.8.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 286.473431][ T29] audit: type=1326 audit(5442.298:10106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.8.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 286.513762][ T29] audit: type=1326 audit(5442.478:10107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24618 comm="syz.8.8470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 286.537071][ T29] audit: type=1326 audit(5442.478:10108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24618 comm="syz.8.8470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 286.567050][T24622] netlink: 'syz.8.8471': attribute type 12 has an invalid length. [ 286.575097][T24622] netlink: 'syz.8.8471': attribute type 29 has an invalid length. [ 286.582946][T24622] netlink: 148 bytes leftover after parsing attributes in process `syz.8.8471'. [ 286.592301][T24622] netlink: 'syz.8.8471': attribute type 12 has an invalid length. [ 286.600245][T24622] netlink: 'syz.8.8471': attribute type 29 has an invalid length. [ 286.608073][T24622] netlink: 148 bytes leftover after parsing attributes in process `syz.8.8471'. [ 286.707541][T24640] SELinux: failed to load policy [ 286.824705][T24657] 9pnet_fd: Insufficient options for proto=fd [ 286.869707][T24662] ------------[ cut here ]------------ [ 286.875250][T24662] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 286.895388][T24662] WARNING: CPU: 0 PID: 24662 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680 [ 286.905894][T24662] Modules linked in: [ 286.909821][T24662] CPU: 0 UID: 0 PID: 24662 Comm: syz.6.8486 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 286.921273][T24662] Tainted: [W]=WARN [ 286.925103][T24662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.935224][T24662] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 286.941702][T24662] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 32 f9 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 286.961386][T24662] RSP: 0018:ffffc9000122f408 EFLAGS: 00010282 [ 286.967487][T24662] RAX: 06eb50ec5c7d0600 RBX: ffff888119b70040 RCX: 0000000000080000 [ 286.975576][T24662] RDX: ffffc9000b695000 RSI: 0000000000013be9 RDI: 0000000000013bea [ 286.983630][T24662] RBP: 0000000000000000 R08: 0001c9000122f257 R09: 0000000000000000 [ 286.986706][T24671] loop8: detected capacity change from 0 to 512 [ 286.991669][T24662] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888119b70000 [ 286.991685][T24662] R13: ffff888146ca0000 R14: ffff888146ca0000 R15: ffff888119b70038 [ 286.998512][T24671] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 287.005951][T24662] FS: 00007fcc579776c0(0000) GS:ffff8882aee13000(0000) knlGS:0000000000000000 [ 287.031503][T24662] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.038122][T24662] CR2: 00007f9cecc3ef98 CR3: 0000000140158000 CR4: 00000000003506f0 [ 287.046281][T24662] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.054347][T24662] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 287.062560][T24662] Call Trace: [ 287.065865][T24662] [ 287.068831][T24662] reg_set_min_max+0x1eb/0x260 [ 287.073668][T24662] check_cond_jmp_op+0x1370/0x19e0 [ 287.078827][T24662] do_check+0x3363/0x8460 [ 287.083245][T24662] do_check_common+0xc5e/0x12b0 [ 287.088146][T24662] bpf_check+0xaaae/0xd9d0 [ 287.092707][T24662] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 287.098983][T24662] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 287.105539][T24662] ? pcpu_block_update+0x24e/0x3b0 [ 287.110952][T24662] ? pcpu_block_refresh_hint+0x157/0x170 [ 287.116849][T24662] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 287.123151][T24662] ? css_rstat_updated+0xb7/0x240 [ 287.128456][T24662] ? __rcu_read_unlock+0x4f/0x70 [ 287.133716][T24662] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 287.139726][T24662] ? bpf_prog_alloc+0x5b/0x150 [ 287.144801][T24662] ? pcpu_alloc_noprof+0xd29/0x1250 [ 287.150207][T24662] ? should_fail_ex+0x30/0x280 [ 287.155174][T24662] ? should_failslab+0x8c/0xb0 [ 287.160194][T24662] ? __kmalloc_noprof+0x2a2/0x570 [ 287.165445][T24662] ? security_bpf_prog_load+0x60/0x140 [ 287.171112][T24662] ? selinux_bpf_prog_load+0xad/0xd0 [ 287.176608][T24662] ? security_bpf_prog_load+0x9e/0x140 [ 287.182261][T24662] bpf_prog_load+0xf6e/0x1100 [ 287.187138][T24662] ? security_bpf+0x2b/0x90 [ 287.191921][T24662] __sys_bpf+0x469/0x7c0 [ 287.196342][T24662] __x64_sys_bpf+0x41/0x50 [ 287.200990][T24662] x64_sys_call+0x2aee/0x3000 [ 287.205836][T24662] do_syscall_64+0xd2/0x200 [ 287.210589][T24662] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 287.216881][T24662] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 287.222870][T24662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.228944][T24662] RIP: 0033:0x7fcc58f0efc9 [ 287.233614][T24662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.253453][T24662] RSP: 002b:00007fcc57977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 287.262080][T24662] RAX: ffffffffffffffda RBX: 00007fcc59165fa0 RCX: 00007fcc58f0efc9 [ 287.270293][T24662] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 287.278468][T24662] RBP: 00007fcc58f91f91 R08: 0000000000000000 R09: 0000000000000000 [ 287.286709][T24662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.294927][T24662] R13: 00007fcc59166038 R14: 00007fcc59165fa0 R15: 00007ffc22917d58 [ 287.303141][T24662] [ 287.306334][T24662] ---[ end trace 0000000000000000 ]--- [ 287.388394][T24687] netlink: 'syz.6.8496': attribute type 29 has an invalid length. [ 287.400840][T24687] netlink: 'syz.6.8496': attribute type 29 has an invalid length. [ 287.421600][T24689] lo speed is unknown, defaulting to 1000 [ 287.521480][T24697] sd 0:0:1:0: device reset [ 287.677164][T24713] loop6: detected capacity change from 0 to 512 [ 287.700045][T24713] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 287.751132][T24713] tipc: Started in network mode [ 287.756137][T24713] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 287.765510][T24713] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 287.773785][T24713] tipc: Enabled bearer , priority 10 [ 287.821240][T24730] blktrace: Concurrent blktraces are not allowed on loop6 [ 288.022632][T24759] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 288.032957][T24763] macvtap0: entered promiscuous mode [ 288.039191][T24763] macvtap0: left promiscuous mode [ 288.485932][T24807] netlink: 'syz.2.8552': attribute type 10 has an invalid length. [ 288.509871][T24807] ipvlan0: entered allmulticast mode [ 288.515575][T24807] veth0_vlan: entered allmulticast mode [ 288.525741][T24807] team0: Device ipvlan0 failed to register rx_handler [ 288.534247][T24810] __nla_validate_parse: 3 callbacks suppressed [ 288.534265][T24810] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8553'. [ 288.687410][T24829] netlink: 'syz.3.8563': attribute type 21 has an invalid length. [ 288.853250][T24846] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 288.922264][ T3424] tipc: Node number set to 1 [ 290.480364][T24978] netlink: 64 bytes leftover after parsing attributes in process `syz.8.8607'. [ 290.689085][T25008] loop8: detected capacity change from 0 to 2048 [ 290.750354][T25008] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.993260][T10849] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.411217][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 291.411236][ T29] audit: type=1326 audit(5447.378:10322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25100 comm="syz.2.8633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 291.481298][ T29] audit: type=1326 audit(5447.378:10323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25100 comm="syz.2.8633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 291.504515][ T29] audit: type=1326 audit(5447.378:10324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25100 comm="syz.2.8633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 291.527641][ T29] audit: type=1326 audit(5447.378:10325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25100 comm="syz.2.8633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 291.550805][ T29] audit: type=1326 audit(5447.378:10326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25100 comm="syz.2.8633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 291.573973][ T29] audit: type=1326 audit(5447.378:10327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25100 comm="syz.2.8633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 291.597302][ T29] audit: type=1326 audit(5447.378:10328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25100 comm="syz.2.8633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 291.620472][ T29] audit: type=1326 audit(5447.418:10329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25100 comm="syz.2.8633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 291.643752][ T29] audit: type=1326 audit(5447.418:10330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25100 comm="syz.2.8633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 291.666826][ T29] audit: type=1326 audit(5447.438:10331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25100 comm="syz.2.8633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 291.821409][T25125] loop6: detected capacity change from 0 to 1024 [ 291.834903][T25125] EXT4-fs: Ignoring removed orlov option [ 291.852662][T25125] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.864393][T25137] netlink: 'syz.8.8646': attribute type 10 has an invalid length. [ 291.873500][T25125] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.882885][T25137] bond0: (slave dummy0): Releasing backup interface [ 291.896084][T25137] team0: Port device dummy0 added [ 291.928346][T25145] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8648'. [ 291.943956][T25145] xfrm1: entered promiscuous mode [ 291.949123][T25145] xfrm1: entered allmulticast mode [ 291.954600][T25145] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8648'. [ 292.062186][T25164] loop8: detected capacity change from 0 to 128 [ 292.262963][T25189] loop9: detected capacity change from 0 to 128 [ 292.632343][T25249] netlink: 80 bytes leftover after parsing attributes in process `+}[@'. [ 294.347969][T25255] loop6: detected capacity change from 0 to 8192 [ 294.552839][T25352] loop6: detected capacity change from 0 to 512 [ 294.592917][T25352] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 294.593032][T25352] EXT4-fs (loop6): orphan cleanup on readonly fs [ 294.594802][T25352] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8699: corrupted inode contents [ 294.594946][T25352] EXT4-fs (loop6): Remounting filesystem read-only [ 294.595042][T25352] EXT4-fs (loop6): 1 truncate cleaned up [ 294.595145][ T9744] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 294.595217][ T9744] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 294.595241][ T9744] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 294.595953][T25352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 294.623823][T18651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.889256][T25385] Falling back ldisc for ttyS3. [ 295.159772][T25413] netlink: 444 bytes leftover after parsing attributes in process `syz.6.8712'. [ 295.159792][T25413] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8712'. [ 295.337450][T25429] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8720'. [ 295.346482][T25429] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8720'. [ 295.357032][T25427] netlink: 'syz.2.8719': attribute type 3 has an invalid length. [ 295.357052][T25427] netlink: 'syz.2.8719': attribute type 3 has an invalid length. [ 295.527993][T25457] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8728'. [ 295.537271][T25457] netlink: 'syz.6.8728': attribute type 18 has an invalid length. [ 295.558305][T25457] vxlan0: entered promiscuous mode [ 295.566168][ T999] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.575223][ T999] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.588706][ T999] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.617326][ T999] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.054214][T25515] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 296.422168][ T29] kauditd_printk_skb: 1354 callbacks suppressed [ 296.422184][ T29] audit: type=1400 audit(5452.379:11680): avc: denied { prog_load } for pid=25548 comm="syz.6.8776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 296.620333][T25552] netlink: 35 bytes leftover after parsing attributes in process `syz.3.8777'. [ 296.629417][T25552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8777'. [ 296.664174][ T29] audit: type=1400 audit(5452.619:11681): avc: denied { read write } for pid=21044 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 296.699357][ T29] audit: type=1400 audit(5452.659:11682): avc: denied { read write } for pid=25553 comm="syz.9.8778" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 296.723105][ T29] audit: type=1400 audit(5452.679:11683): avc: denied { allowed } for pid=25553 comm="syz.9.8778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 296.742345][ T29] audit: type=1400 audit(5452.679:11684): avc: denied { prog_load } for pid=25555 comm="syz.2.8779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 296.761216][ T29] audit: type=1400 audit(5452.679:11685): avc: denied { open } for pid=25555 comm="syz.2.8779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 296.780215][ T29] audit: type=1400 audit(5452.679:11686): avc: denied { map_create } for pid=25555 comm="syz.2.8779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 296.799084][ T29] audit: type=1400 audit(5452.679:11687): avc: denied { prog_load } for pid=25555 comm="syz.2.8779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 296.850823][ T29] audit: type=1400 audit(5452.779:11688): avc: denied { prog_load } for pid=25557 comm="syz.2.8780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 296.869601][ T29] audit: type=1400 audit(5452.779:11689): avc: denied { create } for pid=25557 comm="syz.2.8780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 296.957645][T25570] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8787'. [ 297.061245][T25594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8798'. [ 297.159968][T25612] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 297.185795][T25616] netlink: 'syz.8.8808': attribute type 4 has an invalid length. [ 297.193922][T25616] netlink: 'syz.8.8808': attribute type 4 has an invalid length. [ 297.271437][T25624] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8811'. [ 297.820408][T25688] netlink: 'syz.3.8842': attribute type 21 has an invalid length. [ 298.163724][T25735] IPv6: NLM_F_CREATE should be specified when creating new route [ 298.430036][T25775] Cannot find set identified by id 0 to match [ 299.030656][T25901] ip6gre2: entered allmulticast mode [ 300.139308][T26101] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 300.243141][T26114] netlink: 'syz.2.9046': attribute type 15 has an invalid length. [ 300.251222][T26114] __nla_validate_parse: 8 callbacks suppressed [ 300.251241][T26114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9046'. [ 300.402423][ T999] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 300.410936][T26114] netlink: 'syz.2.9046': attribute type 15 has an invalid length. [ 300.418902][T26114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9046'. [ 300.433803][ T999] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 300.449849][ T999] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 300.458411][ T999] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 300.745329][T26162] IPv6: NLM_F_CREATE should be specified when creating new route [ 300.900451][T26182] netlink: 'syz.8.9078': attribute type 16 has an invalid length. [ 300.908453][T26182] netlink: 156 bytes leftover after parsing attributes in process `syz.8.9078'. crond[3105]: time disparity of 86 minutes detected [ 301.274994][T26226] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9098'. [ 301.303339][ T999] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 301.317231][ T999] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 301.348701][ T999] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 301.367427][ T999] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 301.435287][ T29] kauditd_printk_skb: 1184 callbacks suppressed [ 301.435303][ T29] audit: type=1400 audit(5457.390:12874): avc: denied { read write } for pid=10849 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 301.495765][ T29] audit: type=1400 audit(5457.410:12875): avc: denied { map_create } for pid=26245 comm="syz.8.9111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 301.514743][ T29] audit: type=1400 audit(5457.410:12876): avc: denied { prog_load } for pid=26245 comm="syz.8.9111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 301.533560][ T29] audit: type=1400 audit(5457.410:12877): avc: denied { prog_load } for pid=26245 comm="syz.8.9111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 301.552791][ T29] audit: type=1400 audit(5457.410:12878): avc: denied { mounton } for pid=26245 comm="syz.8.9111" path="/1363" dev="tmpfs" ino=7047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 301.574766][ T29] audit: type=1400 audit(5457.410:12879): avc: denied { read write } for pid=10849 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 301.598952][ T29] audit: type=1400 audit(5457.410:12880): avc: denied { map_create } for pid=26247 comm="syz.8.9112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 301.617822][ T29] audit: type=1400 audit(5457.430:12881): avc: denied { prog_load } for pid=26247 comm="syz.8.9112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 301.636768][ T29] audit: type=1400 audit(5457.430:12882): avc: denied { create } for pid=26247 comm="syz.8.9112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 301.657091][ T29] audit: type=1400 audit(5457.430:12883): avc: denied { read write } for pid=18651 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 301.688241][T26275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26275 comm=syz.2.9121 [ 301.785733][T26295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9133'. [ 301.800100][T26297] netlink: 'syz.6.9134': attribute type 5 has an invalid length. [ 302.592417][T26346] xt_hashlimit: max too large, truncated to 1048576 [ 302.954335][T26433] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 303.090215][T26459] netlink: 'syz.2.9208': attribute type 19 has an invalid length. [ 303.098203][T26459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9208'. [ 303.110406][T26459] netlink: 'syz.2.9208': attribute type 19 has an invalid length. [ 303.118367][T26459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9208'. [ 303.251028][T26481] netlink: 'syz.3.9218': attribute type 4 has an invalid length. [ 303.259292][T26481] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9218'. [ 303.278286][T26481] .`: renamed from bond0 (while UP) [ 303.347093][T26489] x_tables: duplicate underflow at hook 1 [ 303.596281][T26549] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26549 comm=syz.2.9247 [ 303.642296][ T999] Bluetooth: hci0: Frame reassembly failed (-84) [ 304.134221][T26665] ALSA: seq fatal error: cannot create timer (-19) [ 304.158851][T26671] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9304'. [ 304.348421][T26694] netlink: 'syz.9.9315': attribute type 21 has an invalid length. [ 304.356313][T26694] netlink: 132 bytes leftover after parsing attributes in process `syz.9.9315'. [ 305.232322][T26744] vlan2: entered promiscuous mode [ 305.237458][T26744] macvlan1: entered promiscuous mode [ 305.377241][T26778] IPv6: NLM_F_CREATE should be specified when creating new route [ 305.418414][T26782] bridge_slave_0: left allmulticast mode [ 305.424163][T26782] bridge_slave_0: left promiscuous mode [ 305.429893][T26782] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.447370][T26782] bridge_slave_1: left allmulticast mode [ 305.453068][T26782] bridge_slave_1: left promiscuous mode [ 305.458761][T26782] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.477720][T26782] bond0: (slave bond_slave_0): Releasing backup interface [ 305.488360][T26782] bond0: (slave bond_slave_1): Releasing backup interface [ 305.500544][T26782] team0: Port device team_slave_0 removed [ 305.508071][T26782] team0: Port device team_slave_1 removed [ 305.515500][T26793] xt_hashlimit: max too large, truncated to 1048576 [ 305.523267][T26793] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 305.527992][T26782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.545384][T26782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.553108][T26782] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 305.569352][T26788] netem: change failed [ 305.669233][T26803] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 305.699851][ T3630] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 305.728549][T26823] __nla_validate_parse: 2 callbacks suppressed [ 305.728577][T26823] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9367'. [ 305.743825][T26823] netlink: 'syz.6.9367': attribute type 9 has an invalid length. [ 305.787181][T26818] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 305.793776][T26818] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 305.801457][T26818] vhci_hcd vhci_hcd.0: Device attached [ 305.822391][T26828] vhci_hcd: connection closed [ 305.822675][ T9744] vhci_hcd: stop threads [ 305.831703][ T9744] vhci_hcd: release socket [ 305.836180][ T9744] vhci_hcd: disconnect device [ 306.438374][ T29] kauditd_printk_skb: 999 callbacks suppressed [ 306.438388][ T29] audit: type=1400 audit(5462.401:13883): avc: denied { prog_load } for pid=26922 comm="syz.3.9412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 306.463531][ T29] audit: type=1400 audit(5462.401:13884): avc: denied { prog_load } for pid=26922 comm="syz.3.9412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 306.482404][ T29] audit: type=1400 audit(5462.401:13885): avc: denied { create } for pid=26922 comm="syz.3.9412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 306.501660][ T29] audit: type=1400 audit(5462.411:13886): avc: denied { open } for pid=26916 comm="syz.9.9409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 306.520676][ T29] audit: type=1400 audit(5462.411:13887): avc: denied { prog_load } for pid=26916 comm="syz.9.9409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 306.541422][ T29] audit: type=1400 audit(5462.431:13888): avc: denied { read write } for pid=21044 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 306.565361][ T29] audit: type=1400 audit(5462.441:13889): avc: denied { map_create } for pid=26925 comm="syz.3.9413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 306.584184][ T29] audit: type=1400 audit(5462.441:13890): avc: denied { prog_load } for pid=26925 comm="syz.3.9413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 306.602952][ T29] audit: type=1400 audit(5462.461:13891): avc: denied { map_create } for pid=26928 comm="syz.3.9415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 306.621787][ T29] audit: type=1400 audit(5462.461:13892): avc: denied { prog_load } for pid=26928 comm="syz.3.9415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 306.738748][T26946] netlink: 'syz.3.9423': attribute type 1 has an invalid length. [ 306.755134][T26946] bond0: entered promiscuous mode [ 306.760668][T26946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.814828][T26946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.835850][T26946] bond0: (slave bond1): making interface the new active one [ 306.843253][T26946] bond1: entered promiscuous mode [ 306.851270][T27026] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9430'. [ 306.861312][T26946] bond0: (slave bond1): Enslaving as an active interface with an up link [ 307.398231][T27097] netlink: 96 bytes leftover after parsing attributes in process `syz.8.9462'. [ 308.513757][T27247] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9530'. [ 308.780451][T27295] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9551'. [ 308.905256][T27306] veth2: entered promiscuous mode [ 308.910368][T27306] veth2: entered allmulticast mode [ 309.121981][T27349] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9571'. [ 309.131124][T27349] netlink: 196 bytes leftover after parsing attributes in process `syz.6.9571'. [ 309.141635][T27349] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9571'. [ 309.153040][T27349] netlink: 196 bytes leftover after parsing attributes in process `syz.6.9571'. [ 309.488793][T27426] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 310.116391][T27510] netlink: 'syz.2.9647': attribute type 39 has an invalid length. [ 310.340932][T27526] netlink: 'syz.8.9654': attribute type 10 has an invalid length. [ 310.360935][T27526] team0 (unregistering): Port device team_slave_0 removed [ 310.376759][T27526] team0 (unregistering): Port device team_slave_1 removed [ 310.405154][T27526] team0 (unregistering): Port device dummy0 removed [ 310.757956][T27594] IPv6: NLM_F_CREATE should be specified when creating new route [ 311.421992][T27675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.429275][T27675] IPv6: NLM_F_CREATE should be set when creating new route [ 311.436561][T27675] IPv6: NLM_F_CREATE should be set when creating new route [ 311.446261][ T29] kauditd_printk_skb: 976 callbacks suppressed [ 311.446278][ T29] audit: type=1400 audit(5467.412:14869): avc: denied { create } for pid=27678 comm="syz.3.9710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 311.451522][T27675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.453588][ T29] audit: type=1400 audit(5467.412:14870): avc: denied { prog_load } for pid=27676 comm="syz.9.9709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 311.505414][ T29] audit: type=1400 audit(5467.452:14871): avc: denied { map_create } for pid=27680 comm="syz.2.9711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 311.524363][ T29] audit: type=1400 audit(5467.452:14872): avc: denied { prog_load } for pid=27680 comm="syz.2.9711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 311.543115][ T29] audit: type=1400 audit(5467.452:14873): avc: denied { prog_load } for pid=27680 comm="syz.2.9711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 311.557238][T27691] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9715'. [ 311.561879][ T29] audit: type=1400 audit(5467.452:14874): avc: denied { read } for pid=27680 comm="syz.2.9711" dev="nsfs" ino=4026533286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 311.591665][ T29] audit: type=1400 audit(5467.462:14875): avc: denied { prog_load } for pid=27676 comm="syz.9.9709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 311.619453][ T29] audit: type=1400 audit(5467.482:14876): avc: denied { read write } for pid=21044 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 311.643424][ T29] audit: type=1400 audit(5467.502:14877): avc: denied { map_create } for pid=27688 comm="syz.2.9713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 311.662349][ T29] audit: type=1400 audit(5467.502:14878): avc: denied { prog_load } for pid=27688 comm="syz.2.9713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 311.930328][T27740] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9736'. [ 311.939787][T27740] 0X: renamed from caif0 [ 311.947694][T27740] 0X: entered allmulticast mode [ 311.952961][T27740] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 312.164592][T27785] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.9752'. [ 312.184693][T27780] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.9752'. [ 313.263224][T27866] IPv6: NLM_F_CREATE should be specified when creating new route [ 313.301745][T27871] can0: slcan on ttyS3. [ 313.319032][T27880] netlink: 'syz.8.9788': attribute type 1 has an invalid length. [ 313.344522][T27880] 8021q: adding VLAN 0 to HW filter on device bond2 [ 313.368550][T27880] bond2: (slave geneve2): making interface the new active one [ 313.376542][T27871] can0 (unregistered): slcan off ttyS3. [ 313.379529][T27880] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 313.384485][T27871] Falling back ldisc for ttyS3. [ 313.395787][ T999] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.405802][ T999] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.414711][ T999] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.426515][ T999] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.467708][T27936] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9801'. [ 313.499627][T27941] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9804'. [ 313.513577][T27943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9805'. [ 313.564614][T27943] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 313.671624][T27977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9819'. [ 313.680621][T27977] netlink: 'syz.2.9819': attribute type 9 has an invalid length. [ 313.703027][ T9736] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 313.713260][ T9736] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 313.724523][ T9736] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 313.755415][ T9736] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 313.843833][ T9] IPVS: starting estimator thread 0... [ 313.849700][T27993] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 313.935439][T28009] IPVS: using max 1920 ests per chain, 96000 per kthread [ 314.116680][T28052] binfmt_misc: register: failed to install interpreter file ./file2 [ 314.240596][T28094] netlink: 14 bytes leftover after parsing attributes in process `syz.9.9872'. [ 314.258197][T28094] bond0 (unregistering): Released all slaves [ 314.276963][T28098] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28098 comm=syz.8.9873 [ 314.463747][T28169] netlink: 'syz.9.9891': attribute type 1 has an invalid length. [ 314.499388][T28169] bond0: entered promiscuous mode [ 314.505015][T28169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.565907][T28169] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.576240][T28169] bond0: (slave bond1): making interface the new active one [ 314.583668][T28169] bond1: entered promiscuous mode [ 314.589943][T28169] bond0: (slave bond1): Enslaving as an active interface with an up link [ 314.912623][T28326] netlink: 'syz.3.9932': attribute type 10 has an invalid length. [ 314.921191][T28326] netlink: 'syz.3.9932': attribute type 10 has an invalid length. [ 314.929127][T28326] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9932'. [ 315.057960][T28359] netlink: 'syz.3.9946': attribute type 4 has an invalid length. [ 315.108302][T28359] netlink: 'syz.3.9946': attribute type 4 has an invalid length. [ 315.510701][T28453] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 315.555468][T28465] netlink: 'syz.9.9994': attribute type 1 has an invalid length. [ 315.574549][T28465] 8021q: adding VLAN 0 to HW filter on device bond2 [ 315.592803][T28465] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 315.602203][T28465] bond2: (slave batadv1): making interface the new active one [ 315.611335][T28465] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 315.758540][T28540] netlink: 'syz.6.10010': attribute type 4 has an invalid length. [ 315.866458][T28560] lo speed is unknown, defaulting to 1000 [ 316.450901][T28595] lo speed is unknown, defaulting to 1000 [ 316.476332][ T29] kauditd_printk_skb: 1106 callbacks suppressed [ 316.476349][ T29] audit: type=1400 audit(5472.443:15985): avc: denied { allowed } for pid=28613 comm="syz.3.10027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 316.501826][ T29] audit: type=1326 audit(5472.453:15986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28594 comm="syz.8.10036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 316.525137][ T29] audit: type=1326 audit(5472.453:15987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28594 comm="syz.8.10036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 316.548416][ T29] audit: type=1326 audit(5472.463:15988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28594 comm="syz.8.10036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 316.571617][ T29] audit: type=1400 audit(5472.463:15989): avc: denied { prog_load } for pid=28594 comm="syz.8.10036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 316.590511][ T29] audit: type=1326 audit(5472.463:15990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28594 comm="syz.8.10036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 316.613747][ T29] audit: type=1326 audit(5472.463:15991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28594 comm="syz.8.10036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 316.637001][ T29] audit: type=1400 audit(5472.463:15992): avc: denied { prog_load } for pid=28594 comm="syz.8.10036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 316.656065][ T29] audit: type=1326 audit(5472.463:15993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28594 comm="syz.8.10036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 316.679322][ T29] audit: type=1326 audit(5472.463:15994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28594 comm="syz.8.10036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 316.799836][T28646] netem: change failed [ 316.964765][T28666] veth2: entered promiscuous mode [ 316.969975][T28666] veth2: entered allmulticast mode [ 317.696652][T28731] netlink: 'syz.3.10082': attribute type 21 has an invalid length. [ 317.704642][T28731] netlink: 168 bytes leftover after parsing attributes in process `syz.3.10082'. [ 317.987667][T28773] $H: renamed from bond0 [ 317.994101][T28773] $H: entered promiscuous mode [ 317.999298][T28773] bond_slave_0: entered promiscuous mode [ 318.005145][T28773] bond_slave_1: entered promiscuous mode [ 318.340482][T28831] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10117'. [ 318.432619][T28846] lo speed is unknown, defaulting to 1000 [ 318.842811][T28908] ALSA: seq fatal error: cannot create timer (-19) [ 318.854952][ T9733] Bluetooth: hci0: Frame reassembly failed (-84) [ 318.955851][T28940] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 318.968512][T28940] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 319.050137][T28956] bridge_slave_0: left promiscuous mode [ 319.055946][T28956] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.064644][T28956] bridge_slave_1: left allmulticast mode [ 319.070564][T28956] bridge_slave_1: left promiscuous mode [ 319.076343][T28956] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.085132][T28956] $H: (slave bond_slave_0): Releasing backup interface [ 319.092554][T28956] bond_slave_0: left promiscuous mode [ 319.099495][T28956] $H: (slave bond_slave_1): Releasing backup interface [ 319.107831][T28956] bond_slave_1: left promiscuous mode [ 319.113712][T28956] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 319.114051][T28961] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 319.195258][T28971] netlink: 'syz.8.10159': attribute type 19 has an invalid length. [ 319.203315][T28971] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10159'. [ 319.222840][T28971] netlink: 'syz.8.10159': attribute type 19 has an invalid length. [ 319.230914][T28971] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10159'. [ 319.266043][T28985] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 319.274384][T28985] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 319.376488][T29001] lo speed is unknown, defaulting to 1000 [ 319.398577][T29010] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 319.686352][T29074] syzkaller0: entered promiscuous mode [ 319.691888][T29074] syzkaller0: entered allmulticast mode [ 319.806363][T29093] netlink: 'syz.6.10201': attribute type 4 has an invalid length. [ 319.842187][T29097] netlink: 'syz.6.10204': attribute type 16 has an invalid length. [ 319.850263][T29097] netlink: 156 bytes leftover after parsing attributes in process `syz.6.10204'. [ 320.473049][T29201] lo speed is unknown, defaulting to 1000 [ 320.884211][ T3864] Bluetooth: hci0: command 0x1003 tx timeout [ 320.884260][ T3630] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 320.894362][T29265] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.10264'. [ 320.916228][T29256] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.10264'. [ 321.147219][T29313] netlink: 5 bytes leftover after parsing attributes in process `syz.3.10288'. [ 321.156824][T29313] 0{X: renamed from gretap0 (while UP) [ 321.164780][T29313] 0{X: entered allmulticast mode [ 321.186945][T29313] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 321.490111][ T29] kauditd_printk_skb: 1006 callbacks suppressed [ 321.490129][ T29] audit: type=1400 audit(5477.454:17001): avc: denied { read write } for pid=21044 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 321.541058][T29366] lo speed is unknown, defaulting to 1000 [ 321.568679][ T29] audit: type=1400 audit(5477.474:17002): avc: denied { prog_load } for pid=29361 comm="syz.2.10320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 321.587571][ T29] audit: type=1400 audit(5477.474:17003): avc: denied { create } for pid=29361 comm="syz.2.10320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 321.607117][ T29] audit: type=1400 audit(5477.484:17004): avc: denied { prog_load } for pid=29361 comm="syz.2.10320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 321.625950][ T29] audit: type=1400 audit(5477.494:17005): avc: denied { write } for pid=29365 comm="syz.9.10310" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 321.644126][T29387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10313'. [ 321.648582][ T29] audit: type=1400 audit(5477.494:17006): avc: denied { open } for pid=29365 comm="syz.9.10310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 321.676502][ T29] audit: type=1400 audit(5477.494:17007): avc: denied { open } for pid=29365 comm="syz.9.10310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 321.695566][ T29] audit: type=1400 audit(5477.524:17008): avc: denied { read write } for pid=10849 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 321.769698][ T29] audit: type=1400 audit(5477.694:17009): avc: denied { open } for pid=29384 comm="syz.8.10314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 321.788776][ T29] audit: type=1400 audit(5477.714:17010): avc: denied { prog_load } for pid=29397 comm="syz.3.10315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 321.887263][T29415] netlink: 'syz.9.10323': attribute type 1 has an invalid length. [ 321.923445][T29415] 8021q: adding VLAN 0 to HW filter on device bond3 [ 321.982361][T29415] bond3: (slave geneve3): making interface the new active one [ 322.001893][T29415] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 322.057256][ T999] netdevsim netdevsim9 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 322.077707][T29469] netlink: 348 bytes leftover after parsing attributes in process `syz.3.10328'. [ 322.090054][ T999] netdevsim netdevsim9 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 322.213992][ T999] netdevsim netdevsim9 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 322.223952][ T999] netdevsim netdevsim9 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 322.334520][T29491] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29491 comm=syz.9.10342 [ 322.390677][T19298] IPVS: starting estimator thread 0... [ 322.489548][T29499] IPVS: using max 2400 ests per chain, 120000 per kthread [ 322.808297][T29581] netlink: 'syz.3.10373': attribute type 1 has an invalid length. [ 322.816240][T29581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10373'. [ 322.857217][ T9715] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.857259][T29581] netlink: 'syz.3.10373': attribute type 1 has an invalid length. [ 322.873362][T29581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10373'. [ 322.883129][ T9715] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.901044][ T9715] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.915807][ T9715] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.927484][T29599] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10383'. [ 323.080998][T29627] ip6gre2: entered promiscuous mode [ 323.086458][T29627] ip6gre2: entered allmulticast mode [ 323.094700][ T999] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 323.102315][ T999] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 323.110511][T29627] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 323.134169][ T2967] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 323.335440][T29666] netlink: 'syz.8.10412': attribute type 6 has an invalid length. [ 323.424027][ T2967] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 323.439556][T29679] IPv6: sit1: Disabled Multicast RS [ 323.447025][T29679] sit1: entered allmulticast mode [ 323.504172][ T2967] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 323.532537][T29696] netlink: 'syz.9.10424': attribute type 10 has an invalid length. [ 323.663931][T29696] ipvlan0: entered allmulticast mode [ 323.669295][T29696] veth0_vlan: entered allmulticast mode [ 323.697882][T29696] team0: Device ipvlan0 failed to register rx_handler [ 323.800521][T29720] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 323.863228][T29728] serio: Serial port ptm0 [ 324.009842][T29755] ALSA: seq fatal error: cannot create timer (-19) [ 324.037522][T29760] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 324.387628][T29809] netlink: 'syz.6.10476': attribute type 1 has an invalid length. [ 324.419459][T29809] bond1: entered promiscuous mode [ 324.430332][T29809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.495704][T29809] 8021q: adding VLAN 0 to HW filter on device bond2 [ 324.515581][T29809] bond1: (slave bond2): making interface the new active one [ 324.523001][T29809] bond2: entered promiscuous mode [ 324.535125][T29809] bond1: (slave bond2): Enslaving as an active interface with an up link [ 324.754845][T29929] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29929 comm=+}[@ [ 325.017093][T29977] netlink: 'syz.8.10519': attribute type 3 has an invalid length. [ 325.062345][T29987] netlink: 'syz.6.10524': attribute type 4 has an invalid length. [ 325.263591][T30000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10528'. [ 325.263978][T30000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10528'. [ 325.282343][T30000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10528'. [ 325.282589][T30000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10528'. [ 326.016293][T30049] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 326.059046][T30057] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 326.167892][T30078] binfmt_misc: register: failed to install interpreter file ./file0 [ 326.201024][T30085] netlink: 'syz.2.10564': attribute type 12 has an invalid length. [ 326.247979][T30099] netlink: 'syz.6.10569': attribute type 13 has an invalid length. [ 326.258909][T30099] gretap0: refused to change device tx_queue_len [ 326.265820][T30099] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 326.493207][ T29] kauditd_printk_skb: 962 callbacks suppressed [ 326.493267][ T29] audit: type=1400 audit(5482.455:17973): avc: denied { prog_load } for pid=30136 comm="syz.3.10585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 326.520846][ T29] audit: type=1400 audit(5482.465:17974): avc: denied { map_create } for pid=30138 comm="syz.9.10586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 326.539893][ T29] audit: type=1400 audit(5482.485:17975): avc: denied { prog_load } for pid=30138 comm="syz.9.10586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 326.559514][ T29] audit: type=1400 audit(5482.485:17976): avc: denied { prog_load } for pid=30138 comm="syz.9.10586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 326.578645][ T29] audit: type=1400 audit(5482.535:17977): avc: denied { prog_load } for pid=30138 comm="syz.9.10586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 326.612043][ T29] audit: type=1400 audit(5482.575:17978): avc: denied { prog_load } for pid=30142 comm="syz.3.10587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 326.631936][T30139] lo speed is unknown, defaulting to 1000 [ 326.676519][ T29] audit: type=1400 audit(5482.635:17979): avc: denied { prog_load } for pid=30163 comm="syz.3.10588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 326.695375][ T29] audit: type=1400 audit(5482.635:17980): avc: denied { create } for pid=30163 comm="syz.3.10588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 326.714760][ T29] audit: type=1400 audit(5482.635:17981): avc: denied { prog_load } for pid=30163 comm="syz.3.10588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 326.750150][ T29] audit: type=1400 audit(5482.695:17982): avc: denied { read write } for pid=21044 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 326.983186][T30171] Falling back ldisc for ttyS3. [ 327.000605][T30202] lo speed is unknown, defaulting to 1000 [ 327.043189][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 327.273088][T30256] wireguard0: entered promiscuous mode [ 327.278654][T30256] wireguard0: entered allmulticast mode [ 327.451372][T30286] netlink: 'syz.6.10628': attribute type 1 has an invalid length. [ 327.505380][T30286] 8021q: adding VLAN 0 to HW filter on device bond3 [ 327.591650][T30286] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 327.622378][T30286] bond3: (slave batadv2): making interface the new active one [ 327.664953][T30286] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 328.043170][T30377] netlink: 'syz.8.10653': attribute type 1 has an invalid length. [ 328.075717][T30377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.104728][T30377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.124857][T30377] bond0: (slave batadv0): making interface the new active one [ 328.134077][T30377] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 328.366718][T30459] IPv6: NLM_F_CREATE should be specified when creating new route [ 328.447066][T30466] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 328.497669][T30473] geneve4: entered promiscuous mode [ 328.513922][ T999] netdevsim netdevsim9 eth0: set [1, 2] type 2 family 0 port 49680 - 0 [ 328.522407][ T999] netdevsim netdevsim9 eth1: set [1, 2] type 2 family 0 port 49680 - 0 [ 328.543049][ T999] netdevsim netdevsim9 eth2: set [1, 2] type 2 family 0 port 49680 - 0 [ 328.576888][ T999] netdevsim netdevsim9 eth3: set [1, 2] type 2 family 0 port 49680 - 0 [ 328.681408][T30496] lo speed is unknown, defaulting to 1000 [ 328.717395][T30511] lo speed is unknown, defaulting to 1000 [ 328.734884][T30539] Q6\bY4: renamed from lo [ 329.509313][T30608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10725'. [ 329.607404][T30621] Q6\bY4 speed is unknown, defaulting to 1000 [ 329.755686][T30668] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10739'. [ 330.173045][T30702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10754'. [ 330.926319][T30727] Q6\bY4 speed is unknown, defaulting to 1000 [ 331.514743][ T29] kauditd_printk_skb: 677 callbacks suppressed [ 331.514761][ T29] audit: type=1400 audit(5487.485:18660): avc: denied { map_create } for pid=30826 comm="syz.2.10801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 331.563529][ T29] audit: type=1400 audit(5487.515:18661): avc: denied { prog_load } for pid=30826 comm="syz.2.10801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 331.582757][ T29] audit: type=1400 audit(5487.515:18662): avc: denied { prog_load } for pid=30826 comm="syz.2.10801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 331.601710][ T29] audit: type=1326 audit(5487.515:18663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30826 comm="syz.2.10801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 331.625083][ T29] audit: type=1326 audit(5487.515:18664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30826 comm="syz.2.10801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 331.648545][ T29] audit: type=1326 audit(5487.515:18665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30828 comm="syz.2.10801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdfd6991885 code=0x7ffc0000 [ 331.672006][ T29] audit: type=1326 audit(5487.515:18666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30826 comm="syz.2.10801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 331.695171][ T29] audit: type=1326 audit(5487.515:18667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30826 comm="syz.2.10801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 331.719098][ T29] audit: type=1326 audit(5487.675:18668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30828 comm="syz.2.10801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 331.782367][ T29] audit: type=1400 audit(5487.735:18669): avc: denied { allowed } for pid=30829 comm="syz.2.10803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 331.834438][T30836] Q6\bY4 speed is unknown, defaulting to 1000 [ 332.013636][T30869] netlink: 'syz.8.10809': attribute type 21 has an invalid length. [ 332.021749][T30869] netlink: 168 bytes leftover after parsing attributes in process `syz.8.10809'. [ 332.149856][T30888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10818'. [ 332.159012][T30888] netlink: 'syz.3.10818': attribute type 9 has an invalid length. [ 332.452036][T30931] netlink: 'syz.6.10833': attribute type 21 has an invalid length. [ 332.460283][T30931] netlink: 168 bytes leftover after parsing attributes in process `syz.6.10833'. [ 334.007897][T31043] netlink: 'syz.6.10885': attribute type 1 has an invalid length. [ 334.055616][T31043] bond4: entered promiscuous mode [ 334.060864][T31043] 8021q: adding VLAN 0 to HW filter on device bond4 [ 334.083465][T31043] 8021q: adding VLAN 0 to HW filter on device bond4 [ 334.106537][T31043] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 334.116910][T31043] bond4: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 334.128824][T31043] bond4: (slave vxcan3): making interface the new active one [ 334.136290][T31043] vxcan3: entered promiscuous mode [ 334.143110][T31043] bond4: (slave vxcan3): Enslaving as an active interface with an up link [ 334.194633][T31112] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10898'. [ 334.203660][T31112] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10898'. [ 334.617659][T31171] batadv2: entered promiscuous mode [ 334.622977][T31171] batadv2: entered allmulticast mode [ 334.770088][T31181] Q6\bY4 speed is unknown, defaulting to 1000 [ 334.778083][T31187] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10925'. [ 334.787127][T31187] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10925'. [ 335.201802][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 335.443956][T31259] Q6\bY4 speed is unknown, defaulting to 1000 [ 335.701027][T31289] bond0: (slave dummy0): Releasing backup interface [ 335.709340][T31289] bond0: (slave bond_slave_0): Releasing backup interface [ 335.719317][T31289] bond0: (slave bond_slave_1): Releasing backup interface [ 335.728983][T31289] team0: Port device team_slave_0 removed [ 335.735752][T31289] team0: Port device team_slave_1 removed [ 335.741916][T31289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.749673][T31289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.757899][T31289] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 335.920978][T31301] vlan2: entered promiscuous mode [ 335.926197][T31301] macvlan1: entered promiscuous mode [ 335.969620][T31315] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 335.982177][T31315] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 335.993410][T31315] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 336.244248][T31360] netlink: 'syz.6.10969': attribute type 4 has an invalid length. [ 336.333456][T31360] netlink: 'syz.6.10969': attribute type 4 has an invalid length. [ 336.391685][T31381] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 336.414041][T31379] Q6\bY4 speed is unknown, defaulting to 1000 [ 336.520235][T31414] netlink: 'syz.3.10988': attribute type 10 has an invalid length. [ 336.528522][ T29] kauditd_printk_skb: 506 callbacks suppressed [ 336.528540][ T29] audit: type=1400 audit(5492.496:19176): avc: denied { map_create } for pid=31415 comm="syz.8.10989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 336.570994][ T29] audit: type=1400 audit(5492.526:19177): avc: denied { prog_load } for pid=31415 comm="syz.8.10989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 336.575162][T31414] team0 (unregistering): Port device team_slave_0 removed [ 336.590264][ T29] audit: type=1400 audit(5492.536:19178): avc: denied { read write } for pid=21044 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 336.624429][T31414] team0 (unregistering): Port device team_slave_1 removed [ 336.631705][ T29] audit: type=1400 audit(5492.606:19179): avc: denied { prog_load } for pid=31417 comm="syz.9.10990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 336.667963][ T29] audit: type=1400 audit(5492.606:19180): avc: denied { map_create } for pid=31417 comm="syz.9.10990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 336.687154][ T29] audit: type=1400 audit(5492.606:19181): avc: denied { prog_load } for pid=31417 comm="syz.9.10990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 336.705996][ T29] audit: type=1400 audit(5492.606:19182): avc: denied { prog_load } for pid=31417 comm="syz.9.10990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 336.724901][ T29] audit: type=1400 audit(5492.626:19183): avc: denied { read write } for pid=21044 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 336.748922][ T29] audit: type=1400 audit(5492.636:19184): avc: denied { read write } for pid=10849 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 336.773954][ T29] audit: type=1400 audit(5492.636:19185): avc: denied { map_create } for pid=31419 comm="syz.9.10992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 337.121049][T31526] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 337.247424][T31554] syzkaller1: entered promiscuous mode [ 337.253110][T31554] syzkaller1: entered allmulticast mode [ 337.263417][T31558] netlink: 'syz.9.11038': attribute type 4 has an invalid length. [ 337.624625][T31610] loop9: detected capacity change from 0 to 512 [ 337.645399][T31610] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.673811][T21044] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.979173][T31674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11081'. [ 337.988399][T31674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11081'. [ 338.298799][T31688] netlink: 'syz.8.11095': attribute type 1 has an invalid length. [ 338.383772][T31701] netlink: 'syz.8.11090': attribute type 1 has an invalid length. [ 338.391704][T31701] netlink: 224 bytes leftover after parsing attributes in process `syz.8.11090'. [ 338.597137][T31715] loop6: detected capacity change from 0 to 512 [ 338.604386][T31715] EXT4-fs: Ignoring removed i_version option [ 338.610428][T31715] EXT4-fs: Ignoring removed bh option [ 338.623609][T31715] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.651880][T18651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.866779][T31744] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 338.877161][T31744] vhci_hcd: invalid port number 96 [ 338.882446][T31744] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 338.931209][T31756] loop6: detected capacity change from 0 to 128 [ 338.942429][T31756] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 338.983810][T18651] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 339.008896][T31766] program syz.2.11117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.021210][T31766] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 339.450423][T31807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11135'. [ 339.643701][T31853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11151'. [ 339.860101][T31881] bridge_slave_0: left allmulticast mode [ 339.866014][T31881] bridge_slave_0: left promiscuous mode [ 339.871879][T31881] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.875714][T31879] SELinux: failed to load policy [ 339.895206][T31881] bridge_slave_1: left allmulticast mode [ 339.901161][T31881] bridge_slave_1: left promiscuous mode [ 339.906894][T31881] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.929665][T31885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11163'. [ 339.941105][T31881] .`: (slave bond_slave_0): Releasing backup interface [ 339.965162][T31881] .`: (slave bond_slave_1): Releasing backup interface [ 339.980302][T31881] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 340.430260][T31918] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11174'. [ 340.457848][T31918] A link change request failed with some changes committed already. Interface gre4 may have been left with an inconsistent configuration, please check. [ 340.496437][T31924] xt_hashlimit: max too large, truncated to 1048576 [ 340.569123][T31939] netlink: 48 bytes leftover after parsing attributes in process `syz.6.11181'. [ 340.636157][T31951] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.11192'. [ 340.645896][T31942] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.11192'. [ 340.721699][T31965] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11191'. [ 340.738036][T31965] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 340.849204][T31972] SELinux: failed to load policy [ 341.288976][T32039] netlink: 5 bytes leftover after parsing attributes in process `syz.3.11214'. [ 341.301828][T32039] 1{X: renamed from 30{X (while UP) [ 341.309677][T32039] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 341.613858][ T29] kauditd_printk_skb: 441 callbacks suppressed [ 341.613875][ T29] audit: type=1400 audit(5497.587:19627): avc: denied { append } for pid=32053 comm="syz.2.11220" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 341.681436][ T29] audit: type=1400 audit(5497.657:19628): avc: denied { mount } for pid=32065 comm="syz.6.11225" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 341.708056][T32067] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.11218'. [ 341.718811][ T29] audit: type=1400 audit(5497.677:19629): avc: denied { bind } for pid=32068 comm="syz.8.11227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 341.719830][T32058] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.11218'. [ 341.737996][ T29] audit: type=1400 audit(5497.677:19630): avc: denied { listen } for pid=32068 comm="syz.8.11227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 341.766619][ T29] audit: type=1400 audit(5497.677:19631): avc: denied { accept } for pid=32068 comm="syz.8.11227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 341.818576][ T29] audit: type=1400 audit(5497.787:19632): avc: denied { compute_member } for pid=32072 comm="syz.2.11228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 341.845348][T32075] netlink: 'syz.6.11229': attribute type 13 has an invalid length. [ 341.853502][T32075] netlink: 'syz.6.11229': attribute type 17 has an invalid length. [ 341.892036][T32075] gretap0: refused to change device tx_queue_len [ 341.898946][T32075] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 342.020808][ T29] audit: type=1400 audit(5497.987:19633): avc: denied { create } for pid=32092 comm="syz.2.11236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 342.040199][ T29] audit: type=1400 audit(5497.987:19634): avc: denied { bind } for pid=32092 comm="syz.2.11236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 342.059414][ T29] audit: type=1400 audit(5497.987:19635): avc: denied { connect } for pid=32092 comm="syz.2.11236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 342.079174][ T29] audit: type=1400 audit(5497.987:19636): avc: denied { ioctl } for pid=32092 comm="syz.2.11236" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 342.224305][T32110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11242'. [ 342.290824][T32121] netlink: 'syz.2.11246': attribute type 1 has an invalid length. [ 342.299689][T32121] netlink: 'syz.2.11246': attribute type 1 has an invalid length. [ 342.535643][T32139] netlink: 'syz.6.11251': attribute type 1 has an invalid length. [ 342.574583][T32139] 8021q: adding VLAN 0 to HW filter on device bond5 [ 342.588000][T32141] bond0: (slave dummy0): Releasing backup interface [ 342.622286][T32141] bridge_slave_0: left promiscuous mode [ 342.628049][T32141] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.671470][T32141] bridge_slave_1: left allmulticast mode [ 342.677168][T32141] bridge_slave_1: left promiscuous mode [ 342.682912][T32141] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.702898][T32141] bond0: (slave bond_slave_0): Releasing backup interface [ 342.712239][T32141] bond0: (slave bond_slave_1): Releasing backup interface [ 342.723745][T32141] team0: Port device team_slave_0 removed [ 342.732541][T32141] team0: Port device team_slave_1 removed [ 342.748289][T32141] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 342.777254][T32139] bond5: (slave geneve2): making interface the new active one [ 342.800804][T32139] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 342.809977][ T111] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.830016][ T111] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.856514][ T111] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.888646][ T111] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.027405][T32198] netlink: 'syz.6.11260': attribute type 1 has an invalid length. [ 343.072470][T32198] netlink: 'syz.6.11260': attribute type 1 has an invalid length. [ 343.146232][T32219] netlink: 'syz.8.11265': attribute type 1 has an invalid length. [ 343.164948][T32219] bond3: entered promiscuous mode [ 343.170210][T32219] 8021q: adding VLAN 0 to HW filter on device bond3 [ 343.202757][T32219] 8021q: adding VLAN 0 to HW filter on device bond4 [ 343.213433][T32219] bond3: (slave bond4): making interface the new active one [ 343.220813][T32219] bond4: entered promiscuous mode [ 343.227121][T32219] bond3: (slave bond4): Enslaving as an active interface with an up link [ 343.265366][T32295] SELinux: failed to load policy [ 343.298784][T32304] netlink: 'syz.2.11269': attribute type 1 has an invalid length. [ 343.328145][T32304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 343.348448][T32345] netlink: 'syz.9.11276': attribute type 1 has an invalid length. [ 343.384131][T32355] ip6gre1: entered promiscuous mode [ 343.389511][T32355] ip6gre1: entered allmulticast mode [ 343.396124][ T9736] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 343.403853][ T9736] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 343.420317][ T3424] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 343.439544][T32361] bond3: entered promiscuous mode [ 343.445023][T32361] 8021q: adding VLAN 0 to HW filter on device bond3 [ 343.480065][T32361] 8021q: adding VLAN 0 to HW filter on device bond4 [ 343.489525][T32361] bond3: (slave bond4): making interface the new active one [ 343.497177][T32361] bond4: entered promiscuous mode [ 343.503404][T32361] bond3: (slave bond4): Enslaving as an active interface with an up link [ 343.524266][T32433] SELinux: failed to load policy [ 343.606127][T32452] bond4: entered promiscuous mode [ 343.611577][T32452] 8021q: adding VLAN 0 to HW filter on device bond4 [ 343.647604][T32452] 8021q: adding VLAN 0 to HW filter on device bond5 [ 343.660037][T32452] bond4: (slave bond5): making interface the new active one [ 343.667490][T32452] bond5: entered promiscuous mode [ 343.673811][T32452] bond4: (slave bond5): Enslaving as an active interface with an up link [ 343.830274][ T2967] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 344.199386][T32543] loop8: detected capacity change from 0 to 4096 [ 344.207996][T32543] EXT4-fs: Ignoring removed nomblk_io_submit option [ 344.227858][T32527] bond2: entered promiscuous mode [ 344.230609][T32543] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.233254][T32527] 8021q: adding VLAN 0 to HW filter on device bond2 [ 344.246425][ T3424] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 344.296937][T32552] 8021q: adding VLAN 0 to HW filter on device bond3 [ 344.345285][T32552] bond2: (slave bond3): making interface the new active one [ 344.352690][T32552] bond3: entered promiscuous mode [ 344.395886][T32552] bond2: (slave bond3): Enslaving as an active interface with an up link [ 345.089435][T32639] ipvlan0: entered allmulticast mode [ 345.093732][T10849] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.094950][T32639] veth0_vlan: entered allmulticast mode [ 345.109751][T32635] __nla_validate_parse: 18 callbacks suppressed [ 345.109771][T32635] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11299'. [ 345.120488][T32637] ALSA: seq fatal error: cannot create timer (-19) [ 345.132694][T32635] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11299'. [ 345.156546][T32635] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11299'. [ 345.168026][T32635] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11299'. [ 345.186094][T32646] loop6: detected capacity change from 0 to 1024 [ 345.200061][T32635] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11299'. [ 345.218376][T32644] SELinux: failed to load policy [ 345.234580][T32646] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.278430][T32661] ip6gre1: entered promiscuous mode [ 345.283856][T32661] ip6gre1: entered allmulticast mode [ 345.307136][ T111] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.314975][ T111] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.326336][T32661] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.334006][ T2967] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.415454][ T9736] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 345.430909][ T9736] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 345.443553][ T9736] EXT4-fs (loop6): This should not happen!! Data will be lost [ 345.443553][ T9736] [ 345.453423][ T9736] EXT4-fs (loop6): Total free blocks count 0 [ 345.459715][ T9736] EXT4-fs (loop6): Free/Dirty block details [ 345.465743][ T9736] EXT4-fs (loop6): free_blocks=68451041280 [ 345.471692][ T9736] EXT4-fs (loop6): dirty_blocks=320 [ 345.476908][ T9736] EXT4-fs (loop6): Block reservation details [ 345.482959][ T9736] EXT4-fs (loop6): i_reserved_data_blocks=20 [ 345.491757][T18651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.548395][T32679] bond4: entered promiscuous mode [ 345.556610][T32679] 8021q: adding VLAN 0 to HW filter on device bond4 [ 345.566310][T32717] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 345.583415][T32717] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 345.631069][T32725] 8021q: adding VLAN 0 to HW filter on device bond5 [ 345.644598][T32725] bond4: (slave bond5): making interface the new active one [ 345.652022][T32725] bond5: entered promiscuous mode [ 345.658055][T32725] bond4: (slave bond5): Enslaving as an active interface with an up link [ 345.749103][ T323] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 345.772374][ T331] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 345.780307][ T2967] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.784984][ T331] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 345.807987][ T331] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 345.831239][ T326] ip6gre1: entered promiscuous mode [ 345.836531][ T326] ip6gre1: entered allmulticast mode [ 345.886908][ T349] syzkaller0: entered promiscuous mode [ 345.892499][ T349] syzkaller0: entered allmulticast mode [ 345.905277][ T347] Q6\bY4 speed is unknown, defaulting to 1000 [ 345.920692][ T358] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 345.933332][ T358] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 346.077664][ T397] syzkaller0: entered promiscuous mode [ 346.083412][ T397] syzkaller0: entered allmulticast mode [ 346.099253][ T391] SELinux: failed to load policy [ 346.206228][ T414] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 346.268536][ T424] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 346.281041][ T424] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 346.292879][ T424] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 346.402222][ T436] Q6\bY4 speed is unknown, defaulting to 1000 [ 346.480711][ T473] ip6gre3: entered promiscuous mode [ 346.486003][ T473] ip6gre3: entered allmulticast mode [ 346.544355][ T528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11360'. [ 346.554592][ T528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11360'. [ 346.565218][ T528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11360'. [ 346.574866][ T528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11360'. [ 346.584866][ T528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11360'. [ 346.616668][ T536] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 346.693268][ T543] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 346.705791][ T543] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 346.716638][ T543] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 347.048840][ T566] validate_nla: 13 callbacks suppressed [ 347.048855][ T566] netlink: 'syz.9.11388': attribute type 4 has an invalid length. [ 347.085142][ T568] Q6\bY4 speed is unknown, defaulting to 1000 [ 348.763303][ T630] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 348.849793][ T639] loop9: detected capacity change from 0 to 8192 [ 348.858252][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 348.858271][ T29] audit: type=1400 audit(5504.828:19698): avc: denied { mount } for pid=636 comm="syz.9.11401" name="/" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 348.886111][ T650] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 348.898071][ T29] audit: type=1326 audit(5504.868:19699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.3.11392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2eb7efc9 code=0x7ffc0000 [ 348.978045][ T29] audit: type=1326 audit(5504.898:19700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.3.11392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e2eb7efc9 code=0x7ffc0000 [ 349.001233][ T29] audit: type=1326 audit(5504.898:19701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.3.11392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2eb7efc9 code=0x7ffc0000 [ 349.024366][ T29] audit: type=1326 audit(5504.898:19702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.3.11392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2eb7efc9 code=0x7ffc0000 [ 349.047476][ T29] audit: type=1326 audit(5504.898:19703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.3.11392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e2eb7efc9 code=0x7ffc0000 [ 349.070675][ T29] audit: type=1326 audit(5504.898:19704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.3.11392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2eb7efc9 code=0x7ffc0000 [ 349.093777][ T29] audit: type=1326 audit(5504.898:19705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.3.11392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2eb7efc9 code=0x7ffc0000 [ 349.116873][ T29] audit: type=1326 audit(5504.898:19706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.3.11392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e2eb7efc9 code=0x7ffc0000 [ 349.140034][ C0] ip6_tnl_xmit_ctl: 8 callbacks suppressed [ 349.140049][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.153444][ T29] audit: type=1326 audit(5504.898:19707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.3.11392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2eb7efc9 code=0x7ffc0000 [ 349.207563][ T670] ALSA: seq fatal error: cannot create timer (-19) [ 349.255760][T21044] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 349.263682][T21044] FAT-fs (loop9): Filesystem has been set read-only [ 349.354551][ T692] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 349.522390][ T706] syzkaller1: entered promiscuous mode [ 349.527934][ T706] syzkaller1: entered allmulticast mode [ 350.536964][ T749] __nla_validate_parse: 12 callbacks suppressed [ 350.536985][ T749] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11446'. [ 350.552374][ T749] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11446'. [ 350.670553][ T762] syzkaller1: entered promiscuous mode [ 350.676169][ T762] syzkaller1: entered allmulticast mode [ 350.799023][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 351.198972][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 351.437899][ T820] netlink: 'syz.9.11462': attribute type 1 has an invalid length. [ 351.445950][ T820] netlink: 224 bytes leftover after parsing attributes in process `syz.9.11462'. [ 351.771753][ T853] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11473'. [ 351.838071][ T859] netlink: 'syz.2.11476': attribute type 1 has an invalid length. [ 351.846287][ T859] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11476'. [ 351.868669][ T867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11480'. [ 351.898876][ T877] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 352.086176][ T892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11488'. [ 352.210331][ T907] netlink: 5 bytes leftover after parsing attributes in process `syz.2.11494'. [ 352.220595][ T908] netlink: 'syz.6.11493': attribute type 1 has an invalid length. [ 352.228464][ T908] netlink: 224 bytes leftover after parsing attributes in process `syz.6.11493'. [ 352.231919][ T907] 0{X: renamed from gretap0 [ 352.280421][ T907] 0{X: entered allmulticast mode [ 352.293935][ T907] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 352.417806][ T934] netlink: 5 bytes leftover after parsing attributes in process `syz.8.11514'. [ 352.427004][ T934] 0{X: renamed from gretap0 [ 352.438451][ T934] 0{X: entered allmulticast mode [ 352.449621][ T934] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 352.599265][ T948] loop9: detected capacity change from 0 to 512 [ 352.632807][ T948] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.678276][T21044] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.853986][ T971] loop8: detected capacity change from 0 to 128 [ 353.138457][ T977] syz.8.11517: attempt to access beyond end of device [ 353.138457][ T977] loop8: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 353.152093][ T977] Buffer I/O error on dev loop8, logical block 128, lost async page write [ 353.161056][ T977] syz.8.11517: attempt to access beyond end of device [ 353.161056][ T977] loop8: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 353.174778][ T977] Buffer I/O error on dev loop8, logical block 128, lost async page write [ 353.272462][ T983] 0{X: renamed from gretap0 [ 353.291086][ T983] 0{X: entered allmulticast mode [ 353.297353][ T983] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 353.337706][ T989] program syz.8.11525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.458907][ T1007] netlink: 'syz.2.11541': attribute type 13 has an invalid length. [ 353.466884][ T1007] netlink: 'syz.2.11541': attribute type 17 has an invalid length. [ 353.495468][ T1007] 0{X: left allmulticast mode [ 353.526709][ T1007] 0{X: refused to change device tx_queue_len [ 353.538978][ T1007] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 353.555018][ T9] Q6\bY4 speed is unknown, defaulting to 1000 [ 353.561965][ T9] syz2: Port: 1 Link ACTIVE [ 353.578671][ T1018] loop6: detected capacity change from 0 to 128 [ 353.601122][ T1021] loop9: detected capacity change from 0 to 512 [ 353.619316][ T1021] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.11548: bg 0: block 393: padding at end of block bitmap is not set [ 353.643966][ T1021] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 353.653513][ T1021] EXT4-fs (loop9): 2 truncates cleaned up [ 353.659943][ T1021] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.790769][T21044] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.813677][T19298] hid_parser_main: 8 callbacks suppressed [ 353.813696][T19298] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 353.827008][T19298] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 353.834499][T19298] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 353.842142][T19298] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 353.849601][T19298] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 353.857009][T19298] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 353.864517][T19298] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 353.871998][T19298] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 353.879509][T19298] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 353.887040][T19298] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 353.919637][T19298] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz1 [ 353.966359][ T1028] syz.6.11537: attempt to access beyond end of device [ 353.966359][ T1028] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 353.979921][ T1028] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 353.989058][ T1028] syz.6.11537: attempt to access beyond end of device [ 353.989058][ T1028] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 354.002729][ T1028] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 354.186752][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 354.186799][ T29] audit: type=1326 audit(5510.149:19875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1066 comm="syz.2.11550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 354.217556][ T29] audit: type=1326 audit(5510.189:19876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1066 comm="syz.2.11550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 354.257860][ T1073] Q6\bY4 speed is unknown, defaulting to 1000 [ 354.266501][ T29] audit: type=1326 audit(5510.239:19877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.8.11532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe6f04eb099 code=0x7fc00000 [ 354.293261][ T1077] netlink: 'syz.9.11551': attribute type 13 has an invalid length. [ 354.301381][ T1077] netlink: 'syz.9.11551': attribute type 17 has an invalid length. [ 354.323369][ T29] audit: type=1326 audit(5510.279:19878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1066 comm="syz.2.11550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 354.346682][ T29] audit: type=1326 audit(5510.279:19879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1066 comm="syz.2.11550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd695efc9 code=0x7ffc0000 [ 354.369805][ T29] audit: type=1326 audit(5510.279:19880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1084 comm="syz.8.11552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 354.392986][ T29] audit: type=1326 audit(5510.279:19881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1084 comm="syz.8.11552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 354.416229][ T29] audit: type=1326 audit(5510.279:19882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1084 comm="syz.8.11552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 354.439543][ T29] audit: type=1326 audit(5510.279:19883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1084 comm="syz.8.11552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 354.462944][ T29] audit: type=1326 audit(5510.279:19884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1084 comm="syz.8.11552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f054efc9 code=0x7ffc0000 [ 354.490747][ T1077] 0{X: left allmulticast mode [ 354.497684][ T1105] loop8: detected capacity change from 0 to 2048 [ 354.504758][ T1077] 0{X: refused to change device tx_queue_len [ 354.511865][ T1077] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 354.528865][ T1105] EXT4-fs: Ignoring removed bh option [ 354.571521][ T1105] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.633170][ T1105] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 354.679013][ T1105] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 354.691306][ T1105] EXT4-fs (loop8): This should not happen!! Data will be lost [ 354.691306][ T1105] [ 354.700987][ T1105] EXT4-fs (loop8): Total free blocks count 0 [ 354.707105][ T1105] EXT4-fs (loop8): Free/Dirty block details [ 354.713090][ T1105] EXT4-fs (loop8): free_blocks=2415919104 [ 354.718976][ T1105] EXT4-fs (loop8): dirty_blocks=32 [ 354.724103][ T1105] EXT4-fs (loop8): Block reservation details [ 354.730248][ T1105] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 354.759372][ T9744] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 355.380353][ T1128] netlink: 'syz.6.11563': attribute type 10 has an invalid length. [ 355.398578][ T1126] loop8: detected capacity change from 0 to 512 [ 355.408459][ T1128] dummy0: entered promiscuous mode [ 355.419094][ T1128] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 355.481501][ T1126] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.529106][T10849] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.688205][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 355.999810][ T1168] loop6: detected capacity change from 0 to 512 [ 356.040727][ T1168] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.078690][T18651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.279304][ T1186] loop6: detected capacity change from 0 to 2048 [ 356.308423][ T1186] EXT4-fs: Ignoring removed bh option [ 356.329491][ T1186] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.367035][ T1186] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 356.382307][ T1186] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 356.394566][ T1186] EXT4-fs (loop6): This should not happen!! Data will be lost [ 356.394566][ T1186] [ 356.404329][ T1186] EXT4-fs (loop6): Total free blocks count 0 [ 356.410374][ T1186] EXT4-fs (loop6): Free/Dirty block details [ 356.416329][ T1186] EXT4-fs (loop6): free_blocks=2415919104 [ 356.422114][ T1186] EXT4-fs (loop6): dirty_blocks=32 [ 356.427359][ T1186] EXT4-fs (loop6): Block reservation details [ 356.433374][ T1186] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 356.492745][ T9736] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 356.634224][ T1212] __nla_validate_parse: 3 callbacks suppressed [ 356.634244][ T1212] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11593'. [ 356.664710][ T1212] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11593'. [ 356.694094][ T1214] loop9: detected capacity change from 0 to 7 [ 356.704912][ T1214] Buffer I/O error on dev loop9, logical block 0, async page read [ 356.713903][ T1214] Buffer I/O error on dev loop9, logical block 0, async page read [ 356.721825][ T1214] loop9: unable to read partition table [ 356.733645][ T1214] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 356.733645][ T1214] ) failed (rc=-5) [ 356.806339][ T1239] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11608'. [ 356.937712][ T1253] netlink: 'syz.9.11614': attribute type 1 has an invalid length. [ 356.957943][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 357.217728][ T1305] loop8: detected capacity change from 0 to 1024 [ 357.246879][ T1305] EXT4-fs: Ignoring removed mblk_io_submit option [ 357.253450][ T1305] EXT4-fs: Ignoring removed bh option [ 357.262607][ T1305] ext3: Unknown parameter 'subj_type' [ 357.506426][ T1355] loop9: detected capacity change from 0 to 128 [ 357.538734][ T1361] vhci_hcd: invalid port number 23 [ 357.562576][ T1363] atomic_op ffff888103f66528 conn xmit_atomic 0000000000000000 [ 357.588897][ T1365] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 357.969722][ T1403] loop9: detected capacity change from 0 to 128 [ 358.059310][ T999] ================================================================== [ 358.067451][ T999] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 358.076922][ T999] [ 358.079262][ T999] write to 0xffff88815dc22155 of 34 bytes by task 1403 on cpu 0: [ 358.086990][ T999] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 358.092904][ T999] generic_perform_write+0x2c2/0x490 [ 358.098195][ T999] __generic_file_write_iter+0x9e/0x120 [ 358.103744][ T999] generic_file_write_iter+0x8d/0x2f0 [ 358.109187][ T999] iter_file_splice_write+0x666/0xa60 [ 358.114572][ T999] direct_splice_actor+0x156/0x2a0 [ 358.119697][ T999] splice_direct_to_actor+0x312/0x680 [ 358.125093][ T999] do_splice_direct+0xda/0x150 [ 358.129895][ T999] do_sendfile+0x380/0x650 [ 358.134328][ T999] __x64_sys_sendfile64+0x105/0x150 [ 358.139539][ T999] x64_sys_call+0x2bb4/0x3000 [ 358.144225][ T999] do_syscall_64+0xd2/0x200 [ 358.148731][ T999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.154713][ T999] [ 358.157037][ T999] read to 0xffff88815dc22000 of 512 bytes by task 999 on cpu 1: [ 358.164663][ T999] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 358.170651][ T999] generic_perform_write+0x2c2/0x490 [ 358.175947][ T999] shmem_file_write_iter+0xc5/0xf0 [ 358.181173][ T999] lo_rw_aio+0x6a0/0x760 [ 358.185437][ T999] loop_process_work+0x52d/0xa60 [ 358.190394][ T999] loop_workfn+0x31/0x40 [ 358.194663][ T999] process_scheduled_works+0x4ce/0x9d0 [ 358.200229][ T999] worker_thread+0x582/0x770 [ 358.204822][ T999] kthread+0x489/0x510 [ 358.208907][ T999] ret_from_fork+0x122/0x1b0 [ 358.213536][ T999] ret_from_fork_asm+0x1a/0x30 [ 358.218318][ T999] [ 358.220646][ T999] Reported by Kernel Concurrency Sanitizer on: [ 358.226799][ T999] CPU: 1 UID: 0 PID: 999 Comm: kworker/u8:6 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 358.238206][ T999] Tainted: [W]=WARN [ 358.242012][ T999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 358.252072][ T999] Workqueue: loop9 loop_workfn [ 358.256862][ T999] ================================================================== [ 358.424969][ T1403] syz.9.11664: attempt to access beyond end of device [ 358.424969][ T1403] loop9: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 358.439136][ T1403] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 358.448074][ T1403] syz.9.11664: attempt to access beyond end of device [ 358.448074][ T1403] loop9: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 358.461700][ T1403] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 359.527574][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!