last executing test programs: 1m51.213705627s ago: executing program 32 (id=1073): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 1m17.924719513s ago: executing program 33 (id=2751): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) 1m1.456354008s ago: executing program 1 (id=3268): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0x2, r2, 0x17, r0}, 0x10) 1m1.439451989s ago: executing program 1 (id=3270): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x2) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m1.416437101s ago: executing program 1 (id=3271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_subtree(r0, 0x0, 0xfdef) 1m1.314881599s ago: executing program 1 (id=3276): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cb19976d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "64885973ff030000000000000000d01cd3160000ffffff7f0000000000002000", [0x200]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 1m1.104385986s ago: executing program 1 (id=3287): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m0.883711134s ago: executing program 1 (id=3306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r1, 0x6a98047402e98331, 0x70bd2a, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 1m0.838249788s ago: executing program 34 (id=3306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r1, 0x6a98047402e98331, 0x70bd2a, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 53.634152837s ago: executing program 5 (id=3706): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740), 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r1, r2}, 0xc) 53.541382044s ago: executing program 5 (id=3711): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 53.536249415s ago: executing program 5 (id=3714): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) cachestat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 53.507825687s ago: executing program 5 (id=3716): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x1) 53.428417474s ago: executing program 5 (id=3720): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 53.176937234s ago: executing program 5 (id=3736): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) 53.168431645s ago: executing program 35 (id=3736): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) 42.070820087s ago: executing program 8 (id=4263): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='?5P\xc3\x00\x00\x00\x00\x00', 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0xc000, 0x1, 0x323}, 0x0, 0x0) 42.005514802s ago: executing program 8 (id=4267): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0x0) 41.862872333s ago: executing program 8 (id=4272): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000840)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0x2, 0xb, 0x1, 0x8001, 0xf205, 0x1, 0x0, 0x74a, 0xff, 0x1ec1, 0x3, 0x281, 0x3, 0x8, 0xe, 0x2, 0x38, 0x6, 0xb2d1, 0xee, 0xc, 0x6, 0x9, 0x5, 0x2, 0x8106, 0x3, 0x6, 0x0, 0xf8d6, 0xfffffffe, 0x400, 0x1, 0x8, 0x56a6, 0x7, 0x52, 0x6, 0x4, 0x6, 0xffffffff, 0x8, 0x4, 0x2, 0x100, 0x1, 0xfffffff9, 0x5, 0x8, 0x1, 0x6, 0x8, 0x6, 0x0, 0x7, 0xfff, 0x4, 0xffffffff, 0x401, 0x1ae, 0xe5, 0x3, 0x2, 0x9, 0x10, 0x0, 0x8, 0x400, 0xc470, 0x0, 0x7ff, 0xa3e, 0xdabc, 0xf5, 0x6, 0xfffffe00, 0x4, 0x5, 0x2, 0x7, 0x10000, 0xd, 0x80000000, 0x101, 0x5f7, 0x3, 0xfffffe01, 0x8e03410, 0x9, 0x2, 0x1, 0x7, 0x7ff, 0x2, 0x0, 0x9, 0x9, 0x8, 0x4, 0x73fb, 0xc, 0x7f, 0x8, 0x7fff, 0xffff20f8, 0x10, 0x1ff, 0x6, 0x4, 0x0, 0x6, 0x1, 0x100, 0x3c4c, 0x5, 0x80000000, 0x3fc0000, 0x6, 0x0, 0x9, 0x5, 0x0, 0x5, 0x9a2a, 0x9, 0x200, 0x7, 0x1, 0x3, 0xf4, 0x1, 0x7ff, 0x6, 0xfffffffb, 0xe5, 0x7, 0x7, 0x6, 0x7fff, 0x1, 0xd267, 0xfff, 0x8, 0x6, 0xae, 0x5cfc, 0x8, 0x5, 0x3, 0x5, 0x40000000, 0x3, 0x80000000, 0x6, 0x1, 0xfffffffd, 0x5, 0x14f, 0x667e, 0x6, 0x7ff, 0x7, 0x7ff, 0x5, 0x1ff, 0x2, 0x400, 0xee1, 0xd, 0x8, 0x9, 0x10001, 0x2, 0x9, 0x3, 0x1, 0x62, 0x5, 0x9, 0x2, 0x0, 0x7, 0x6, 0x8, 0x0, 0x800, 0xa, 0x7, 0x2d8, 0x1a, 0xe, 0xffff, 0x9, 0x78, 0x3, 0x2, 0x3, 0x9, 0xfffffff9, 0x3, 0x8, 0x1ff, 0x7, 0x0, 0x1, 0x9, 0x80, 0x5, 0x6, 0x3, 0x7, 0x8, 0x6, 0x2, 0x8, 0x6, 0x9, 0xffffffff, 0x8, 0x1000, 0x1, 0x8, 0x4, 0xacc6, 0x200, 0x7, 0xffff, 0x1, 0x9, 0xbe0, 0x2, 0x6, 0x22, 0x2, 0x5, 0xffffffff, 0x4, 0x7, 0x4, 0x16, 0xff, 0x6, 0xff, 0x1, 0x2, 0x7ff, 0x4f, 0x1b0c0000, 0x80000000, 0x4, 0x101, 0xac, 0x8, 0x5, 0x8000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0xf0, 0x200, 0x0, 0x800, 0x6, 0x5, 0x0, 0x6, 0xe, 0x7ff, 0x0, 0x293, 0x9, 0xfffffffb, 0xcf8f342, 0x5, 0xbc3d407, 0x7ff, 0xd, 0x4, 0x7, 0x1, 0x1000, 0x7, 0x2, 0xa, 0xdf, 0xb2e, 0xee, 0x935, 0x5, 0x0, 0x5, 0x9, 0xe, 0x61, 0x5, 0x81, 0x1, 0x7, 0x5d9f, 0x2, 0x6, 0x2, 0x10000, 0xc730, 0x6, 0x9, 0xf, 0xe37, 0xfffffffc, 0x5, 0x4, 0x8, 0x6, 0xb, 0xffff, 0x8001, 0x1, 0x6, 0x49, 0x9, 0x4fe, 0x9, 0x4, 0x1, 0x82fa, 0x0, 0xffffffff, 0x101, 0xf, 0x9, 0x9, 0xfffff3f0, 0x9, 0x0, 0x7fffffff, 0x2, 0x4, 0x8, 0x9, 0x2, 0x6e4, 0xfff, 0x9, 0xd, 0x1, 0x10, 0x4, 0x8, 0x7, 0x4e76, 0x74, 0x1, 0x2, 0x9, 0x8, 0x5, 0x1, 0x0, 0x4, 0x1ff, 0xc, 0x8, 0x7, 0x2, 0x9, 0xd0, 0xfffffffc, 0x2, 0x1000, 0x9, 0x57, 0x5351, 0x8001, 0x6, 0x2, 0x0, 0x7f, 0xd877, 0x6, 0xfffffffe, 0x7, 0x3, 0x0, 0x5, 0xbc3b, 0x100, 0x1, 0xd7, 0x0, 0xf418, 0x27e, 0x9f0, 0x7fff, 0x10001, 0x5aaa, 0x1934, 0x400, 0x2, 0x0, 0x4, 0x10000, 0x3ee, 0x0, 0x1656, 0x9d3a, 0xeec8, 0xffffffff, 0x66e, 0x5d, 0x10, 0x2, 0x2, 0x3, 0xffffffff, 0x5, 0xbd0, 0x4, 0x7d72, 0x5, 0x2cc, 0xfb, 0x81, 0x0, 0x80, 0x8, 0x14, 0x5, 0x25, 0x1, 0x200, 0x2, 0x10000, 0x5, 0x7c, 0x7, 0xaff, 0x6, 0xf, 0xd, 0x80000000, 0x1, 0x3, 0x4, 0x1, 0x6, 0x8f2, 0xfff, 0xfffffff7, 0x1, 0x6, 0x1000, 0x6, 0xb, 0x400, 0x3, 0x1, 0x0, 0x101, 0x0, 0xa, 0x4, 0x5, 0x985, 0x5, 0x5, 0xee, 0x9, 0x8, 0x3fcb, 0x6, 0x200, 0x7, 0xfc99, 0x4, 0x5, 0x181693f4, 0x3, 0x6, 0x4, 0x3, 0x5, 0x6, 0x6, 0x40a, 0x5, 0x9, 0x2, 0x40, 0x2f, 0x5, 0x4, 0x9, 0x8, 0x8, 0x8, 0x2, 0x7fff, 0x4, 0x7f, 0x1, 0x3, 0x80000000, 0x9, 0xcba, 0x3, 0x2, 0x3, 0x6, 0x100, 0x2, 0x4, 0x1933, 0x6, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 41.812666818s ago: executing program 8 (id=4277): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cb19976d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "64885973ff030000000000000000d01cd3160000ffffff7f0000000000002000", [0x200]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 41.674229798s ago: executing program 8 (id=4281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x3, 0x0, 0x7ffc1ffb}]}) rt_sigsuspend(0x0, 0x0) 41.53374842s ago: executing program 8 (id=4289): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) 41.53350787s ago: executing program 36 (id=4289): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) 40.727870485s ago: executing program 4 (id=4304): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30) sendfile(r1, r0, 0x0, 0x3ffff) 40.082328487s ago: executing program 4 (id=4315): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1, 0x9a80, 0x6, 0x0) 39.986806624s ago: executing program 4 (id=4306): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 39.92312058s ago: executing program 4 (id=4316): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x1) 39.828136707s ago: executing program 4 (id=4324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) 39.701702797s ago: executing program 4 (id=4338): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 39.701533017s ago: executing program 37 (id=4338): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 38.996384344s ago: executing program 7 (id=4359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001340)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5, 0xffffffff}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x1, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x1000}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x1000, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x100, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x1, 0x5}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, {}, {0x0, 0xfffffff9}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0xfffefffd}, {0x0, 0xffffffff, 0x0, 0xfffffffe}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x40, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {0x0, 0x1}, {0x0, 0xfffffffd}, {0x6}, {0x7f, 0x0, 0x8}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x295}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1, 0xfffffff7}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0xffffffc, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x5}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000, 0x7fffffff}, {0x0, 0x0, 0xfffd}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x7, 0x1}, {}, {0x0, 0x1}, {0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 38.745723484s ago: executing program 7 (id=4365): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000840)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0x2, 0xb, 0x1, 0x8001, 0xf205, 0x1, 0x0, 0x74a, 0xff, 0x1ec1, 0x3, 0x281, 0x3, 0x8, 0xe, 0x2, 0x38, 0x6, 0xb2d1, 0xee, 0xc, 0x6, 0x9, 0x5, 0x2, 0x8106, 0x3, 0x6, 0x0, 0xf8d6, 0xfffffffe, 0x400, 0x1, 0x8, 0x56a6, 0x7, 0x52, 0x6, 0x4, 0x6, 0xffffffff, 0x8, 0x4, 0x2, 0x100, 0x1, 0xfffffff9, 0x5, 0x8, 0x1, 0x6, 0x8, 0x6, 0x0, 0x7, 0xfff, 0x4, 0xffffffff, 0x401, 0x1ae, 0xe5, 0x3, 0x2, 0x9, 0x10, 0x0, 0x8, 0x400, 0xc470, 0x0, 0x7ff, 0xa3e, 0xdabc, 0xf5, 0x6, 0xfffffe00, 0x4, 0x5, 0x2, 0x7, 0x10000, 0xd, 0x80000000, 0x101, 0x5f7, 0x3, 0xfffffe01, 0x8e03410, 0x9, 0x2, 0x1, 0x7, 0x7ff, 0x2, 0x0, 0x9, 0x9, 0x8, 0x4, 0x73fb, 0xc, 0x7f, 0x8, 0x7fff, 0xffff20f8, 0x10, 0x1ff, 0x6, 0x4, 0x0, 0x6, 0x1, 0x100, 0x3c4c, 0x5, 0x80000000, 0x3fc0000, 0x6, 0x0, 0x9, 0x5, 0x0, 0x5, 0x9a2a, 0x9, 0x200, 0x7, 0x1, 0x3, 0xf4, 0x1, 0x7ff, 0x6, 0xfffffffb, 0xe5, 0x7, 0x7, 0x6, 0x7fff, 0x1, 0xd267, 0xfff, 0x8, 0x6, 0xae, 0x5cfc, 0x8, 0x5, 0x3, 0x5, 0x40000000, 0x3, 0x80000000, 0x6, 0x1, 0xfffffffd, 0x5, 0x14f, 0x667e, 0x6, 0x7ff, 0x7, 0x7ff, 0x5, 0x1ff, 0x2, 0x400, 0xee1, 0xd, 0x8, 0x9, 0x10001, 0x2, 0x9, 0x3, 0x1, 0x62, 0x5, 0x9, 0x2, 0x0, 0x7, 0x6, 0x8, 0x0, 0x800, 0xa, 0x7, 0x2d8, 0x1a, 0xe, 0xffff, 0x9, 0x78, 0x3, 0x2, 0x3, 0x9, 0xfffffff9, 0x3, 0x8, 0x1ff, 0x7, 0x0, 0x1, 0x9, 0x80, 0x5, 0x6, 0x3, 0x7, 0x8, 0x6, 0x2, 0x8, 0x6, 0x9, 0xffffffff, 0x8, 0x1000, 0x1, 0x8, 0x4, 0xacc6, 0x200, 0x7, 0xffff, 0x1, 0x9, 0xbe0, 0x2, 0x6, 0x22, 0x2, 0x5, 0xffffffff, 0x4, 0x7, 0x4, 0x16, 0xff, 0x6, 0xff, 0x1, 0x2, 0x7ff, 0x4f, 0x1b0c0000, 0x80000000, 0x4, 0x101, 0xac, 0x8, 0x5, 0x8000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0xf0, 0x200, 0x0, 0x800, 0x6, 0x5, 0x0, 0x6, 0xe, 0x7ff, 0x0, 0x293, 0x9, 0xfffffffb, 0xcf8f342, 0x5, 0xbc3d407, 0x7ff, 0xd, 0x4, 0x7, 0x1, 0x1000, 0x7, 0x2, 0xa, 0xdf, 0xb2e, 0xee, 0x935, 0x5, 0x0, 0x5, 0x9, 0xe, 0x61, 0x5, 0x81, 0x1, 0x7, 0x5d9f, 0x2, 0x6, 0x2, 0x10000, 0xc730, 0x6, 0x9, 0xf, 0xe37, 0xfffffffc, 0x5, 0x4, 0x8, 0x6, 0xb, 0xffff, 0x8001, 0x1, 0x6, 0x49, 0x9, 0x4fe, 0x9, 0x4, 0x1, 0x82fa, 0x0, 0xffffffff, 0x101, 0xf, 0x9, 0x9, 0xfffff3f0, 0x9, 0x0, 0x7fffffff, 0x2, 0x4, 0x8, 0x9, 0x2, 0x6e4, 0xfff, 0x9, 0xd, 0x1, 0x10, 0x4, 0x8, 0x7, 0x4e76, 0x74, 0x1, 0x2, 0x9, 0x8, 0x5, 0x1, 0x0, 0x4, 0x1ff, 0xc, 0x8, 0x7, 0x2, 0x9, 0xd0, 0xfffffffc, 0x2, 0x1000, 0x9, 0x57, 0x5351, 0x8001, 0x6, 0x2, 0x0, 0x7f, 0xd877, 0x6, 0xfffffffe, 0x7, 0x3, 0x0, 0x5, 0xbc3b, 0x100, 0x1, 0xd7, 0x0, 0xf418, 0x27e, 0x9f0, 0x7fff, 0x10001, 0x5aaa, 0x1934, 0x400, 0x2, 0x0, 0x4, 0x10000, 0x3ee, 0x0, 0x1656, 0x9d3a, 0xeec8, 0xffffffff, 0x66e, 0x5d, 0x10, 0x2, 0x2, 0x3, 0xffffffff, 0x5, 0xbd0, 0x4, 0x7d72, 0x5, 0x2cc, 0xfb, 0x81, 0x0, 0x80, 0x8, 0x14, 0x5, 0x25, 0x1, 0x200, 0x2, 0x10000, 0x5, 0x7c, 0x7, 0xaff, 0x6, 0xf, 0xd, 0x80000000, 0x1, 0x3, 0x4, 0x1, 0x6, 0x8f2, 0xfff, 0xfffffff7, 0x1, 0x6, 0x1000, 0x6, 0xb, 0x400, 0x3, 0x1, 0x0, 0x101, 0x0, 0xa, 0x4, 0x5, 0x985, 0x5, 0x5, 0xee, 0x9, 0x8, 0x3fcb, 0x6, 0x200, 0x7, 0xfc99, 0x4, 0x5, 0x181693f4, 0x3, 0x6, 0x4, 0x3, 0x5, 0x6, 0x6, 0x40a, 0x5, 0x9, 0x2, 0x40, 0x2f, 0x5, 0x4, 0x9, 0x8, 0x8, 0x8, 0x2, 0x7fff, 0x4, 0x7f, 0x1, 0x3, 0x80000000, 0x9, 0xcba, 0x3, 0x2, 0x3, 0x6, 0x100, 0x2, 0x4, 0x1933, 0x6, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 37.662429261s ago: executing program 7 (id=4379): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f00000011c0)) 37.570288489s ago: executing program 7 (id=4373): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cb19976d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "64885973ff030000000000000000d01cd3160000ffffff7f0000000000002000", [0x200]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 37.360648226s ago: executing program 7 (id=4391): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) set_tid_address(0x0) 37.208680518s ago: executing program 7 (id=4396): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) 37.208564488s ago: executing program 38 (id=4396): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) 486.11047ms ago: executing program 3 (id=6426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) 461.791503ms ago: executing program 3 (id=6428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0x1000000000]}, 0x8, 0x800) 411.878866ms ago: executing program 3 (id=6431): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) socket$kcm(0xa, 0x3, 0x3a) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 406.039417ms ago: executing program 6 (id=6432): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r1}, 0x38) 388.927038ms ago: executing program 0 (id=6433): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 351.450972ms ago: executing program 6 (id=6435): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffefffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) 351.139411ms ago: executing program 2 (id=6436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) 297.735516ms ago: executing program 0 (id=6438): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 289.179236ms ago: executing program 2 (id=6439): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, 0x0) 261.778479ms ago: executing program 6 (id=6441): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) 242.67392ms ago: executing program 3 (id=6443): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) 223.668212ms ago: executing program 2 (id=6444): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) getxattr(0x0, &(0x7f0000000300)=@known='user.incfs.size\x00', 0x0, 0x0) 210.315743ms ago: executing program 3 (id=6445): prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\x87P\xd8\xb2\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\xfb_\x9fL\xa2\x86\f\xcd\x1b\xd1\xe7\x11\xe8\xe1-\x0f\x1b:\xff\x11~') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4000000000]}, 0x8, 0x0) faccessat2(r1, &(0x7f0000000040)='\x00', 0x2, 0x1200) 193.562004ms ago: executing program 2 (id=6447): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0xe) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 176.840416ms ago: executing program 2 (id=6448): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 162.013596ms ago: executing program 0 (id=6449): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x2}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') mknod(&(0x7f0000003480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2, 0x3) 160.433817ms ago: executing program 3 (id=6450): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c7", 0xb) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 158.966717ms ago: executing program 9 (id=6451): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) setgid(0x0) 138.966818ms ago: executing program 9 (id=6452): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 127.487939ms ago: executing program 0 (id=6453): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) utime(0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000980)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000a00)='./file1\x00') 124.53896ms ago: executing program 6 (id=6463): r0 = memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47f5, 0x6021, 0x0, 0x0, 0x0) 71.230014ms ago: executing program 0 (id=6457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfffffffffffffef9, &(0x7f0000000600)={@local, @remote, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x6, 0x8f, 0x66, 0x0, 0x1, 0x1d, 0x0, @empty, @multicast1}, "c9ad19ba6add0ca9ada1fbc0e33b315fcb7a9ad005d5b9d0411f46bcfe1ab87ff246f0776f8139d621547151b7f701b2d1ee19e3b9adeace0a034da19cb9f8aa01cc19f22b38881865e048fbf5bc87130bf1227554e7ba8544ccff378cceb550b89f8d01f826242d722f5ae85b0275ce75fcdc0131f611bbb8ef92"}}}}, 0x0) 64.026864ms ago: executing program 2 (id=6458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f00000009c0)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000780)={0xf97cff8c, 0x8, 'SE Linux', "5278ecc6fd82df21e7a70810cb3bdb48"}, 0x20) 41.780796ms ago: executing program 6 (id=6459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 27.914907ms ago: executing program 9 (id=6460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c0000060004"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 5.118159ms ago: executing program 9 (id=6461): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write(r1, &(0x7f00000003c0)='#', 0x1) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=6462): fsopen(&(0x7f0000000100)='configfs\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$eJzs3M1qE1EUwPFj0o80tU0WIiiIB92oi6GNL2CQFsSAUhtRF8LUTjRkTMrMWImI7c6tz1FcuhPUF+jGnQt30k0XCm66UCOdjzatQ6u2yYTm/4Myp3Pvydz5CmcGctfvvHpcq7hGxfQklVFJiSzLhkh+MwodC5cpPx6SdstycfT7pzO37t67XiyVpmZUp4uzlwuqOn723dPnr8998EZvvxl/Oyyr+fvr3wpfVk+unlr/NRt9esNTU+caDc+csy2dr7o1Q/WmbZmupdW6azk72it2Y2GhqWZ9fiy74Fiuq2a9qTWrqV5DPaep5kOzWlfDMHQsK/0m/c8Z5ZWZGbPYkcEgCSNxKx2naKZjG8sr3RgUAADoLUnV/4+qrlZdre9X/6eE+r9zqP+PkuNrEvsUuFn/Z8P7d8uln10cGQAAAAAAAAAAAAAAAAAAAAAAOIiNVivXarVy0TL6GxaRjIhE/yc9TnTGQc7/cPeHi0PW9sO9jIj9crG8WA6WQXuxIlWxxZKJQZEf/vUQCuLpa6WpCfXl5b29FOYvLZbT/vXh50fy8fmTQb7uzB+UbPv2C5KTE/I5Lr8Qmz8kF8635RuSk48PpCG2zPvX9Xb+i0nVqzdKu/JH/H4AAAAAABwFhm754/ndbzc0mjZkV3uwcvv9gOT2eT+w6/l6QE4PJLffAAAAAAD0E7f5rGbatuUQ7AiuiMiefZI+dCM9cqA6GKQ2z0HXt/41ujV64yAcarD2JNi1v+mc4JcSAAAAgI7YLvqTHgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1rj2nAMmEXf03U/3/mHmvbXLr7ewgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0jt8BAAD//ysQG/U=") mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) kernel console output (not intermixed with test programs): v/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x127e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 124.085815][T11384] loop6: detected capacity change from 0 to 1024 [ 124.100160][ T29] audit: type=1400 audit(1755071707.540:3202): avc: denied { connect } for pid=11386 comm="syz.7.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.133758][T11384] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.150190][T11384] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 3: comm syz.6.3425: lblock 3 mapped to illegal pblock 3 (length 3) [ 124.165540][T11384] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 124.177837][T11384] EXT4-fs (loop6): This should not happen!! Data will be lost [ 124.177837][T11384] [ 124.192865][T11384] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 124.207868][T11384] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 124.220200][T11384] EXT4-fs (loop6): This should not happen!! Data will be lost [ 124.220200][T11384] [ 124.229832][T11384] EXT4-fs (loop6): Total free blocks count 0 [ 124.235848][T11384] EXT4-fs (loop6): Free/Dirty block details [ 124.241782][T11384] EXT4-fs (loop6): free_blocks=4293918720 [ 124.247575][T11384] EXT4-fs (loop6): dirty_blocks=64 [ 124.252837][T11384] EXT4-fs (loop6): Block reservation details [ 124.258907][T11384] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 124.265446][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3432'. [ 124.265556][T11402] netlink: 268 bytes leftover after parsing attributes in process `syz.4.3433'. [ 124.283604][T11402] unsupported nla_type 65024 [ 124.326439][ T54] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 124.341177][T11406] loop4: detected capacity change from 0 to 1024 [ 124.349618][T11406] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 124.393447][T11413] netlink: 'syz.6.3434': attribute type 21 has an invalid length. [ 124.397203][T11417] loop7: detected capacity change from 0 to 512 [ 124.446839][T11422] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3442'. [ 124.669186][T11456] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 124.716022][T11462] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3461'. [ 124.728132][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3463'. [ 124.891004][T11498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3487'. [ 125.127582][T11548] loop7: detected capacity change from 0 to 1024 [ 125.136070][T11548] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 125.169154][T11557] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11557 comm=syz.4.3504 [ 125.181984][T11557] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11557 comm=syz.4.3504 [ 125.342598][T11588] loop2: detected capacity change from 0 to 512 [ 125.399093][T11597] loop5: detected capacity change from 0 to 1024 [ 125.423487][T11597] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 125.532909][T11617] loop4: detected capacity change from 0 to 256 [ 125.622614][T11627] loop2: detected capacity change from 0 to 512 [ 125.648666][T11634] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 125.749868][T11653] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11653 comm=syz.2.3548 [ 125.762520][T11653] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11653 comm=syz.2.3548 [ 125.815605][T11659] loop7: detected capacity change from 0 to 512 [ 125.824991][T11661] netlink: 'syz.5.3552': attribute type 21 has an invalid length. [ 125.847469][T11663] loop2: detected capacity change from 0 to 1024 [ 125.876191][T11663] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 125.908120][T11671] 9p: Unknown access argument : -22 [ 126.323983][T11739] netdevsim netdevsim7: Direct firmware load for ./file0/file1 failed with error -2 [ 126.579863][T11781] loop7: detected capacity change from 0 to 512 [ 126.595598][T11785] syz.5.3610: attempt to access beyond end of device [ 126.595598][T11785] loop11: rw=0, sector=0, nr_sectors = 1 limit=0 [ 126.610890][T11785] FAT-fs (loop11): unable to read boot sector [ 126.626059][T11781] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 126.634398][T11781] EXT4-fs (loop7): orphan cleanup on readonly fs [ 126.642929][T11781] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.659543][T11781] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 126.666637][T11781] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #16: comm syz.7.3619: casefold flag without casefold feature [ 126.679442][T11793] loop5: detected capacity change from 0 to 512 [ 126.686968][T11781] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.3619: couldn't read orphan inode 16 (err -117) [ 126.701443][T11793] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3614: iget: bad extended attribute block 1 [ 126.725141][T11793] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3614: couldn't read orphan inode 15 (err -117) [ 126.761869][T11805] loop2: detected capacity change from 0 to 1024 [ 126.769261][T11793] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 126.791450][T11806] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1281 sclass=netlink_audit_socket pid=11806 comm=syz.6.3628 [ 126.826931][T11805] ext4 filesystem being mounted at /753/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.857422][T11805] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.3617: lblock 3 mapped to illegal pblock 3 (length 3) [ 126.877609][T11810] pim6reg1: entered promiscuous mode [ 126.891135][T11805] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 126.903608][T11805] EXT4-fs (loop2): This should not happen!! Data will be lost [ 126.903608][T11805] [ 126.934055][T11817] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 126.949062][T11817] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 126.961396][T11817] EXT4-fs (loop2): This should not happen!! Data will be lost [ 126.961396][T11817] [ 126.971050][T11817] EXT4-fs (loop2): Total free blocks count 0 [ 126.977066][T11817] EXT4-fs (loop2): Free/Dirty block details [ 126.983000][T11817] EXT4-fs (loop2): free_blocks=4293918720 [ 126.988733][T11817] EXT4-fs (loop2): dirty_blocks=64 [ 126.993923][T11817] EXT4-fs (loop2): Block reservation details [ 126.993937][T11817] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 127.064829][ T50] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 127.158289][T11850] __nla_validate_parse: 5 callbacks suppressed [ 127.158302][T11850] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3639'. [ 127.315782][T11882] loop5: detected capacity change from 0 to 164 [ 127.326003][T11882] rock: directory entry would overflow storage [ 127.332228][T11882] rock: sig=0x66, size=4, remaining=3 [ 127.356847][T11882] rock: directory entry would overflow storage [ 127.363064][T11882] rock: sig=0x66, size=4, remaining=3 [ 127.372011][T11884] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3657'. [ 127.440736][T11894] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3661'. [ 127.467796][T11896] netlink: 'syz.7.3659': attribute type 4 has an invalid length. [ 127.482856][T11897] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3672'. [ 127.546557][T11907] loop5: detected capacity change from 0 to 512 [ 127.561878][T11907] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.574036][T11907] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 127.591995][T11907] EXT4-fs (loop5): 1 truncate cleaned up [ 127.624260][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3671'. [ 127.633207][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3671'. [ 127.641174][T11922] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1281 sclass=netlink_audit_socket pid=11922 comm=syz.4.3667 [ 127.655231][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3671'. [ 127.713002][T11927] loop4: detected capacity change from 0 to 512 [ 127.729508][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3671'. [ 127.738660][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3671'. [ 127.747901][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3671'. [ 127.748237][T11927] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 127.765109][T11927] EXT4-fs (loop4): orphan cleanup on readonly fs [ 127.771853][T11927] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 127.787461][T11927] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 127.795532][T11927] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #16: comm syz.4.3675: casefold flag without casefold feature [ 127.816281][T11927] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3675: couldn't read orphan inode 16 (err -117) [ 127.918293][T11950] loop7: detected capacity change from 0 to 1024 [ 127.927281][T11950] EXT4-fs: Ignoring removed i_version option [ 127.949643][T11950] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.972332][T11950] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.3683: Invalid block bitmap block 0 in block_group 0 [ 127.989063][T11950] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3683: Failed to acquire dquot type 0 [ 128.000396][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 128.000410][ T29] audit: type=1326 audit(1755071711.440:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.2.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5a7f0ebe9 code=0x7ffc0000 [ 128.030105][ T29] audit: type=1326 audit(1755071711.440:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.2.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7ff5a7f0ebe9 code=0x7ffc0000 [ 128.034097][T11950] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.3683: Freeing blocks not in datazone - block = 0, count = 4096 [ 128.053709][ T29] audit: type=1326 audit(1755071711.440:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.2.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5a7f0ebe9 code=0x7ffc0000 [ 128.091249][T11950] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.3683: Invalid inode bitmap blk 0 in block_group 0 [ 128.104423][T11950] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 128.111837][ T31] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-8 [ 128.122062][ T31] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 128.124227][T11950] EXT4-fs (loop7): 1 orphan inode deleted [ 128.162732][ T29] audit: type=1326 audit(1755071711.590:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11961 comm="syz.2.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5a7f0ebe9 code=0x7ffc0000 [ 128.186309][ T29] audit: type=1326 audit(1755071711.590:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11961 comm="syz.2.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7ff5a7f0ebe9 code=0x7ffc0000 [ 128.209849][ T29] audit: type=1326 audit(1755071711.590:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11961 comm="syz.2.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5a7f0ebe9 code=0x7ffc0000 [ 128.233609][ T29] audit: type=1326 audit(1755071711.600:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11967 comm="syz.4.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dafeebe9 code=0x7ffc0000 [ 128.257372][ T29] audit: type=1326 audit(1755071711.600:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11967 comm="syz.4.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dafeebe9 code=0x7ffc0000 [ 128.280975][ T29] audit: type=1326 audit(1755071711.610:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11967 comm="syz.4.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58dafeebe9 code=0x7ffc0000 [ 128.408565][T11985] loop2: detected capacity change from 0 to 512 [ 128.456106][T11985] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 128.470262][T11985] EXT4-fs (loop2): orphan cleanup on readonly fs [ 128.483051][T11985] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 128.512379][T11985] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 128.544477][T11985] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #16: comm syz.2.3699: casefold flag without casefold feature [ 128.577280][T12006] openvswitch: netlink: Message has 6 unknown bytes. [ 128.591721][T11985] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3699: couldn't read orphan inode 16 (err -117) [ 128.649899][T12021] loop5: detected capacity change from 0 to 128 [ 128.656602][T12018] loop6: detected capacity change from 0 to 1024 [ 128.665220][T12021] ext4 filesystem being mounted at /454/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 128.676215][T12018] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 128.687240][T12018] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 128.697062][T12018] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 128.709366][T12018] EXT4-fs (loop6): invalid journal inode [ 128.724937][T12018] EXT4-fs (loop6): can't get journal size [ 128.732111][T12018] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #3: comm syz.6.3725: blocks 2-2 from inode overlap system zone [ 128.781727][T12018] EXT4-fs (loop6): failed to initialize system zone (-117) [ 128.789018][T12018] EXT4-fs (loop6): mount failed [ 128.841762][T12040] loop6: detected capacity change from 0 to 764 [ 128.848303][T12040] iso9660: Unknown parameter './file1' [ 128.925866][ T50] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.936372][ T50] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.015523][ T50] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.026000][ T50] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.085166][ T50] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.095522][ T50] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.155298][ T50] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.165715][ T50] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.280087][ T50] bridge_slave_1: left allmulticast mode [ 129.285760][ T50] bridge_slave_1: left promiscuous mode [ 129.291492][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.330969][ T50] bridge_slave_0: left allmulticast mode [ 129.336688][ T50] bridge_slave_0: left promiscuous mode [ 129.342555][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.360724][T12106] loop4: detected capacity change from 0 to 1024 [ 129.372630][T12109] loop6: detected capacity change from 0 to 764 [ 129.391358][T12106] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.427917][T12106] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3747: bg 0: block 10: padding at end of block bitmap is not set [ 129.444846][T12106] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3747: Failed to acquire dquot type 0 [ 129.457181][T12106] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3747: Failed to acquire dquot type 0 [ 129.469653][T12106] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.3747: Freeing blocks not in datazone - block = 0, count = 4096 [ 129.484973][T12106] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3747: Failed to acquire dquot type 0 [ 129.500641][T12122] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 129.508119][T12122] vhci_hcd: default hub control req: 0200 v0000 i0000 l31125 [ 129.512140][T12106] EXT4-fs (loop4): 1 orphan inode deleted [ 129.534518][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.550552][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.571173][ T50] bond0 (unregistering): Released all slaves [ 129.604056][T12106] syz.4.3747 (12106) used greatest stack depth: 9072 bytes left [ 129.615435][T12064] chnl_net:caif_netlink_parms(): no params data found [ 129.635423][ T50] hsr_slave_0: left promiscuous mode [ 129.646467][ T50] hsr_slave_1: left promiscuous mode [ 129.655686][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.655787][T12141] loop4: detected capacity change from 0 to 256 [ 129.663435][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.681343][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.688735][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.701003][ T50] veth1_macvtap: left promiscuous mode [ 129.706590][ T50] veth0_macvtap: left promiscuous mode [ 129.717456][ T50] veth1_vlan: left promiscuous mode [ 129.724304][ T50] veth0_vlan: left promiscuous mode [ 129.829481][ T50] team0 (unregistering): Port device team_slave_1 removed [ 129.841533][ T50] team0 (unregistering): Port device team_slave_0 removed [ 129.877815][T12169] netlink: 'syz.2.3781': attribute type 10 has an invalid length. [ 129.892620][T12169] syz_tun: entered promiscuous mode [ 129.903865][T12169] syz_tun: entered allmulticast mode [ 129.909465][T12169] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 129.931502][T12169] netlink: 'syz.2.3781': attribute type 10 has an invalid length. [ 129.944917][T12064] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.952251][T12064] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.959546][T12064] bridge_slave_0: entered allmulticast mode [ 129.966127][T12064] bridge_slave_0: entered promiscuous mode [ 129.972823][T12169] bond0: left allmulticast mode [ 129.977691][T12169] bond_slave_0: left allmulticast mode [ 129.983190][T12169] bond_slave_1: left allmulticast mode [ 129.988664][T12169] syz_tun: left allmulticast mode [ 129.995402][T12169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.004009][T12169] team0: Port device bond0 added [ 130.009568][T12064] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.016680][T12064] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.023948][T12064] bridge_slave_1: entered allmulticast mode [ 130.030316][T12064] bridge_slave_1: entered promiscuous mode [ 130.049220][T12064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.060175][T12064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.082399][T12064] team0: Port device team_slave_0 added [ 130.090823][T12064] team0: Port device team_slave_1 added [ 130.099946][T12186] loop4: detected capacity change from 0 to 512 [ 130.115381][T12186] journal_path: Non-blockdev passed as './bus' [ 130.121937][T12186] EXT4-fs: error: could not find journal device path [ 130.132115][T12064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.139080][T12064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.165129][T12064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.186660][T12064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.193691][T12064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.219804][T12064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.246715][T12064] hsr_slave_0: entered promiscuous mode [ 130.252825][T12064] hsr_slave_1: entered promiscuous mode [ 130.258720][T12064] debugfs: 'hsr0' already exists in 'hsr' [ 130.264486][T12064] Cannot create hsr debugfs directory [ 130.272382][ T50] IPVS: stop unused estimator thread 0... [ 130.376838][T12211] netlink: 'syz.6.3797': attribute type 10 has an invalid length. [ 130.401967][T12211] syz_tun: entered promiscuous mode [ 130.413689][T12211] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 130.425678][T12211] netlink: 'syz.6.3797': attribute type 10 has an invalid length. [ 130.426060][T12064] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 130.442428][T12064] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 130.459900][T12211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.467835][T12211] team0: Port device bond0 added [ 130.473371][T12064] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 130.482153][T12064] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 130.505720][T12064] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.512808][T12064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.520119][T12064] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.527157][T12064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.562749][T12229] loop4: detected capacity change from 0 to 512 [ 130.577415][T12229] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 130.597358][T12235] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12235 comm=syz.2.3808 [ 130.608142][T12064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.621881][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.632646][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.644412][T12229] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3802: Failed to acquire dquot type 1 [ 130.646358][T12064] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.673558][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.680699][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.689481][T12229] EXT4-fs (loop4): 1 truncate cleaned up [ 130.696540][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.703634][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.764790][T12064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.849805][T12064] veth0_vlan: entered promiscuous mode [ 130.857762][T12064] veth1_vlan: entered promiscuous mode [ 130.872797][T12064] veth0_macvtap: entered promiscuous mode [ 130.880085][T12064] veth1_macvtap: entered promiscuous mode [ 130.890792][T12064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.899746][T12064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.911523][ T88] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.922650][ T88] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.931844][ T88] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.940853][ T88] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.975873][T12258] program syz.8.3745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.057801][T12279] netlink: 'syz.7.3811': attribute type 10 has an invalid length. [ 131.069995][T12280] loop6: detected capacity change from 0 to 1024 [ 131.080066][T12279] syz_tun: entered promiscuous mode [ 131.098417][T12280] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.101044][T12279] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 131.135424][T12285] netlink: 'syz.7.3811': attribute type 10 has an invalid length. [ 131.160442][T12280] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 131.198265][T12285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.211196][T12285] team0: Port device bond0 added [ 131.216271][T12280] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 131.228910][T12280] EXT4-fs (loop6): This should not happen!! Data will be lost [ 131.228910][T12280] [ 131.238670][T12280] EXT4-fs (loop6): Total free blocks count 0 [ 131.244760][T12280] EXT4-fs (loop6): Free/Dirty block details [ 131.250828][T12280] EXT4-fs (loop6): free_blocks=4293918720 [ 131.256553][T12280] EXT4-fs (loop6): dirty_blocks=16 [ 131.261691][T12280] EXT4-fs (loop6): Block reservation details [ 131.264920][T12290] loop8: detected capacity change from 0 to 1024 [ 131.267666][T12280] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 131.275566][T12290] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.289242][T12290] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 131.408523][ T23] IPVS: starting estimator thread 0... [ 131.414577][T12300] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 131.507468][T12322] netlink: 'syz.8.3834': attribute type 10 has an invalid length. [ 131.520327][T12322] syz_tun: entered promiscuous mode [ 131.520391][T12309] IPVS: using max 3168 ests per chain, 158400 per kthread [ 131.538038][T12322] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 131.569484][T12322] netlink: 'syz.8.3834': attribute type 10 has an invalid length. [ 131.606549][T12322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.618086][T12333] loop4: detected capacity change from 0 to 1024 [ 131.634771][T12322] team0: Port device bond0 added [ 131.638322][T12333] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.659895][T12333] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 131.756731][ T2956] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 131.764312][ T2956] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 131.771763][ T2956] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 131.792586][ T2956] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 131.849056][T12366] loop7: detected capacity change from 0 to 512 [ 131.861790][T12366] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.961886][T12386] loop8: detected capacity change from 0 to 512 [ 131.981681][T12386] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.140837][T12411] loop7: detected capacity change from 0 to 512 [ 132.147356][T12411] EXT4-fs: Ignoring removed mblk_io_submit option [ 132.154976][T12411] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 132.166931][T12411] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.3875: iget: bad extended attribute block 1 [ 132.179627][T12411] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.3875: couldn't read orphan inode 15 (err -117) [ 132.192193][T12411] EXT4-fs mount: 50 callbacks suppressed [ 132.192209][T12411] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.221165][T12411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.299505][T12432] loop4: detected capacity change from 0 to 512 [ 132.312926][T12432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.325960][T12432] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.342816][T12442] loop7: detected capacity change from 0 to 1024 [ 132.349724][T12442] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 132.387916][ T9787] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.472822][T12463] loop7: detected capacity change from 0 to 1024 [ 132.512787][T12463] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.544370][T11097] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.780095][T12500] netlink: 'syz.6.3914': attribute type 10 has an invalid length. [ 132.816178][T12506] loop9: detected capacity change from 0 to 7 [ 132.824063][T12506] Buffer I/O error on dev loop9, logical block 0, async page read [ 132.844132][T12500] netlink: 'syz.6.3914': attribute type 10 has an invalid length. [ 132.856668][T12506] Buffer I/O error on dev loop9, logical block 0, async page read [ 132.864651][T12506] loop9: unable to read partition table [ 132.872918][T12513] loop7: detected capacity change from 0 to 512 [ 132.892424][T12517] loop8: detected capacity change from 0 to 1024 [ 132.899372][T12506] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 132.899372][T12506] ) failed (rc=-5) [ 132.899876][T12513] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.921379][T12517] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 132.932358][T12517] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 132.960945][T12517] JBD2: no valid journal superblock found [ 132.961290][T12513] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.966716][T12517] EXT4-fs (loop8): Could not load journal inode [ 132.996160][T12513] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.045901][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 133.045915][ T29] audit: type=1400 audit(1755071716.490:3717): avc: denied { write } for pid=12516 comm="syz.8.3923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.085184][T12530] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 133.096502][T12513] EXT4-fs (loop7): shut down requested (0) [ 133.135107][T11097] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.179312][T12541] loop8: detected capacity change from 0 to 512 [ 133.187539][T12545] __nla_validate_parse: 3 callbacks suppressed [ 133.187554][T12545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3935'. [ 133.209483][T12541] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.218168][ T29] audit: type=1400 audit(1755071716.650:3718): avc: denied { cpu } for pid=12538 comm="syz.7.3933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 133.254028][T12541] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.270069][ T29] audit: type=1400 audit(1755071716.700:3719): avc: denied { read } for pid=12546 comm="syz.2.3936" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 133.277684][T12541] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.293197][ T29] audit: type=1400 audit(1755071716.700:3720): avc: denied { open } for pid=12546 comm="syz.2.3936" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 133.349930][ T29] audit: type=1400 audit(1755071716.780:3721): avc: denied { ioctl } for pid=12546 comm="syz.2.3936" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 133.392759][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3939'. [ 133.406126][T12064] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.467735][ T29] audit: type=1326 audit(1755071716.910:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12573 comm="syz.2.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5a7f0ebe9 code=0x7ffc0000 [ 133.491323][ T29] audit: type=1326 audit(1755071716.910:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12573 comm="syz.2.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5a7f0ebe9 code=0x7ffc0000 [ 133.539152][ T29] audit: type=1326 audit(1755071716.970:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12573 comm="syz.2.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5a7f0ebe9 code=0x7ffc0000 [ 133.562802][ T29] audit: type=1326 audit(1755071716.970:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12573 comm="syz.2.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5a7f0ebe9 code=0x7ffc0000 [ 133.586436][ T29] audit: type=1326 audit(1755071716.970:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12573 comm="syz.2.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5a7f0ebe9 code=0x7ffc0000 [ 133.612279][T12583] netem: change failed [ 133.669882][T12592] loop8: detected capacity change from 0 to 164 [ 133.681871][T12592] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 133.692147][T12592] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 133.700536][T12592] Symlink component flag not implemented [ 133.706225][T12592] Symlink component flag not implemented [ 133.712189][T12592] Symlink component flag not implemented (7) [ 133.718226][T12592] Symlink component flag not implemented (116) [ 134.264237][T12601] loop4: detected capacity change from 0 to 512 [ 134.273803][T12601] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.275536][T12599] loop9: detected capacity change from 0 to 7 [ 134.307583][T12599] Buffer I/O error on dev loop9, logical block 0, async page read [ 134.315875][T12599] Buffer I/O error on dev loop9, logical block 0, async page read [ 134.323780][T12599] loop9: unable to read partition table [ 134.330138][T12599] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 134.330138][T12599] ) failed (rc=-5) [ 134.344638][T12601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.357875][T12601] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.373879][T12601] EXT4-fs (loop4): shut down requested (0) [ 134.409295][ T9787] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.410740][T12617] 9p: Unknown access argument : -22 [ 134.462324][T12626] batadv_slave_1: entered promiscuous mode [ 134.469005][T12625] batadv_slave_1: left promiscuous mode [ 134.509268][T12634] loop4: detected capacity change from 0 to 128 [ 134.735309][T12678] loop4: detected capacity change from 0 to 128 [ 134.752487][T12678] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.778113][T12678] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.825984][T12684] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 134.876314][T12692] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000003 [ 134.885352][ T172] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.936876][T12698] netlink: 'syz.8.4004': attribute type 1 has an invalid length. [ 134.983120][T12705] loop9: detected capacity change from 0 to 7 [ 134.989427][T12705] Buffer I/O error on dev loop9, logical block 0, async page read [ 134.992625][T12703] loop7: detected capacity change from 0 to 1024 [ 134.998977][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4009'. [ 135.023379][T12705] Buffer I/O error on dev loop9, logical block 0, async page read [ 135.024611][T12703] ext4: Unknown parameter 'func' [ 135.031346][T12705] loop9: unable to read partition table [ 135.046041][T12705] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 135.046041][T12705] ) failed (rc=-5) [ 135.064622][T12703] loop7: detected capacity change from 0 to 512 [ 135.064986][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.072848][T12703] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.4007: bad orphan inode 15 [ 135.089430][T12703] ext4_test_bit(bit=14, block=5) = 0 [ 135.096806][T12703] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.109944][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.152493][T11097] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.624121][T12780] loop8: detected capacity change from 0 to 1024 [ 135.653984][T12780] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.670908][T12780] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.715781][T12064] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.882907][T12827] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4065'. [ 135.930269][T12834] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4068'. [ 135.988177][T12841] netlink: 'syz.8.4070': attribute type 21 has an invalid length. [ 136.079743][T12860] sctp: [Deprecated]: syz.8.4075 (pid 12860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.079743][T12860] Use struct sctp_sack_info instead [ 136.125079][T12866] wireguard0: entered promiscuous mode [ 136.130677][T12866] wireguard0: entered allmulticast mode [ 136.326324][T12889] GUP no longer grows the stack in syz.8.4087 (12889): 200000004000-20000000a000 (200000002000) [ 136.336822][T12889] CPU: 0 UID: 0 PID: 12889 Comm: syz.8.4087 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 136.336857][T12889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 136.336940][T12889] Call Trace: [ 136.336947][T12889] [ 136.336955][T12889] __dump_stack+0x1d/0x30 [ 136.337111][T12889] dump_stack_lvl+0xe8/0x140 [ 136.337128][T12889] dump_stack+0x15/0x1b [ 136.337142][T12889] __get_user_pages+0x198d/0x1fa0 [ 136.337169][T12889] ? __rcu_read_unlock+0x4f/0x70 [ 136.337189][T12889] get_user_pages_remote+0x1d5/0x6d0 [ 136.337261][T12889] __access_remote_vm+0x15c/0x590 [ 136.337284][T12889] access_remote_vm+0x32/0x40 [ 136.337367][T12889] proc_pid_cmdline_read+0x32b/0x6c0 [ 136.337403][T12889] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 136.337490][T12889] vfs_readv+0x3fb/0x690 [ 136.337544][T12889] __x64_sys_preadv+0xfd/0x1c0 [ 136.337565][T12889] x64_sys_call+0x282a/0x2ff0 [ 136.337585][T12889] do_syscall_64+0xd2/0x200 [ 136.337607][T12889] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 136.337682][T12889] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 136.337704][T12889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.337722][T12889] RIP: 0033:0x7f859be2ebe9 [ 136.337744][T12889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.337759][T12889] RSP: 002b:00007f859a88f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 136.337777][T12889] RAX: ffffffffffffffda RBX: 00007f859c055fa0 RCX: 00007f859be2ebe9 [ 136.337789][T12889] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 136.337800][T12889] RBP: 00007f859beb1e19 R08: 0000000000000000 R09: 0000000000000000 [ 136.337827][T12889] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 136.337838][T12889] R13: 00007f859c056038 R14: 00007f859c055fa0 R15: 00007ffeae8f89b8 [ 136.337933][T12889] [ 136.736867][T12905] netlink: 'syz.8.4095': attribute type 1 has an invalid length. [ 136.762503][T12907] loop8: detected capacity change from 0 to 512 [ 136.772085][T12907] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.816703][T12064] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.874560][T12920] sd 0:0:1:0: device reset [ 136.888503][T12922] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4103'. [ 136.897816][T12922] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4103'. [ 137.041493][T12942] team0: Device gre1 is of different type [ 137.485022][T12996] syzkaller1: entered promiscuous mode [ 137.490582][T12996] syzkaller1: entered allmulticast mode [ 137.545048][T13004] wireguard0: entered promiscuous mode [ 137.550622][T13004] wireguard0: entered allmulticast mode [ 137.684848][T13027] syzkaller1: entered promiscuous mode [ 137.690508][T13027] syzkaller1: entered allmulticast mode [ 137.791728][T13042] loop7: detected capacity change from 0 to 2048 [ 137.841325][T13048] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4162'. [ 137.872244][T13042] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.919402][T11097] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.930966][T13056] pim6reg1: entered promiscuous mode [ 138.040430][T13070] wireguard0: entered promiscuous mode [ 138.045923][T13070] wireguard0: entered allmulticast mode [ 138.084779][T13072] syzkaller1: entered promiscuous mode [ 138.090314][T13072] syzkaller1: entered allmulticast mode [ 138.137683][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 138.137696][ T29] audit: type=1400 audit(1755071721.580:3927): avc: denied { listen } for pid=13087 comm="syz.8.4181" lport=36101 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.168813][ T29] audit: type=1400 audit(1755071721.580:3928): avc: denied { accept } for pid=13087 comm="syz.8.4181" lport=36101 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.191947][ T29] audit: type=1400 audit(1755071721.580:3929): avc: denied { write } for pid=13087 comm="syz.8.4181" lport=36101 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 138.212768][T13094] loop8: detected capacity change from 0 to 2048 [ 138.223328][T13095] syzkaller1: entered promiscuous mode [ 138.228917][T13095] syzkaller1: entered allmulticast mode [ 138.229321][ T29] audit: type=1326 audit(1755071721.640:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13089 comm="syz.6.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d7f5ebe9 code=0x7ffc0000 [ 138.258112][ T29] audit: type=1326 audit(1755071721.640:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13089 comm="syz.6.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d7f5ebe9 code=0x7ffc0000 [ 138.281680][ T29] audit: type=1326 audit(1755071721.670:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13089 comm="syz.6.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1d7f5ebe9 code=0x7ffc0000 [ 138.305335][ T29] audit: type=1326 audit(1755071721.670:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13089 comm="syz.6.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d7f5ebe9 code=0x7ffc0000 [ 138.328858][ T29] audit: type=1326 audit(1755071721.670:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13089 comm="syz.6.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d7f5ebe9 code=0x7ffc0000 [ 138.352504][ T29] audit: type=1326 audit(1755071721.690:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13089 comm="syz.6.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1d7f5ebe9 code=0x7ffc0000 [ 138.376051][ T29] audit: type=1326 audit(1755071721.690:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13089 comm="syz.6.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d7f5ebe9 code=0x7ffc0000 [ 138.412177][T13094] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.450052][T12064] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.494877][T13106] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4190'. [ 138.568405][T13122] program syz.6.4196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.612492][T13127] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4198'. [ 138.666113][T13134] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4201'. [ 138.763525][T13143] netlink: 'syz.4.4205': attribute type 4 has an invalid length. [ 138.854900][T13147] syzkaller1: entered promiscuous mode [ 138.854950][T13147] syzkaller1: entered allmulticast mode [ 138.903648][T13151] wireguard0: entered promiscuous mode [ 138.903663][T13151] wireguard0: entered allmulticast mode [ 139.395872][T13193] syzkaller1: entered promiscuous mode [ 139.395899][T13193] syzkaller1: entered allmulticast mode [ 139.547195][T13205] wireguard0: entered promiscuous mode [ 139.547210][T13205] wireguard0: entered allmulticast mode [ 139.944932][T13256] pim6reg1: entered promiscuous mode [ 139.979410][T13268] loop8: detected capacity change from 0 to 512 [ 139.983084][T13268] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.4257: corrupted in-inode xattr: e_value size too large [ 140.001945][T13268] EXT4-fs (loop8): Remounting filesystem read-only [ 140.009168][T13268] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.066610][T12064] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.096967][ T2956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=2956 comm=kworker/0:2 [ 140.097115][T13275] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 140.151277][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4267'. [ 140.151303][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4267'. [ 140.151349][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4267'. [ 140.165805][T13286] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4269'. [ 140.186406][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4267'. [ 140.219206][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4267'. [ 140.219703][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4267'. [ 140.352361][T13304] loop8: detected capacity change from 0 to 512 [ 140.370417][T13304] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.370533][T13304] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.424581][T13304] loop8: detected capacity change from 512 to 64 [ 140.509080][T12064] bond0: (slave syz_tun): Releasing backup interface [ 140.551566][T12064] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.563838][ T172] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.672129][ T172] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.754072][ T172] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.816201][ T172] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.875260][T13334] chnl_net:caif_netlink_parms(): no params data found [ 140.912136][T13334] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.919195][T13334] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.926495][T13334] bridge_slave_0: entered allmulticast mode [ 140.933071][T13334] bridge_slave_0: entered promiscuous mode [ 140.941995][T13334] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.949150][T13334] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.956406][T13334] bridge_slave_1: entered allmulticast mode [ 140.962923][T13334] bridge_slave_1: entered promiscuous mode [ 140.984208][ T172] bridge_slave_1: left allmulticast mode [ 140.989877][ T172] bridge_slave_1: left promiscuous mode [ 140.995553][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.003319][ T172] bridge_slave_0: left allmulticast mode [ 141.009097][ T172] bridge_slave_0: left promiscuous mode [ 141.014943][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.092962][ T172] team0: Port device bond0 removed [ 141.099172][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.109297][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.118915][ T172] bond0 (unregistering): Released all slaves [ 141.127305][T13334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.138481][T13334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.156462][T13334] team0: Port device team_slave_0 added [ 141.163137][T13334] team0: Port device team_slave_1 added [ 141.175819][ T172] hsr_slave_0: left promiscuous mode [ 141.181716][ T172] hsr_slave_1: left promiscuous mode [ 141.187176][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.194786][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.202301][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.209662][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.219613][ T172] veth1_macvtap: left promiscuous mode [ 141.225253][ T172] veth0_macvtap: left promiscuous mode [ 141.230798][ T172] veth1_vlan: left promiscuous mode [ 141.236101][ T172] veth0_vlan: left promiscuous mode [ 141.288062][ T172] team0 (unregistering): Port device team_slave_1 removed [ 141.298035][ T172] team0 (unregistering): Port device team_slave_0 removed [ 141.329140][T13334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.336209][T13334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.362228][T13334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.373448][T13334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.380558][T13334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.406474][T13334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.466212][T13334] hsr_slave_0: entered promiscuous mode [ 141.480464][T13334] hsr_slave_1: entered promiscuous mode [ 141.490957][T13334] debugfs: 'hsr0' already exists in 'hsr' [ 141.496707][T13334] Cannot create hsr debugfs directory [ 141.590364][T13334] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 141.599320][T13334] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 141.608268][T13334] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 141.616811][T13334] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 141.648051][T13334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.659583][T13334] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.668357][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.675469][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.685463][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.692597][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.755016][T13334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.841943][T13334] veth0_vlan: entered promiscuous mode [ 141.849356][T13334] veth1_vlan: entered promiscuous mode [ 141.863179][T13334] veth0_macvtap: entered promiscuous mode [ 141.870743][T13334] veth1_macvtap: entered promiscuous mode [ 141.881411][T13334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.891621][T13334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.901917][ T172] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.914116][ T172] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.923066][ T172] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.933733][ T172] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.072241][T13399] pim6reg1: entered promiscuous mode [ 142.268976][T13434] netlink: 'syz.6.4312': attribute type 4 has an invalid length. [ 142.329439][T10386] bond0: (slave syz_tun): Releasing backup interface [ 142.407230][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.456710][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.525055][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.631848][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.673306][T13489] netlink: 'syz.2.4341': attribute type 4 has an invalid length. [ 142.792354][ T50] bridge_slave_1: left allmulticast mode [ 142.798023][ T50] bridge_slave_1: left promiscuous mode [ 142.803980][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.819786][ T50] bridge_slave_0: left allmulticast mode [ 142.825504][ T50] bridge_slave_0: left promiscuous mode [ 142.831535][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.860569][T13517] loop7: detected capacity change from 0 to 764 [ 142.869120][T13517] iso9660: Unknown parameter './file1' [ 142.933261][ T50] team0: Port device bond0 removed [ 142.943458][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.946118][ T2956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=2956 comm=kworker/0:2 [ 142.965246][T13528] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 142.973296][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.983168][ T50] bond0 (unregistering): Released all slaves [ 142.994769][T13456] chnl_net:caif_netlink_parms(): no params data found [ 143.057749][T13456] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.064891][T13456] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.073410][T13456] bridge_slave_0: entered allmulticast mode [ 143.079914][T13456] bridge_slave_0: entered promiscuous mode [ 143.088664][T13456] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.095875][T13456] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.104794][T13456] bridge_slave_1: entered allmulticast mode [ 143.111753][T13456] bridge_slave_1: entered promiscuous mode [ 143.125989][ T50] hsr_slave_0: left promiscuous mode [ 143.131965][ T50] hsr_slave_1: left promiscuous mode [ 143.155547][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.163050][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.174183][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.181735][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.182001][T13543] netlink: 'syz.9.4357': attribute type 4 has an invalid length. [ 143.201893][ T50] veth1_macvtap: left promiscuous mode [ 143.207469][ T50] veth0_macvtap: left promiscuous mode [ 143.214148][ T50] veth1_vlan: left promiscuous mode [ 143.219445][ T50] veth0_vlan: left promiscuous mode [ 143.312760][ T50] team0 (unregistering): Port device team_slave_1 removed [ 143.324257][ T50] team0 (unregistering): Port device team_slave_0 removed [ 143.372754][T13456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.383129][T13456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.413561][T13456] team0: Port device team_slave_0 added [ 143.414312][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 143.414325][ T29] audit: type=1326 audit(1755071726.860:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13549 comm="syz.2.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5a7f0ebe9 code=0x7ffc0000 [ 143.448926][ T29] audit: type=1326 audit(1755071726.860:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13549 comm="syz.2.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5a7f0ebe9 code=0x7ffc0000 [ 143.451459][T13456] team0: Port device team_slave_1 added [ 143.475599][ T29] audit: type=1326 audit(1755071726.920:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13549 comm="syz.2.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff5a7f0ebe9 code=0x7ffc0000 [ 143.501535][ T29] audit: type=1326 audit(1755071726.920:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13549 comm="syz.2.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5a7f0ebe9 code=0x7ffc0000 [ 143.525228][ T29] audit: type=1326 audit(1755071726.920:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13549 comm="syz.2.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5a7f0ebe9 code=0x7ffc0000 [ 143.548895][ T29] audit: type=1326 audit(1755071726.920:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13549 comm="syz.2.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7ff5a7f0ebe9 code=0x7ffc0000 [ 143.572638][ T29] audit: type=1326 audit(1755071726.920:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13549 comm="syz.2.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5a7f0ebe9 code=0x7ffc0000 [ 143.596120][ T29] audit: type=1326 audit(1755071726.920:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13549 comm="syz.2.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5a7f0ebe9 code=0x7ffc0000 [ 143.619759][ T29] audit: type=1326 audit(1755071726.920:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13552 comm="syz.9.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 143.643395][ T29] audit: type=1326 audit(1755071726.920:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13552 comm="syz.9.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 143.688105][T13456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.695108][T13456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.721007][T13456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.742458][T13456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.749409][T13456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.775390][T13456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.804417][T13456] hsr_slave_0: entered promiscuous mode [ 143.810924][T13456] hsr_slave_1: entered promiscuous mode [ 143.816679][T13456] debugfs: 'hsr0' already exists in 'hsr' [ 143.822544][T13456] Cannot create hsr debugfs directory [ 144.152466][T13456] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.161326][T13456] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.169978][T13456] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.178612][T13456] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.210455][T13456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.223168][T13456] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.233016][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.240076][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.250320][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.257405][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.313384][T13456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.365907][T13456] veth0_vlan: entered promiscuous mode [ 144.373499][T13456] veth1_vlan: entered promiscuous mode [ 144.387573][T13456] veth0_macvtap: entered promiscuous mode [ 144.394965][T13456] veth1_macvtap: entered promiscuous mode [ 144.405448][T13456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.417806][T13456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.427992][ T88] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.438335][ T88] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.447136][ T88] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.456834][ T88] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.491971][T13577] loop9: detected capacity change from 0 to 512 [ 144.500182][T13577] journal_path: Non-blockdev passed as './bus' [ 144.506372][T13577] EXT4-fs: error: could not find journal device path [ 144.543154][T13587] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 144.592763][T13594] loop7: detected capacity change from 0 to 512 [ 144.616609][T13600] __nla_validate_parse: 5 callbacks suppressed [ 144.616624][T13600] netlink: 76 bytes leftover after parsing attributes in process `syz.9.4376'. [ 144.643120][T13594] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.656952][T13594] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.740481][T13594] loop7: detected capacity change from 512 to 64 [ 144.795962][T13628] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4389'. [ 144.805142][T13628] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4389'. [ 144.816340][T12264] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.822725][T13628] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4389'. [ 144.834480][T13628] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4389'. [ 144.859523][T12264] bond0: (slave syz_tun): Releasing backup interface [ 144.860474][T13628] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4389'. [ 144.875367][T13628] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4389'. [ 144.985865][T10354] bond0: (slave syz_tun): Releasing backup interface [ 145.004414][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.086889][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.100494][T13645] chnl_net:caif_netlink_parms(): no params data found [ 145.137316][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.148362][T13645] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.155513][T13645] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.163028][T13645] bridge_slave_0: entered allmulticast mode [ 145.169543][T13645] bridge_slave_0: entered promiscuous mode [ 145.176342][T13645] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.183601][T13645] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.191429][T13645] bridge_slave_1: entered allmulticast mode [ 145.197811][T13645] bridge_slave_1: entered promiscuous mode [ 145.214307][T13645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.226155][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.238547][T13645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.258323][T13645] team0: Port device team_slave_0 added [ 145.265050][T13645] team0: Port device team_slave_1 added [ 145.279377][T13645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.286463][T13645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.312465][T13645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.324830][T13645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.331927][T13645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.358104][T13645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.394637][T13645] hsr_slave_0: entered promiscuous mode [ 145.401537][T13645] hsr_slave_1: entered promiscuous mode [ 145.407376][T13645] debugfs: 'hsr0' already exists in 'hsr' [ 145.413136][T13645] Cannot create hsr debugfs directory [ 145.418715][ T12] bridge_slave_1: left allmulticast mode [ 145.424560][ T12] bridge_slave_1: left promiscuous mode [ 145.430267][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.437871][ T12] bridge_slave_0: left allmulticast mode [ 145.443566][ T12] bridge_slave_0: left promiscuous mode [ 145.449259][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.511988][ T12] team0: Port device bond0 removed [ 145.518384][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.532341][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.543361][ T12] bond0 (unregistering): Released all slaves [ 145.597653][ T12] hsr_slave_0: left promiscuous mode [ 145.604264][ T12] hsr_slave_1: left promiscuous mode [ 145.610425][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.617843][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.638430][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.645903][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.656514][T13669] program syz.0.4401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.669245][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4402'. [ 145.678221][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4402'. [ 145.687470][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4402'. [ 145.687563][ T12] veth1_macvtap: left promiscuous mode [ 145.703462][ T12] veth0_macvtap: left promiscuous mode [ 145.709058][ T12] veth1_vlan: left promiscuous mode [ 145.718509][ T12] veth0_vlan: left promiscuous mode [ 145.855441][T13699] loop9: detected capacity change from 0 to 764 [ 145.862985][ T12] team0 (unregistering): Port device team_slave_1 removed [ 145.874367][ T12] team0 (unregistering): Port device team_slave_0 removed [ 146.102542][T13663] chnl_net:caif_netlink_parms(): no params data found [ 146.136754][T13663] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.143899][T13663] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.151127][T13663] bridge_slave_0: entered allmulticast mode [ 146.157496][T13663] bridge_slave_0: entered promiscuous mode [ 146.164412][T13663] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.171539][T13663] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.178722][T13663] bridge_slave_1: entered allmulticast mode [ 146.185418][T13663] bridge_slave_1: entered promiscuous mode [ 146.212679][T13663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.223532][T13663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.245342][T13663] team0: Port device team_slave_0 added [ 146.254991][T13663] team0: Port device team_slave_1 added [ 146.292158][ T12] IPVS: stop unused estimator thread 0... [ 146.292882][T13663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.304896][T13663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.330861][T13663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.356383][T13663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.363386][T13663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.389286][T13663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.429069][T13663] hsr_slave_0: entered promiscuous mode [ 146.435343][T13663] hsr_slave_1: entered promiscuous mode [ 146.441564][T13663] debugfs: 'hsr0' already exists in 'hsr' [ 146.447294][T13663] Cannot create hsr debugfs directory [ 146.458335][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.481995][T13645] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 146.495117][T13645] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 146.504081][T13645] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 146.516569][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.527728][T13645] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 146.565871][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.598937][T13645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.614958][T13645] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.624418][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.637067][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.644121][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.654822][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.662053][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.762431][ T12] bridge_slave_1: left allmulticast mode [ 146.768111][ T12] bridge_slave_1: left promiscuous mode [ 146.773866][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.794325][ T12] bridge_slave_0: left allmulticast mode [ 146.799988][ T12] bridge_slave_0: left promiscuous mode [ 146.805834][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.923994][T13776] 9p: Unknown access argument : -22 [ 146.932076][ T12] team0: Port device bond0 removed [ 146.938332][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.948374][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.957887][ T12] bond0 (unregistering): Released all slaves [ 146.982174][T13645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.022850][ T12] hsr_slave_0: left promiscuous mode [ 147.059032][ T12] hsr_slave_1: left promiscuous mode [ 147.063082][T13784] SELinux: failed to load policy [ 147.074213][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.082368][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.092813][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.100259][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.113090][ T12] veth1_macvtap: left promiscuous mode [ 147.126088][ T12] veth0_macvtap: left promiscuous mode [ 147.135602][ T12] veth1_vlan: left promiscuous mode [ 147.147933][ T12] veth0_vlan: left promiscuous mode [ 147.150065][T13798] loop9: detected capacity change from 0 to 764 [ 147.159673][T13798] iso9660: Unknown parameter './file1' [ 147.188303][T13800] loop9: detected capacity change from 0 to 512 [ 147.195346][T13800] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.202456][T13800] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 147.214703][T13800] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.4451: iget: bad extended attribute block 1 [ 147.227735][T13800] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.4451: couldn't read orphan inode 15 (err -117) [ 147.239949][ T12] team0 (unregistering): Port device team_slave_1 removed [ 147.247254][T13800] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.259469][ T12] team0 (unregistering): Port device team_slave_0 removed [ 147.282131][T13800] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.333624][T13645] veth0_vlan: entered promiscuous mode [ 147.341179][T13645] veth1_vlan: entered promiscuous mode [ 147.353674][T13645] veth0_macvtap: entered promiscuous mode [ 147.362287][T13645] veth1_macvtap: entered promiscuous mode [ 147.371754][T13645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.382458][T13645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.392605][ T168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.402533][ T168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.411660][ T168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.421687][ T168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.567863][T13663] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 147.580732][T13663] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 147.590870][T13663] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 147.603298][T13663] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 147.619048][T13843] loop9: detected capacity change from 0 to 256 [ 147.684010][T13663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.698828][T13663] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.719931][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.727127][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.750473][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.757696][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.794648][T13865] SELinux: failed to load policy [ 147.803995][T13663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.859081][T13876] netlink: 'syz.2.4480': attribute type 1 has an invalid length. [ 147.872392][T13663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.028868][T13663] veth0_vlan: entered promiscuous mode [ 148.046406][T13663] veth1_vlan: entered promiscuous mode [ 148.066441][T13663] veth0_macvtap: entered promiscuous mode [ 148.075158][T13663] veth1_macvtap: entered promiscuous mode [ 148.085731][T13663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.097196][T13663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.110201][ T54] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.127419][ T54] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.142855][T13908] SELinux: failed to load policy [ 148.143154][ T54] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.158046][ T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.208833][T13921] netlink: 'syz.3.4492': attribute type 1 has an invalid length. [ 148.406524][T13946] SELinux: failed to load policy [ 148.770578][T13965] loop9: detected capacity change from 0 to 1024 [ 148.792996][T13965] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.824468][T13334] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.986948][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 148.986980][ T29] audit: type=1326 audit(1755071732.430:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13976 comm="syz.9.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 149.057483][ T29] audit: type=1326 audit(1755071732.430:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13976 comm="syz.9.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 149.081152][ T29] audit: type=1326 audit(1755071732.430:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13976 comm="syz.9.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 149.104655][ T29] audit: type=1326 audit(1755071732.430:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13976 comm="syz.9.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 149.128241][ T29] audit: type=1326 audit(1755071732.430:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13976 comm="syz.9.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 149.151778][ T29] audit: type=1326 audit(1755071732.430:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13976 comm="syz.9.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 149.175268][ T29] audit: type=1326 audit(1755071732.430:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13976 comm="syz.9.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 149.198808][ T29] audit: type=1326 audit(1755071732.430:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13976 comm="syz.9.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 149.222280][ T29] audit: type=1326 audit(1755071732.470:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13976 comm="syz.9.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 149.245763][ T29] audit: type=1326 audit(1755071732.470:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13976 comm="syz.9.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 150.209663][T13991] SELinux: failed to load policy [ 150.531968][T14035] netlink: 'syz.2.4547': attribute type 13 has an invalid length. [ 150.539893][T14035] netlink: 'syz.2.4547': attribute type 17 has an invalid length. [ 150.577808][T14031] SELinux: failed to load policy [ 150.618935][T14035] syz_tun: left promiscuous mode [ 150.644390][T14035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.012680][T14084] 9p: Unknown access argument : -22 [ 151.132763][T14100] batadv_slave_1: entered promiscuous mode [ 151.160194][T14099] batadv_slave_1: left promiscuous mode [ 151.331328][T14132] __nla_validate_parse: 6 callbacks suppressed [ 151.331342][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4591'. [ 151.402538][T14145] 9p: Unknown access argument : -22 [ 151.495169][T14157] netlink: 'syz.6.4603': attribute type 1 has an invalid length. [ 151.524263][T14161] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000003 [ 151.817400][T14207] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000003 [ 152.075988][ T2956] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 152.085715][ T2956] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 152.436906][T14293] sctp: [Deprecated]: syz.3.4667 (pid 14293) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.436906][T14293] Use struct sctp_sack_info instead [ 152.582102][T14318] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4679'. [ 152.708484][T14335] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4693'. [ 152.717928][T14335] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4693'. [ 152.838978][T14357] sd 0:0:1:0: device reset [ 152.914990][T14367] wireguard0: entered promiscuous mode [ 152.920631][T14367] wireguard0: entered allmulticast mode [ 152.991514][T14385] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4707'. [ 153.048615][T14396] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4711'. [ 153.151436][T14419] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4720'. [ 153.160658][T14419] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4720'. [ 153.172448][T14422] sd 0:0:1:0: device reset [ 153.213790][T14433] team0: Device gre1 is of different type [ 153.227171][T14435] netlink: 'syz.3.4727': attribute type 13 has an invalid length. [ 153.235069][T14435] netlink: 'syz.3.4727': attribute type 17 has an invalid length. [ 153.291511][T14435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.309415][T14437] wireguard0: entered promiscuous mode [ 153.314946][T14437] wireguard0: entered allmulticast mode [ 153.426223][T14456] sd 0:0:1:0: device reset [ 153.496941][T14470] netlink: 'syz.9.4739': attribute type 13 has an invalid length. [ 153.504822][T14470] netlink: 'syz.9.4739': attribute type 17 has an invalid length. [ 153.589971][T14470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.606322][T14482] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 153.609084][T14481] IPVS: stopping master sync thread 14482 ... [ 153.679140][T14487] wireguard0: entered promiscuous mode [ 153.684723][T14487] wireguard0: entered allmulticast mode [ 153.982039][T14521] team0: Device gre1 is of different type [ 153.986358][T14520] netlink: 'syz.6.4762': attribute type 13 has an invalid length. [ 153.995716][T14520] netlink: 'syz.6.4762': attribute type 17 has an invalid length. [ 154.043185][T14520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.811675][ T29] kauditd_printk_skb: 574 callbacks suppressed [ 154.811690][ T29] audit: type=1326 audit(1755071738.260:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14533 comm="syz.9.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 154.818817][T14537] wireguard0: entered promiscuous mode [ 154.846981][T14537] wireguard0: entered allmulticast mode [ 154.853134][ T29] audit: type=1326 audit(1755071738.300:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14533 comm="syz.9.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 154.876749][ T29] audit: type=1326 audit(1755071738.300:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14533 comm="syz.9.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 154.880611][T14538] vhci_hcd: invalid port number 253 [ 154.900281][ T29] audit: type=1326 audit(1755071738.300:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14533 comm="syz.9.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 154.905461][T14538] vhci_hcd: default hub control req: 8016 v0307 i00fd l0 [ 155.013775][ T29] audit: type=1326 audit(1755071738.460:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.6.4774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8edcebe9 code=0x7ffc0000 [ 155.038260][ T29] audit: type=1326 audit(1755071738.460:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.6.4774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8edcebe9 code=0x7ffc0000 [ 155.061874][ T29] audit: type=1326 audit(1755071738.460:4748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.6.4774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a8edcebe9 code=0x7ffc0000 [ 155.085447][ T29] audit: type=1326 audit(1755071738.480:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.6.4774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8edcebe9 code=0x7ffc0000 [ 155.109823][ T29] audit: type=1326 audit(1755071738.490:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.6.4774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f2a8edcebe9 code=0x7ffc0000 [ 155.133312][ T29] audit: type=1326 audit(1755071738.490:4751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.6.4774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8edcebe9 code=0x7ffc0000 [ 155.373191][T14575] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 155.384321][T14574] IPVS: stopping master sync thread 14575 ... [ 155.403874][T14579] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4788'. [ 155.697971][T14585] wireguard0: entered promiscuous mode [ 155.703522][T14585] wireguard0: entered allmulticast mode [ 155.847197][T14604] vhci_hcd: invalid port number 253 [ 155.852554][T14604] vhci_hcd: default hub control req: 8016 v0307 i00fd l0 [ 155.864008][T14608] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 155.876758][T14605] IPVS: stopping master sync thread 14608 ... [ 155.916980][T14612] infiniband syz!: set active [ 155.921708][T14612] infiniband syz!: added team_slave_0 [ 155.933179][T14612] RDS/IB: syz!: added [ 155.937336][T14612] smc: adding ib device syz! with port count 1 [ 155.943668][T14612] smc: ib device syz! port 1 has pnetid [ 156.238294][T14658] loop9: detected capacity change from 0 to 2048 [ 156.252678][T14658] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.268144][T14658] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.292346][T14668] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4835'. [ 156.317218][T13334] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.497569][T14696] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4839'. [ 156.722652][T14724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4853'. [ 157.027444][T14770] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 157.075485][T14778] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4878'. [ 157.245891][T14802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4891'. [ 157.363855][T14822] tap0: tun_chr_ioctl cmd 1074025675 [ 157.369321][T14822] tap0: persist enabled [ 157.375959][T14822] tap0: tun_chr_ioctl cmd 1074025675 [ 157.381501][T14822] tap0: persist enabled [ 157.419951][T14832] loop9: detected capacity change from 0 to 132 [ 157.427979][T14832] iso9660: Unknown parameter '' [ 157.494782][T14841] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4907'. [ 157.584286][T14851] sd 0:0:1:0: device reset [ 158.010151][T14929] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4961'. [ 158.011032][T14927] tap0: tun_chr_ioctl cmd 1074025675 [ 158.024628][T14927] tap0: persist enabled [ 158.044583][T14927] tap0: tun_chr_ioctl cmd 1074025675 [ 158.049997][T14927] tap0: persist enabled [ 158.270574][T14974] tap0: tun_chr_ioctl cmd 1074025675 [ 158.276030][T14974] tap0: persist enabled [ 158.280671][T14974] tap0: tun_chr_ioctl cmd 1074025675 [ 158.286028][T14974] tap0: persist enabled [ 158.371202][T14987] sd 0:0:1:0: device reset [ 158.587299][T15017] tap0: tun_chr_ioctl cmd 1074025675 [ 158.592668][T15017] tap0: persist enabled [ 158.600571][T15017] tap0: tun_chr_ioctl cmd 1074025675 [ 158.605955][T15017] tap0: persist enabled [ 158.753875][T15048] tap1: tun_chr_ioctl cmd 1074025675 [ 158.759204][T15048] tap1: persist enabled [ 158.764868][T15048] tap1: tun_chr_ioctl cmd 1074025675 [ 158.770309][T15048] tap1: persist disabled [ 159.169980][T15100] kernel profiling enabled (shift: 63) [ 159.175661][T15100] profiling shift: 63 too large [ 159.553373][T15136] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15136 comm=syz.0.5055 [ 159.566119][T15136] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15136 comm=syz.0.5055 [ 159.585871][T15140] netlink: 'syz.6.5057': attribute type 12 has an invalid length. [ 159.593791][T15140] netlink: 'syz.6.5057': attribute type 29 has an invalid length. [ 159.601672][T15140] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5057'. [ 159.775514][T15173] bond0: entered promiscuous mode [ 159.780688][T15173] bond_slave_0: entered promiscuous mode [ 159.786462][T15173] bond_slave_1: entered promiscuous mode [ 159.793918][T15173] batadv0: entered promiscuous mode [ 159.799645][T15173] hsr1: entered allmulticast mode [ 159.804797][T15173] bond0: entered allmulticast mode [ 159.809925][T15173] bond_slave_0: entered allmulticast mode [ 159.815676][T15173] bond_slave_1: entered allmulticast mode [ 159.821517][T15173] batadv0: entered allmulticast mode [ 159.827231][T15173] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 159.837147][T15173] bond0: left promiscuous mode [ 159.841978][T15173] bond_slave_0: left promiscuous mode [ 159.847884][T15173] bond_slave_1: left promiscuous mode [ 159.857167][T15173] batadv0: left promiscuous mode [ 159.905590][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 159.905606][ T29] audit: type=1400 audit(1755071743.340:5016): avc: denied { write } for pid=15185 comm="syz.2.5076" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 159.935201][ T29] audit: type=1326 audit(1755071743.350:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.6.5077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8edcebe9 code=0x7ffc0000 [ 159.958800][ T29] audit: type=1326 audit(1755071743.350:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.6.5077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a8edcebe9 code=0x7ffc0000 [ 159.982288][ T29] audit: type=1326 audit(1755071743.350:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.6.5077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8edcebe9 code=0x7ffc0000 [ 160.005867][ T29] audit: type=1326 audit(1755071743.350:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.6.5077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8edcebe9 code=0x7ffc0000 [ 160.029435][ T29] audit: type=1326 audit(1755071743.350:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.6.5077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a8edcebe9 code=0x7ffc0000 [ 160.052940][ T29] audit: type=1326 audit(1755071743.350:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.6.5077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8edcebe9 code=0x7ffc0000 [ 160.076464][ T29] audit: type=1326 audit(1755071743.350:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.6.5077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a8edcebe9 code=0x7ffc0000 [ 160.116478][ T29] audit: type=1326 audit(1755071743.530:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.6.5077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8edcebe9 code=0x7ffc0000 [ 160.140123][ T29] audit: type=1326 audit(1755071743.530:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.6.5077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8edcebe9 code=0x7ffc0000 [ 160.165603][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5085'. [ 160.192996][T15200] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5088'. [ 160.203976][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5086'. [ 160.277306][T15218] IPv6: Can't replace route, no match found [ 160.562667][T15260] SELinux: ebitmap: truncated map [ 160.573252][T15260] SELinux: failed to load policy [ 160.765434][T15293] lo speed is unknown, defaulting to 1000 [ 160.771388][T15293] lo speed is unknown, defaulting to 1000 [ 160.777557][T15293] lo speed is unknown, defaulting to 1000 [ 160.783770][T15293] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 160.802103][T15293] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 160.810845][T15293] lo speed is unknown, defaulting to 1000 [ 160.823489][T15293] lo speed is unknown, defaulting to 1000 [ 160.829589][T15293] lo speed is unknown, defaulting to 1000 [ 160.836083][T15293] lo speed is unknown, defaulting to 1000 [ 160.842483][T15293] lo speed is unknown, defaulting to 1000 [ 161.037449][T15335] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 161.186725][T15364] syzkaller1: entered promiscuous mode [ 161.192365][T15364] syzkaller1: entered allmulticast mode [ 161.696340][T15490] __nla_validate_parse: 1 callbacks suppressed [ 161.696418][T15490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5200'. [ 161.738291][T15498] vxcan0: tx address claim with dest, not broadcast [ 162.215136][T15640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5224'. [ 162.482496][T15701] netlink: 10 bytes leftover after parsing attributes in process `syz.9.5238'. [ 162.553241][T15706] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5240'. [ 162.707518][T15714] infiniband syz1: set active [ 162.712304][T15714] infiniband syz1: added bond0 [ 162.730616][T15714] RDS/IB: syz1: added [ 162.740779][T15714] smc: adding ib device syz1 with port count 1 [ 162.760293][T15714] smc: ib device syz1 port 1 has pnetid [ 162.826844][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5253'. [ 162.843253][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5253'. [ 163.445403][T15805] netlink: 'syz.9.5287': attribute type 1 has an invalid length. [ 163.782939][T15848] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5308'. [ 163.831996][T15856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5311'. [ 163.841100][T15856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5311'. [ 164.184741][T15920] netlink: 'syz.9.5337': attribute type 13 has an invalid length. [ 164.192721][T15920] netlink: 'syz.9.5337': attribute type 17 has an invalid length. [ 164.217185][T15920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.358571][T15954] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15954 comm=syz.6.5359 [ 164.371268][T15954] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15954 comm=syz.6.5359 [ 164.438291][T15970] syzkaller1: entered promiscuous mode [ 164.444055][T15970] syzkaller1: entered allmulticast mode [ 164.469481][T15980] openvswitch: netlink: Message has 6 unknown bytes. [ 164.495411][T15982] netlink: 268 bytes leftover after parsing attributes in process `syz.2.5373'. [ 164.791976][T16044] syz1: rxe_newlink: already configured on bond0 [ 164.849731][T16052] program syz.6.5406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.947686][T16063] netlink: 'syz.0.5411': attribute type 3 has an invalid length. [ 165.082341][ T29] kauditd_printk_skb: 485 callbacks suppressed [ 165.082419][ T29] audit: type=1326 audit(1755071748.530:5511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.6.5415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8edcebe9 code=0x7ffc0000 [ 165.148291][ T29] audit: type=1326 audit(1755071748.560:5512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.6.5415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f2a8edcebe9 code=0x7ffc0000 [ 165.171875][ T29] audit: type=1326 audit(1755071748.560:5513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.6.5415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8edcebe9 code=0x7ffc0000 [ 165.195467][ T29] audit: type=1326 audit(1755071748.560:5514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.6.5415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8edcebe9 code=0x7ffc0000 [ 165.223327][T16077] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 165.223327][T16077] program syz.6.5417 not setting count and/or reply_len properly [ 165.334886][T16088] netlink: 'syz.9.5419': attribute type 10 has an invalid length. [ 165.343758][T16088] batman_adv: batadv0: Adding interface: macvlan0 [ 165.350220][T16088] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.377927][T16088] batman_adv: batadv0: Interface activated: macvlan0 [ 165.386445][ T29] audit: type=1400 audit(1755071748.830:5515): avc: denied { load_policy } for pid=16089 comm="syz.6.5423" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 165.386455][T16092] SELinux: policydb version -893165715 does not match my version range 15-35 [ 165.386484][T16092] SELinux: failed to load policy [ 165.466073][T16098] netlink: 'syz.0.5427': attribute type 1 has an invalid length. [ 165.528360][T16106] 9pnet_fd: Insufficient options for proto=fd [ 165.588316][T16111] random: crng reseeded on system resumption [ 165.600657][ T29] audit: type=1400 audit(1755071748.970:5516): avc: denied { mounton } for pid=16105 comm="syz.0.5431" path="/248/file0" dev="tmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 165.623628][ T29] audit: type=1400 audit(1755071749.030:5517): avc: denied { append } for pid=16101 comm="syz.9.5429" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 165.647201][ T29] audit: type=1400 audit(1755071749.030:5518): avc: denied { ioctl } for pid=16101 comm="syz.9.5429" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 165.709095][ T29] audit: type=1326 audit(1755071749.120:5519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16112 comm="syz.0.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b014ebe9 code=0x7ffc0000 [ 165.732776][ T29] audit: type=1326 audit(1755071749.120:5520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16112 comm="syz.0.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b014ebe9 code=0x7ffc0000 [ 165.776212][T16122] bond1: entered promiscuous mode [ 165.781424][T16122] bond1: entered allmulticast mode [ 165.789342][T16122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.801749][T16122] bond1 (unregistering): Released all slaves [ 165.814332][T16132] io-wq is not configured for unbound workers [ 165.816259][T16131] SELinux: policydb version -957581230 does not match my version range 15-35 [ 165.844652][T16131] SELinux: failed to load policy [ 166.381622][T16256] openvswitch: netlink: Message has 6 unknown bytes. [ 166.574825][T16270] lo speed is unknown, defaulting to 1000 [ 166.619295][T16292] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 166.625837][T16292] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 166.633388][T16292] vhci_hcd vhci_hcd.0: Device attached [ 166.649476][T16293] vhci_hcd: connection closed [ 166.649765][T15544] vhci_hcd: stop threads [ 166.658927][T15544] vhci_hcd: release socket [ 166.663460][T15544] vhci_hcd: disconnect device [ 167.182260][T16373] binfmt_misc: register: failed to install interpreter file ./bus [ 167.349936][T16406] __nla_validate_parse: 6 callbacks suppressed [ 167.349956][T16406] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5568'. [ 167.368391][ T2956] IPVS: starting estimator thread 0... [ 167.376817][T16408] tipc: Started in network mode [ 167.381731][T16408] tipc: Node identity ac1414aa, cluster identity 4711 [ 167.388776][T16408] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 167.395721][T16408] tipc: Enabled bearer , priority 10 [ 167.460103][T16409] IPVS: using max 2592 ests per chain, 129600 per kthread [ 167.516060][T16433] bridge0: entered promiscuous mode [ 167.522763][T16433] bond0: entered promiscuous mode [ 167.527798][T16433] bond_slave_0: entered promiscuous mode [ 167.533517][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 167.540863][T16433] bond_slave_1: entered promiscuous mode [ 167.546898][T16433] syz_tun: entered promiscuous mode [ 167.567399][T16433] bond0: left promiscuous mode [ 167.572356][T16433] bond_slave_0: left promiscuous mode [ 167.577908][T16433] bond_slave_1: left promiscuous mode [ 167.583366][T16433] syz_tun: left promiscuous mode [ 167.591729][T16433] bridge0: left promiscuous mode [ 167.680077][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 167.732285][T16467] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5596'. [ 167.798645][T16483] netlink: 'syz.6.5606': attribute type 12 has an invalid length. [ 167.806603][T16483] netlink: 'syz.6.5606': attribute type 29 has an invalid length. [ 167.814438][T16483] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5606'. [ 167.823512][T16483] netlink: 59 bytes leftover after parsing attributes in process `syz.6.5606'. [ 167.830061][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 167.865835][T16494] netlink: 4 bytes leftover after parsing attributes in process `_@'. [ 167.898873][T16494] veth3: entered promiscuous mode [ 167.909762][T16502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.925742][T16502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.970094][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 168.012021][T16513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5619'. [ 168.100107][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 168.240132][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 168.271257][T16562] sd 0:0:1:0: device reset [ 168.273595][T16554] lo speed is unknown, defaulting to 1000 [ 168.319379][T16567] netlink: 27 bytes leftover after parsing attributes in process `syz.9.5641'. [ 168.380084][ T2956] tipc: Node number set to 2886997162 [ 168.571244][T16613] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16613 comm=syz.6.5661 [ 168.837538][ T2956] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 168.845351][ T2956] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 168.856878][ T2956] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 168.867274][ T2956] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 168.911350][T16678] sd 0:0:1:0: device reset [ 168.943217][T16687] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 168.956962][T16687] vhci_hcd: invalid port number 253 [ 168.962425][T16687] vhci_hcd: invalid port number 253 [ 169.320143][ C0] net_ratelimit: 3 callbacks suppressed [ 169.320157][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 169.338841][T16736] netlink: 'syz.3.5713': attribute type 3 has an invalid length. [ 169.531387][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5727'. [ 169.580717][ T1037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1037 comm=kworker/1:2 [ 169.706936][T16774] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5731'. [ 169.853785][T16810] serio: Serial port ptm1 [ 169.858350][T16812] futex_wake_op: syz.3.5748 tries to shift op by -1; fix this program [ 169.893355][T16816] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5750'. [ 170.109475][T16862] netlink: 'syz.9.5771': attribute type 21 has an invalid length. [ 170.117881][T16862] netlink: 'syz.9.5771': attribute type 1 has an invalid length. [ 170.157493][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 170.157510][ T29] audit: type=1326 audit(1755071753.600:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16869 comm="syz.0.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b014ebe9 code=0x7ffc0000 [ 170.190783][ T29] audit: type=1326 audit(1755071753.600:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16869 comm="syz.0.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f46b014ebe9 code=0x7ffc0000 [ 170.214353][ T29] audit: type=1326 audit(1755071753.600:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16869 comm="syz.0.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f46b0145ba7 code=0x7ffc0000 [ 170.238024][ T29] audit: type=1326 audit(1755071753.600:5898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16869 comm="syz.0.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f46b00eadd9 code=0x7ffc0000 [ 170.261585][ T29] audit: type=1326 audit(1755071753.600:5899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16869 comm="syz.0.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f46b0145ba7 code=0x7ffc0000 [ 170.285405][ T29] audit: type=1326 audit(1755071753.600:5900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16869 comm="syz.0.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f46b00eadd9 code=0x7ffc0000 [ 170.308883][ T29] audit: type=1326 audit(1755071753.600:5901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16869 comm="syz.0.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b014ebe9 code=0x7ffc0000 [ 170.332362][ T29] audit: type=1326 audit(1755071753.610:5902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16869 comm="syz.0.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b014ebe9 code=0x7ffc0000 [ 170.366641][T16874] atomic_op ffff88810f1ee928 conn xmit_atomic 0000000000000000 [ 170.370091][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 170.382481][ T29] audit: type=1400 audit(1755071753.810:5903): avc: denied { create } for pid=16873 comm="syz.2.5776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.402093][ T29] audit: type=1400 audit(1755071753.810:5904): avc: denied { bind } for pid=16873 comm="syz.2.5776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.939834][T16963] pim6reg1: entered promiscuous mode [ 170.945225][T16963] pim6reg1: entered allmulticast mode [ 171.214042][T16988] lo speed is unknown, defaulting to 1000 [ 171.410105][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 171.451330][T17009] netlink: 'syz.2.5838': attribute type 7 has an invalid length. [ 171.794469][T17063] unsupported nlmsg_type 40 [ 171.821086][T17069] random: crng reseeded on system resumption [ 172.057927][T17096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.068439][T17096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.325092][T17124] syzkaller1: entered promiscuous mode [ 172.330669][T17124] syzkaller1: entered allmulticast mode [ 172.440068][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 172.533997][T17156] syzkaller1: entered promiscuous mode [ 172.539602][T17156] syzkaller1: entered allmulticast mode [ 172.575420][T17162] dummy0: entered promiscuous mode [ 172.583761][T17162] dummy0: left promiscuous mode [ 172.591807][T17164] netlink: 'syz.9.5913': attribute type 13 has an invalid length. [ 172.604829][T17164] lo: entered promiscuous mode [ 172.609625][T17164] lo: entered allmulticast mode [ 172.631021][T17164] tunl0: entered promiscuous mode [ 172.636116][T17164] tunl0: entered allmulticast mode [ 172.643170][T17169] SELinux: failed to load policy [ 172.654652][T17164] gre0: entered promiscuous mode [ 172.659660][T17164] gre0: entered allmulticast mode [ 172.666332][T17164] gretap0: entered promiscuous mode [ 172.671595][T17164] gretap0: entered allmulticast mode [ 172.679198][T17164] gretap0: refused to change device tx_queue_len [ 172.692577][T17164] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 173.028054][T17231] pim6reg1: entered promiscuous mode [ 173.033495][T17231] pim6reg1: entered allmulticast mode [ 173.178448][T17256] __nla_validate_parse: 9 callbacks suppressed [ 173.178463][T17256] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5955'. [ 173.281808][T17264] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 173.480073][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 173.655321][T17310] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5981'. [ 173.665490][T17310] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5981'. [ 174.520092][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 174.913685][T17469] kernel profiling enabled (shift: 63) [ 174.919183][T17469] profiling shift: 63 too large [ 175.142751][T17505] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17505 comm=syz.2.6069 [ 175.155419][T17505] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17505 comm=syz.2.6069 [ 175.168326][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 175.168339][ T29] audit: type=1326 audit(1755071758.620:6154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.9.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 175.212516][T17513] kernel profiling enabled (shift: 63) [ 175.218004][T17513] profiling shift: 63 too large [ 175.222997][ T29] audit: type=1326 audit(1755071758.660:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.9.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 175.246692][ T29] audit: type=1326 audit(1755071758.660:6156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.9.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 175.270245][ T29] audit: type=1326 audit(1755071758.660:6157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.9.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 175.293854][ T29] audit: type=1326 audit(1755071758.660:6158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.9.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 175.317409][ T29] audit: type=1326 audit(1755071758.660:6159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.9.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 175.341057][ T29] audit: type=1326 audit(1755071758.660:6160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.9.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 175.364557][ T29] audit: type=1326 audit(1755071758.660:6161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.9.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 175.388133][ T29] audit: type=1326 audit(1755071758.660:6162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.9.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 175.411791][ T29] audit: type=1326 audit(1755071758.660:6163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17510 comm="syz.9.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce9a6ebe9 code=0x7ffc0000 [ 175.560106][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 175.575534][T17547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6100'. [ 175.644258][T17563] bond0: entered promiscuous mode [ 175.649343][T17563] bond_slave_0: entered promiscuous mode [ 175.655156][T17563] bond_slave_1: entered promiscuous mode [ 175.662351][T17563] batadv0: entered promiscuous mode [ 175.668330][T17563] hsr1: entered allmulticast mode [ 175.673514][T17563] bond0: entered allmulticast mode [ 175.678685][T17563] bond_slave_0: entered allmulticast mode [ 175.684570][T17563] bond_slave_1: entered allmulticast mode [ 175.690373][T17563] batadv0: entered allmulticast mode [ 175.696035][T17563] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 175.704979][T17563] bond0: left promiscuous mode [ 175.709787][T17563] bond_slave_0: left promiscuous mode [ 175.715337][T17563] bond_slave_1: left promiscuous mode [ 175.722202][T17563] batadv0: left promiscuous mode [ 175.791103][T17572] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6103'. [ 175.849611][T17581] IPv6: Can't replace route, no match found [ 176.508923][T17586] kernel profiling enabled (shift: 63) [ 176.514558][T17586] profiling shift: 63 too large [ 176.610073][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 176.709256][T17622] SELinux: ebitmap: truncated map [ 176.716295][T17617] lo speed is unknown, defaulting to 1000 [ 176.724144][T17622] SELinux: failed to load policy [ 176.765124][T17631] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6131'. [ 177.030333][T17658] siw: device registration error -23 [ 177.278797][T17697] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 177.458078][T17741] syzkaller1: entered promiscuous mode [ 177.463626][T17741] syzkaller1: entered allmulticast mode [ 177.640207][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 177.820981][T17810] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6214'. [ 177.821788][T17811] vxcan0: tx address claim with dest, not broadcast [ 177.998359][T17853] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6237'. [ 178.340326][T17905] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6251'. [ 178.380121][T17916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6255'. [ 178.680111][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 178.762753][T17957] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6269'. [ 178.773989][T17957] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6269'. [ 178.861696][T17977] rdma_rxe: rxe_newlink: failed to add bond0 [ 179.720075][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 179.749211][T18149] netlink: 'syz.3.6300': attribute type 1 has an invalid length. [ 180.025138][T18192] netlink: 256 bytes leftover after parsing attributes in process `syz.9.6323'. [ 180.131544][T18205] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6329'. [ 180.140576][T18205] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6329'. [ 180.183057][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 180.183071][ T29] audit: type=1400 audit(1755071763.630:6506): avc: denied { setopt } for pid=18206 comm="syz.9.6331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 180.251697][ T29] audit: type=1326 audit(1755071763.660:6507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18210 comm="syz.0.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b014ebe9 code=0x7ffc0000 [ 180.275372][ T29] audit: type=1326 audit(1755071763.660:6508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18210 comm="syz.0.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b014ebe9 code=0x7ffc0000 [ 180.298958][ T29] audit: type=1326 audit(1755071763.670:6509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18210 comm="syz.0.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46b014ebe9 code=0x7ffc0000 [ 180.322590][ T29] audit: type=1326 audit(1755071763.670:6510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18210 comm="syz.0.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b014ebe9 code=0x7ffc0000 [ 180.346615][ T29] audit: type=1326 audit(1755071763.670:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18210 comm="syz.0.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b014ebe9 code=0x7ffc0000 [ 180.370162][ T29] audit: type=1326 audit(1755071763.670:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18210 comm="syz.0.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46b014ebe9 code=0x7ffc0000 [ 180.393751][ T29] audit: type=1326 audit(1755071763.670:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18210 comm="syz.0.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b014ebe9 code=0x7ffc0000 [ 180.417252][ T29] audit: type=1326 audit(1755071763.670:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18210 comm="syz.0.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b014ebe9 code=0x7ffc0000 [ 180.440790][ T29] audit: type=1326 audit(1755071763.670:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18210 comm="syz.0.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46b014ebe9 code=0x7ffc0000 [ 180.760078][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 180.904361][T18280] netlink: 'syz.3.6362': attribute type 13 has an invalid length. [ 180.912344][T18280] netlink: 'syz.3.6362': attribute type 17 has an invalid length. [ 180.946471][T18280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.975662][T18288] tap1: tun_chr_ioctl cmd 1074025675 [ 180.981047][T18288] tap1: persist enabled [ 180.990345][T18288] tap1: tun_chr_ioctl cmd 1074025675 [ 180.995746][T18288] tap1: persist disabled [ 181.126322][T18314] netlink: 268 bytes leftover after parsing attributes in process `syz.3.6391'. [ 181.161495][T18319] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18319 comm=syz.0.6383 [ 181.174066][T18319] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18319 comm=syz.0.6383 [ 181.234678][T18329] openvswitch: netlink: Message has 6 unknown bytes. [ 181.293891][T18342] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6395'. [ 181.305148][T18338] syzkaller1: entered promiscuous mode [ 181.310727][T18338] syzkaller1: entered allmulticast mode [ 181.564950][T18388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6416'. [ 181.600326][T18394] program syz.0.6419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.658335][T18404] netlink: 'syz.6.6424': attribute type 3 has an invalid length. [ 181.714872][T18415] SELinux: policydb version -893165715 does not match my version range 15-35 [ 181.726304][T18415] SELinux: failed to load policy [ 181.790802][T18423] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 181.790802][T18423] program syz.0.6433 not setting count and/or reply_len properly [ 181.811008][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 181.820175][T18425] serio: Serial port ptm2 [ 181.867435][T18434] netlink: 'syz.0.6438': attribute type 10 has an invalid length. [ 181.879333][T18434] batman_adv: batadv0: Adding interface: macvlan0 [ 181.885914][T18434] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.912870][T18434] batman_adv: batadv0: Interface activated: macvlan0 [ 181.924547][T18439] netlink: 'syz.9.6442': attribute type 1 has an invalid length. [ 181.964715][T18446] 9pnet_fd: Insufficient options for proto=fd [ 181.995823][T18451] random: crng reseeded on system resumption [ 182.087826][T18474] SELinux: policydb version -957581230 does not match my version range 15-35 [ 182.105092][T18474] SELinux: failed to load policy [ 182.163080][T18476] bond1: entered promiscuous mode [ 182.168202][T18476] bond1: entered allmulticast mode [ 182.182696][T18476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.200657][T18457] ================================================================== [ 182.208783][T18457] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 182.217388][T18457] [ 182.219709][T18457] write to 0xffff888106decfa8 of 8 bytes by task 18466 on cpu 1: [ 182.227421][T18457] shmem_file_splice_read+0x470/0x600 [ 182.232815][T18457] splice_direct_to_actor+0x26f/0x680 [ 182.238187][T18457] do_splice_direct+0xda/0x150 [ 182.242947][T18457] do_sendfile+0x380/0x650 [ 182.247373][T18457] __x64_sys_sendfile64+0x105/0x150 [ 182.252566][T18457] x64_sys_call+0x2bb0/0x2ff0 [ 182.257246][T18457] do_syscall_64+0xd2/0x200 [ 182.261753][T18457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.267650][T18457] [ 182.269973][T18457] write to 0xffff888106decfa8 of 8 bytes by task 18457 on cpu 0: [ 182.277683][T18457] shmem_file_splice_read+0x470/0x600 [ 182.283063][T18457] splice_direct_to_actor+0x26f/0x680 [ 182.288434][T18457] do_splice_direct+0xda/0x150 [ 182.293194][T18457] do_sendfile+0x380/0x650 [ 182.297610][T18457] __x64_sys_sendfile64+0x105/0x150 [ 182.302807][T18457] x64_sys_call+0x2bb0/0x2ff0 [ 182.307479][T18457] do_syscall_64+0xd2/0x200 [ 182.311979][T18457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.317964][T18457] [ 182.320279][T18457] value changed: 0x0000000000015731 -> 0x0000000000015768 [ 182.327380][T18457] [ 182.329699][T18457] Reported by Kernel Concurrency Sanitizer on: [ 182.335849][T18457] CPU: 0 UID: 0 PID: 18457 Comm: syz.3.6450 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 182.348342][T18457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 182.358405][T18457] ================================================================== [ 182.368209][T18476] bond1 (unregistering): Released all slaves [ 182.840128][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 183.880120][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 184.920121][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 185.970127][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 187.000120][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 188.040118][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 189.090119][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 190.130076][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 191.160104][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available