last executing test programs: 2m10.859056812s ago: executing program 32 (id=873): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r2, 0x0, &(0x7f0000000640)=""/243}, 0x20) 2m8.232351334s ago: executing program 33 (id=434): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='cpu==0~|!?q\xf7\n[\xb6\x10\xe4\xd5\x1aP.\x13\x8fE`\x19\xe5v\xd6\x9f\x14_\x00\x00\xca\xd3>\x82\x818\x8c\x89\xae>\x03\xbbM{+\x89\x84=\xd2zaSDU\xfbBR:\n$\x8fR\xbd\x12\xdcFJ\xb0\xbc[\x03/\x1c\x9a\x005\x8f\xd2\xbf\xfe\x1a\r\x1c\x8bL\xd3$\xca\xa4\xb6\xddjT\xf1\x97\xf8\x16\xf0\xd6M\xd2\xe1\xfeC\xca\x9b\xf2\xdd6\xae\x17h\x12P\v\xaa\xa7\x01\xf0w\xcf\xf2c \x98\x99\x88i\x05m\xe4\r\xbd\x0ex\xc4l\x84\xcd~\xdf\xe3\x925\xec\xf0\xa5\xaeR2y\bY\xdf\xa1Z\x1cg\x9b\xc1\x8c\xee.\x8d\t/\xb5\x8e=J\n\xa1\xe1q\xd3\x1dY\xe2\x13\xc6\xdc\xbbH\xb59=!.\xa6\n\xe5\xcf\xeb\xdc)}\xd8\xcd\x98\x04\xe0c\x02\b\xa5\v\xcfk\xee;\xb7U\x89\x1b\x00\b\tZ\x98\xc8\xec\xec$kml\x83N\xf2\xfa\x9aM\xec\x00G}\xdaw+?\xe2\xd8\xe5r\xb7Y\xa7\xf7\x8e\r\xee\xc2\xc4\'\x11\xce\xd0l)\x95\xbc\xc7\xf2i\xfa\xa1\xb4\xa5nw&\xfc\'\xc4\xf1\xc1G\xbd\xdb1<\xf6\xac\xdf\x8eZC>\x00'/302) 2m2.066380048s ago: executing program 5 (id=1219): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x8000, @local, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x4000845, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000001c0)=""/246, &(0x7f0000000040)=0xf6) 2m1.856593508s ago: executing program 5 (id=1225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x373d, &(0x7f0000000500)={0x0, 0x4, 0x1, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_UNREGISTER_NAPI(r2, 0x1c, &(0x7f0000000000), 0x1) 2m1.576212019s ago: executing program 5 (id=1230): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 2m1.573063539s ago: executing program 5 (id=1232): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 2m1.527980902s ago: executing program 5 (id=1235): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3a, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0xd, &(0x7f0000000000)=[{0x3d, 0x0, 0xff, 0x5}, {0xa, 0x80, 0x4f, 0xffffffff}]}) 2m1.346916309s ago: executing program 5 (id=1251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 2m1.321287971s ago: executing program 34 (id=1251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 1m58.280986921s ago: executing program 7 (id=1371): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000011c0)={[{@acl}, {@barrier}, {@minixdf}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {}, {@debug}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$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") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x4, 0x101, 0x1000, 0x1, 0x1, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x3, 0x7, 0x5, 0x100000, 0x763, 0x3, 0x0, 0xe, 0x2b12, 0x1104, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x0, 0x8000100, 0x7fffffff, 0x0, 0x9, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x9, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x7, 0x0, 0x10001, 0x2, 0xffffffff, 0x10000007, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x10002, 0xb5, 0x84, 0x100, 0x5, 0x3, 0x1, 0xb, 0x5, 0x20006, 0x7, 0x2, 0xb, 0x4, 0xd9a, 0x0, 0x2a0, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x9, 0x4, 0x2, 0x80003b, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 1m58.034288751s ago: executing program 7 (id=1380): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r1, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x1ff}, 0x1, 0x8000002, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, r1, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) 1m57.944348805s ago: executing program 7 (id=1384): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x8, "fb95785b587f2fba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x0) 1m57.916323926s ago: executing program 7 (id=1386): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m57.887109428s ago: executing program 7 (id=1388): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair(0x28, 0x2, 0x28, &(0x7f0000000040)) 1m55.97257992s ago: executing program 7 (id=1465): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x4000003, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffd}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1m55.97219801s ago: executing program 35 (id=1465): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x4000003, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffd}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1m51.344225218s ago: executing program 4 (id=1635): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@broadcast, @multicast2, @private, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1m51.343680288s ago: executing program 4 (id=1636): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) 1m51.336796028s ago: executing program 4 (id=1638): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000000200000008000000ebd4000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 1m51.223246833s ago: executing program 4 (id=1641): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000300)='./file0\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0xa, 0x80000, {r0}}, 0x20) 1m51.189679134s ago: executing program 4 (id=1643): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m50.984304333s ago: executing program 4 (id=1648): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) time(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) 1m50.980738333s ago: executing program 36 (id=1648): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) time(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) 1m43.766204563s ago: executing program 8 (id=1939): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x12024, 0x0, 0x9, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) 1m43.637100078s ago: executing program 8 (id=1945): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1m43.448347756s ago: executing program 8 (id=1961): sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 1m43.354497761s ago: executing program 8 (id=1968): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000100)=r1, 0x8) 1m43.318440072s ago: executing program 8 (id=1971): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f00000013c0)='./file0\x00', 0x0, 0x206002, 0x0) 1m43.240574305s ago: executing program 8 (id=1975): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) 1m28.231765508s ago: executing program 37 (id=1975): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) 1m26.79229052s ago: executing program 9 (id=2506): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m26.720325763s ago: executing program 9 (id=2510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x10, 0x1}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20020804}, 0x0) 1m26.636456757s ago: executing program 9 (id=2514): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) 1m26.636252437s ago: executing program 9 (id=2515): bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1m26.618385327s ago: executing program 9 (id=2517): mkdir(&(0x7f0000001a80)='./file0\x00', 0xd2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m26.585288069s ago: executing program 9 (id=2518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 1m11.546366244s ago: executing program 38 (id=2518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 1.040163505s ago: executing program 0 (id=5657): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x8000}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 880.334453ms ago: executing program 3 (id=5663): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$incfs(r2, 0x0, 0x183a00, 0x40) time(0x0) 879.830173ms ago: executing program 3 (id=5665): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 874.594423ms ago: executing program 3 (id=5666): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8000) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 859.544943ms ago: executing program 3 (id=5668): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 788.438256ms ago: executing program 3 (id=5669): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x0, 0x5, 0x2060005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38) 717.13325ms ago: executing program 6 (id=5670): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) 703.08229ms ago: executing program 6 (id=5671): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xfffe}}}}}}, 0x0) 644.414622ms ago: executing program 3 (id=5672): syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) exit(0xffff) memfd_secret(0x80000) 644.123122ms ago: executing program 6 (id=5673): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000140007800800114000000000050015000c0000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a6970"], 0x60}}, 0x0) 599.603784ms ago: executing program 6 (id=5674): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002b00)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r2, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 580.721746ms ago: executing program 6 (id=5675): perf_event_open$cgroup(&(0x7f0000000200)={0x2, 0x80, 0x7, 0x95, 0x9, 0x8, 0x0, 0x0, 0x100, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0xc, 0xa9e7}, 0x4000, 0x2, 0x1000, 0x1, 0x7, 0x77af43bb, 0x8, 0x0, 0xc473, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 503.147719ms ago: executing program 6 (id=5680): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) read(r0, &(0x7f0000002340)=""/232, 0xe8) 427.547092ms ago: executing program 1 (id=5685): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) alarm(0x4) 427.252042ms ago: executing program 1 (id=5687): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000000) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'gretap0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x1d, r2}, 0x10, &(0x7f00000005c0)={&(0x7f0000000200)=@can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "dc8e4602bd767428"}, 0x10}, 0x118, 0x0, 0x0, 0x400c095}, 0x0) 367.956104ms ago: executing program 1 (id=5689): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0) 344.828995ms ago: executing program 1 (id=5690): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002a0, 0x9, 0x0, &(0x7f0000000000)="b9158edfaa57fef007", 0x0, 0x1dc, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x50) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @loopback={0xfec0ffffffffffff}, 0x80000000}], 0x1c) 332.343126ms ago: executing program 1 (id=5692): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00), 0x1, 0x785, &(0x7f0000001200)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000040)=ANY=[], 0xe01, 0x0) 287.646568ms ago: executing program 1 (id=5695): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7", 0x9) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 221.117631ms ago: executing program 0 (id=5697): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r2, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x20000010) 144.360924ms ago: executing program 0 (id=5698): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 144.072404ms ago: executing program 2 (id=5699): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000040)={[{@shortname_winnt}, {@shortname_lower}, {@fat=@usefree}, {@fat=@time_offset={'time_offset', 0x3d, 0x161}}, {@uni_xlateno}, {@fat=@tz_utc}, {@fat=@check_normal}, {@utf8no}, {@utf8}]}, 0xfd, 0x2cd, &(0x7f0000000780)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000001d40)=0xe, 0x4) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0) 143.806304ms ago: executing program 2 (id=5700): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 139.907624ms ago: executing program 0 (id=5701): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x140) 124.303684ms ago: executing program 0 (id=5702): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r2) 84.391357ms ago: executing program 2 (id=5703): syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 84.210916ms ago: executing program 0 (id=5704): r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x6, 0xfffffffc}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x100) 408.14µs ago: executing program 2 (id=5705): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 179.66µs ago: executing program 2 (id=5706): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xf, 0x5}]}]}}, 0x0, 0x3a, 0x0, 0x8}, 0x28) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x4004010) 0s ago: executing program 2 (id=5707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x550, 0xfffffffffffffc75}, 0x0, 0x0, 0x8000003, 0x4, 0x0, 0x40d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu<=0||!') kernel console output (not intermixed with test programs): ype 2 family 0 port 6081 - 0 [ 111.620805][T10296] chnl_net:caif_netlink_parms(): no params data found [ 111.680330][ T4524] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.690635][ T4524] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.805764][T10296] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.812873][T10296] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.873700][T10296] bridge_slave_0: entered allmulticast mode [ 111.889301][T10296] bridge_slave_0: entered promiscuous mode [ 111.917657][ T4524] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.928024][ T4524] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.967832][T10296] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.974982][T10296] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.982130][T10296] bridge_slave_1: entered allmulticast mode [ 111.988693][T10296] bridge_slave_1: entered promiscuous mode [ 112.007014][T10296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.031204][ T4524] bridge_slave_1: left allmulticast mode [ 112.036902][ T4524] bridge_slave_1: left promiscuous mode [ 112.042548][ T4524] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.051405][ T4524] bridge_slave_0: left allmulticast mode [ 112.057069][ T4524] bridge_slave_0: left promiscuous mode [ 112.062757][ T4524] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.170464][ T4524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.180130][ T4524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.189449][ T4524] bond0 (unregistering): Released all slaves [ 112.197316][ T4524] bond1 (unregistering): Released all slaves [ 112.205212][ T4524] bond2 (unregistering): Released all slaves [ 112.213341][T10296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.231607][T10296] team0: Port device team_slave_0 added [ 112.237846][T10296] team0: Port device team_slave_1 added [ 112.249415][ T4524] hsr_slave_0: left promiscuous mode [ 112.254922][ T4524] hsr_slave_1: left promiscuous mode [ 112.260507][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.267850][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.275415][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.282833][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.291327][ T4524] veth1_macvtap: left promiscuous mode [ 112.296788][ T4524] veth0_macvtap: left promiscuous mode [ 112.302275][ T4524] veth1_vlan: left promiscuous mode [ 112.307520][ T4524] veth0_vlan: left promiscuous mode [ 112.361832][ T4524] team0 (unregistering): Port device team_slave_1 removed [ 112.371104][ T4524] team0 (unregistering): Port device team_slave_0 removed [ 112.402439][T10296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.409449][T10296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.435427][T10296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.446853][T10296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.453840][T10296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.479712][T10296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.504164][T10296] hsr_slave_0: entered promiscuous mode [ 112.510119][T10296] hsr_slave_1: entered promiscuous mode [ 112.811142][T10296] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.819309][T10296] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.827463][T10296] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.835868][T10296] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.866242][T10296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.877585][T10296] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.886596][ T4524] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.893644][ T4524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.904060][ T4471] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.911141][ T4471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.961190][T10296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.011005][T10296] veth0_vlan: entered promiscuous mode [ 113.018064][T10296] veth1_vlan: entered promiscuous mode [ 113.031342][T10296] veth0_macvtap: entered promiscuous mode [ 113.038121][T10296] veth1_macvtap: entered promiscuous mode [ 113.048067][T10296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.058880][T10296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.068931][ T4471] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.077790][ T4471] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.086485][ T4471] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.096627][ T4471] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.113206][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 113.113217][ T29] audit: type=1400 audit(113.095:3016): avc: denied { mounton } for pid=10296 comm="syz-executor" path="/root/syzkaller.2j2HM2/syz-tmp" dev="sda1" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 113.144069][ T29] audit: type=1400 audit(113.095:3017): avc: denied { mount } for pid=10296 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 113.165664][ T29] audit: type=1400 audit(113.105:3018): avc: denied { mounton } for pid=10296 comm="syz-executor" path="/root/syzkaller.2j2HM2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 113.191977][ T29] audit: type=1400 audit(113.105:3019): avc: denied { mounton } for pid=10296 comm="syz-executor" path="/root/syzkaller.2j2HM2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=30822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 113.219072][ T29] audit: type=1400 audit(113.125:3020): avc: denied { mounton } for pid=10296 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 113.241768][ T29] audit: type=1400 audit(113.125:3021): avc: denied { mount } for pid=10296 comm="syz-executor" name="/" dev="gadgetfs" ino=4683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 113.403543][ T29] audit: type=1326 audit(113.385:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.6.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053a97f749 code=0x7ffc0000 [ 113.426500][ T29] audit: type=1326 audit(113.385:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.6.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053a97f749 code=0x7ffc0000 [ 113.469288][ T29] audit: type=1326 audit(113.385:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.6.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f053a97f749 code=0x7ffc0000 [ 113.492258][ T29] audit: type=1326 audit(113.385:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.6.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053a97f749 code=0x7ffc0000 [ 113.554636][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2938'. [ 114.019497][T10431] sd 0:0:1:0: device reset [ 114.057716][T10427] x_tables: duplicate entry at hook 1 [ 114.067958][T10436] netlink: 'syz.3.2956': attribute type 4 has an invalid length. [ 114.085175][T10436] netlink: 'syz.3.2956': attribute type 4 has an invalid length. [ 114.208713][T10447] netlink: 'syz.1.2961': attribute type 10 has an invalid length. [ 114.216549][T10447] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2961'. [ 114.244933][T10452] futex_wake_op: syz.6.2964 tries to shift op by -1; fix this program [ 114.278459][T10447] dummy0: entered promiscuous mode [ 114.284248][T10447] bridge0: port 3(dummy0) entered blocking state [ 114.290649][T10447] bridge0: port 3(dummy0) entered disabled state [ 114.297615][T10447] dummy0: entered allmulticast mode [ 114.335212][T10447] bridge0: port 3(dummy0) entered blocking state [ 114.341653][T10447] bridge0: port 3(dummy0) entered forwarding state [ 114.382475][T10463] program syz.0.2969 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.399174][ T9] IPVS: starting estimator thread 0... [ 114.415197][T10469] loop3: detected capacity change from 0 to 1024 [ 114.422278][T10469] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 114.433304][T10469] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 114.434044][T10469] JBD2: no valid journal superblock found [ 114.434056][T10469] EXT4-fs (loop3): Could not load journal inode [ 114.488700][T10470] IPVS: using max 2448 ests per chain, 122400 per kthread [ 114.567775][T10485] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10485 comm=syz.1.2980 [ 114.626194][T10486] macvtap0: refused to change device tx_queue_len [ 114.743068][T10522] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10522 comm=syz.0.2996 [ 114.930358][T10536] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3001'. [ 115.017727][T10554] SELinux: Context system_u:object is not valid (left unmapped). [ 115.203445][T10587] loop6: detected capacity change from 0 to 512 [ 115.210083][T10587] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.216770][T10587] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 115.237037][T10587] EXT4-fs (loop6): 1 truncate cleaned up [ 115.243390][T10592] SELinux: failed to load policy [ 115.244972][T10587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.314840][T10598] EXT4-fs (loop6): shut down requested (2) [ 115.364039][T10605] netlink: 'syz.1.3031': attribute type 4 has an invalid length. [ 115.376450][T10605] netlink: 'syz.1.3031': attribute type 4 has an invalid length. [ 115.409316][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.553514][T10624] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10624 comm=syz.1.3040 [ 116.006411][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3072'. [ 116.016051][T10695] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3072'. [ 116.062028][T10703] loop3: detected capacity change from 0 to 1024 [ 116.069279][T10703] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 116.080181][T10703] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 116.090413][T10703] JBD2: no valid journal superblock found [ 116.096133][T10703] EXT4-fs (loop3): Could not load journal inode [ 116.106711][T10703] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 116.140100][T10710] hub 9-0:1.0: USB hub found [ 116.144737][T10710] hub 9-0:1.0: 8 ports detected [ 116.342986][T10747] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3097'. [ 116.352700][T10747] netlink: 'syz.3.3097': attribute type 12 has an invalid length. [ 116.360632][T10747] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3097'. [ 116.408908][T10758] veth0: entered promiscuous mode [ 116.414606][T10758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3102'. [ 116.515422][T10777] delete_channel: no stack [ 116.647659][T10801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.656739][T10801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.364530][T10841] loop1: detected capacity change from 0 to 512 [ 117.379183][T10847] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 117.389918][T10847] SELinux: failed to load policy [ 117.395335][T10841] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.404388][T10841] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 117.414108][T10841] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 117.422266][T10841] EXT4-fs (loop1): failed to initialize system zone (-117) [ 117.448511][T10841] EXT4-fs (loop1): mount failed [ 117.461934][T10841] SELinux: unknown common 2 [ 117.474379][T10841] SELinux: failed to load policy [ 117.759188][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3155'. [ 117.768158][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3155'. [ 117.849315][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3155'. [ 117.858190][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3155'. [ 118.090642][T10930] netlink: 'syz.3.3176': attribute type 10 has an invalid length. [ 118.109087][T10930] team0: Device veth0_macvtap failed to register rx_handler [ 118.119057][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 118.119068][ T29] audit: type=1326 audit(118.095:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.2.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 118.149624][T10932] netlink: 'syz.0.3177': attribute type 19 has an invalid length. [ 118.157480][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3177'. [ 118.170980][T10932] netlink: 'syz.0.3177': attribute type 19 has an invalid length. [ 118.178819][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3177'. [ 118.185404][ T29] audit: type=1326 audit(118.105:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.2.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 118.187849][ T4516] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.210612][ T29] audit: type=1326 audit(118.135:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.2.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 118.219678][ T4516] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.241626][ T29] audit: type=1326 audit(118.135:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.2.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 118.272726][ T29] audit: type=1326 audit(118.155:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.2.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 118.295667][ T29] audit: type=1326 audit(118.165:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.2.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 118.296003][ T4516] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.332068][ T4516] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.341301][T10937] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3179'. [ 118.366758][ T29] audit: type=1326 audit(118.235:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.2.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 118.389758][ T29] audit: type=1326 audit(118.255:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.2.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 118.412621][ T29] audit: type=1326 audit(118.265:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.2.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 118.435593][ T29] audit: type=1326 audit(118.275:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.2.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 118.479417][T10951] netlink: 'syz.2.3186': attribute type 1 has an invalid length. [ 118.708903][T11003] atomic_op ffff88811bcd1128 conn xmit_atomic 0000000000000000 [ 118.765677][T11016] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 119.035130][T11067] loop1: detected capacity change from 0 to 2048 [ 119.068777][T11067] loop1: p1 < > p4 [ 119.073782][T11067] loop1: p4 size 8388608 extends beyond EOD, truncated [ 119.087309][T11071] syzkaller0: entered promiscuous mode [ 119.092813][T11071] syzkaller0: entered allmulticast mode [ 119.130135][T11076] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 119.137476][T11076] vhci_hcd: invalid port number 96 [ 119.142643][T11076] vhci_hcd: default hub control req: 0500 vfffa i0060 l0 [ 119.163115][T11083] netlink: 'syz.2.3247': attribute type 3 has an invalid length. [ 119.517186][T11151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.525989][T11151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.551471][T11156] netem: incorrect ge model size [ 119.556432][T11156] netem: change failed [ 120.016678][T11209] loop6: detected capacity change from 0 to 1024 [ 120.023568][T11209] EXT4-fs: Ignoring removed oldalloc option [ 120.029549][T11209] EXT4-fs: Ignoring removed bh option [ 120.039741][T11209] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.138593][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.810392][T11330] atomic_op ffff8881a5643528 conn xmit_atomic 0000000000000000 [ 120.988022][T11360] loop6: detected capacity change from 0 to 512 [ 120.995113][T11360] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 121.006711][T11360] EXT4-fs (loop6): 1 truncate cleaned up [ 121.013098][T11360] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.051094][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.091426][T11374] bond0: entered promiscuous mode [ 121.114522][T11381] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 121.121050][T11381] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 121.128874][T11381] vhci_hcd vhci_hcd.0: Device attached [ 121.143313][T11382] vhci_hcd: connection closed [ 121.143708][ T4496] vhci_hcd: stop threads [ 121.152657][ T4496] vhci_hcd: release socket [ 121.157125][ T4496] vhci_hcd: disconnect device [ 121.236998][T11398] vlan0: entered promiscuous mode [ 121.242505][T11395] vlan0: left promiscuous mode [ 121.313874][T11408] loop6: detected capacity change from 0 to 128 [ 121.314560][T11409] loop1: detected capacity change from 0 to 1024 [ 121.333825][T11408] syz.6.3396: attempt to access beyond end of device [ 121.333825][T11408] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 121.348701][T11409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 121.361090][T11408] syz.6.3396: attempt to access beyond end of device [ 121.361090][T11408] loop6: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 121.374519][T11408] Buffer I/O error on dev loop6, logical block 79, lost async page write [ 121.385901][T11409] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.3397: lblock 3 mapped to illegal pblock 3 (length 3) [ 121.408118][T11409] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 121.420415][T11408] syz.6.3396: attempt to access beyond end of device [ 121.420415][T11408] loop6: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 121.420442][T11408] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 121.433939][T11409] EXT4-fs (loop1): This should not happen!! Data will be lost [ 121.433939][T11409] [ 121.456407][T11409] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.3397: lblock 3 mapped to illegal pblock 3 (length 1) [ 121.471402][T11409] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.3397: lblock 3 mapped to illegal pblock 3 (length 1) [ 121.472259][T11408] syz.6.3396: attempt to access beyond end of device [ 121.472259][T11408] loop6: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 121.508850][T11409] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.3397: lblock 3 mapped to illegal pblock 3 (length 1) [ 121.515537][T11408] syz.6.3396: attempt to access beyond end of device [ 121.515537][T11408] loop6: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 121.536247][T11408] Buffer I/O error on dev loop6, logical block 83, lost async page write [ 121.536461][T11407] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 4: comm syz.1.3397: lblock 4 mapped to illegal pblock 4 (length 2) [ 121.545460][T11408] syz.6.3396: attempt to access beyond end of device [ 121.545460][T11408] loop6: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 121.572063][T11408] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 121.581017][T11408] syz.6.3396: attempt to access beyond end of device [ 121.581017][T11408] loop6: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 121.594639][T11409] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.3397: lblock 3 mapped to illegal pblock 3 (length 1) [ 121.595116][T11408] syz.6.3396: attempt to access beyond end of device [ 121.595116][T11408] loop6: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 121.614543][T11407] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 4: comm syz.1.3397: lblock 4 mapped to illegal pblock 4 (length 2) [ 121.622037][T11408] Buffer I/O error on dev loop6, logical block 95, lost async page write [ 121.644694][T11408] syz.6.3396: attempt to access beyond end of device [ 121.644694][T11408] loop6: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 121.658151][T11408] Buffer I/O error on dev loop6, logical block 96, lost async page write [ 121.666978][T11408] syz.6.3396: attempt to access beyond end of device [ 121.666978][T11408] loop6: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 121.694047][T11409] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.3397: lblock 3 mapped to illegal pblock 3 (length 1) [ 121.715617][T11408] Buffer I/O error on dev loop6, logical block 99, lost async page write [ 121.734207][T11407] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 4: comm syz.1.3397: lblock 4 mapped to illegal pblock 4 (length 2) [ 121.734703][T11408] Buffer I/O error on dev loop6, logical block 100, lost async page write [ 121.763458][T11408] Buffer I/O error on dev loop6, logical block 111, lost async page write [ 121.773094][T11409] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.3397: lblock 3 mapped to illegal pblock 3 (length 1) [ 121.802228][T11408] Buffer I/O error on dev loop6, logical block 112, lost async page write [ 121.823148][T11432] bridge0: entered promiscuous mode [ 121.831097][T11432] macsec1: entered promiscuous mode [ 121.838327][T11432] bridge0: port 3(macsec1) entered blocking state [ 121.844785][T11432] bridge0: port 3(macsec1) entered disabled state [ 121.861026][T11432] macsec1: entered allmulticast mode [ 121.866332][T11432] bridge0: entered allmulticast mode [ 121.872596][T11432] macsec1: left allmulticast mode [ 121.877867][T11432] bridge0: left allmulticast mode [ 121.989116][T11432] bridge0: left promiscuous mode [ 122.203083][ T4524] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 122.215494][ T4524] EXT4-fs (loop1): This should not happen!! Data will be lost [ 122.215494][ T4524] [ 122.243078][ T9265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 122.271759][T11463] __nla_validate_parse: 4 callbacks suppressed [ 122.271774][T11463] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3423'. [ 122.279304][T11465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3424'. [ 122.287331][T11463] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3423'. [ 122.324824][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3424'. [ 122.333833][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3424'. [ 122.798801][T11469] Set syz1 is full, maxelem 65536 reached [ 122.920914][T11526] vlan2: entered allmulticast mode [ 122.986522][T11542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3456'. [ 122.992144][T11544] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3457'. [ 123.026198][T11547] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3458'. [ 123.142616][T11574] netlink: 432 bytes leftover after parsing attributes in process `syz.3.3472'. [ 123.159335][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 123.159349][ T29] audit: type=1326 audit(123.145:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11575 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 123.189133][ T29] audit: type=1326 audit(123.145:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11575 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 123.212082][ T29] audit: type=1326 audit(123.145:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11575 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 123.234946][ T29] audit: type=1326 audit(123.145:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11575 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 123.315475][ T29] audit: type=1400 audit(123.295:3751): avc: denied { name_bind } for pid=11588 comm="syz.1.3488" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 123.342001][T11587] loop3: detected capacity change from 0 to 8192 [ 123.354948][ T29] audit: type=1400 audit(123.335:3752): avc: denied { mount } for pid=11586 comm="syz.3.3477" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 123.422296][ T29] audit: type=1400 audit(123.405:3753): avc: denied { name_bind } for pid=11597 comm="syz.3.3481" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 123.443537][ T29] audit: type=1400 audit(123.405:3754): avc: denied { node_bind } for pid=11597 comm="syz.3.3481" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 123.468043][T11598] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 123.525914][ T29] audit: type=1400 audit(123.505:3755): avc: denied { connect } for pid=11604 comm="syz.3.3484" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.552031][ T29] audit: type=1400 audit(123.505:3756): avc: denied { write } for pid=11604 comm="syz.3.3484" laddr=fe80::a8aa:aaff:feaa:aa16 lport=60 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.582636][T11609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3486'. [ 123.606698][ T4516] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 123.617420][T11607] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 123.729368][T11625] loop1: detected capacity change from 0 to 8192 [ 123.772709][T11636] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 123.772839][T11635] IPVS: stopping master sync thread 11636 ... [ 123.865666][T11646] binfmt_misc: register: failed to install interpreter file ./file0 [ 123.911337][T11651] bridge0: entered promiscuous mode [ 123.916862][T11651] macsec1: entered promiscuous mode [ 123.923617][T11651] bridge0: port 4(macsec1) entered blocking state [ 123.930372][T11651] bridge0: port 4(macsec1) entered disabled state [ 123.938128][T11651] macsec1: entered allmulticast mode [ 123.943469][T11651] bridge0: entered allmulticast mode [ 123.955483][T11634] loop3: detected capacity change from 0 to 32768 [ 123.962277][T11651] macsec1: left allmulticast mode [ 123.967392][T11651] bridge0: left allmulticast mode [ 123.972917][T11651] bridge0: left promiscuous mode [ 123.989561][T11634] loop3: p1 p3 < > [ 124.032165][T11656] SELinux: ebitmap: truncated map [ 124.041255][T11656] SELinux: failed to load policy [ 124.079952][T11661] vlan2: entered allmulticast mode [ 124.123720][ T4524] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 124.133480][T11667] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 124.136169][ T4524] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.149247][ T4524] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.157854][ T4524] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.187383][ T4524] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.251138][T11691] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 124.326410][T11707] netlink: 'syz.6.3529': attribute type 19 has an invalid length. [ 124.334539][T11707] netlink: 'syz.6.3529': attribute type 19 has an invalid length. [ 124.359603][T11706] loop3: detected capacity change from 0 to 512 [ 124.368611][T11706] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.377644][T11706] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 124.386722][T11706] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 124.395231][T11706] EXT4-fs (loop3): failed to initialize system zone (-117) [ 124.397838][T11714] vlan2: entered allmulticast mode [ 124.402543][T11706] EXT4-fs (loop3): mount failed [ 124.423871][T11706] SELinux: unknown common 2 [ 124.431577][T11706] SELinux: failed to load policy [ 124.560424][T11732] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 124.598796][T11736] binfmt_misc: register: failed to install interpreter file ./file0 [ 124.711867][T11746] SELinux: unknown common 2 [ 124.716707][T11746] SELinux: failed to load policy [ 124.726926][T11755] loop3: detected capacity change from 0 to 128 [ 124.991742][T11782] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11782 comm=syz.3.3561 [ 125.310216][T11789] loop6: detected capacity change from 0 to 512 [ 125.317100][T11789] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 125.326298][T11789] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 125.335435][T11789] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 125.343443][T11789] EXT4-fs (loop6): failed to initialize system zone (-117) [ 125.350740][T11789] EXT4-fs (loop6): mount failed [ 125.360467][T11789] SELinux: unknown common 2 [ 125.367865][T11789] SELinux: failed to load policy [ 125.394092][T11798] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 125.400639][T11798] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 125.408308][T11798] vhci_hcd vhci_hcd.0: Device attached [ 125.418682][T11799] vhci_hcd: connection closed [ 125.418943][ T52] vhci_hcd: stop threads [ 125.427950][ T52] vhci_hcd: release socket [ 125.432375][ T52] vhci_hcd: disconnect device [ 125.753972][T11802] loop1: detected capacity change from 0 to 32768 [ 125.807875][T11818] SELinux: ebitmap: truncated map [ 125.816750][T11802] loop1: p1 p3 < > [ 125.820528][T11818] SELinux: failed to load policy [ 126.094313][T11857] SELinux: ebitmap: truncated map [ 126.104336][T11857] SELinux: failed to load policy [ 126.111260][T11864] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 126.164238][T11873] nfs: Bad value for 'source' [ 126.511704][T11899] syzkaller1: entered promiscuous mode [ 126.517283][T11899] syzkaller1: entered allmulticast mode [ 126.645577][T11905] nfs: Bad value for 'source' [ 126.666054][T11909] netlink: 'syz.2.3621': attribute type 8 has an invalid length. [ 127.388472][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 127.782992][T11935] netlink: 'syz.1.3627': attribute type 3 has an invalid length. [ 127.979505][T11970] __nla_validate_parse: 16 callbacks suppressed [ 127.979518][T11970] netlink: 444 bytes leftover after parsing attributes in process `syz.2.3649'. [ 127.995493][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3649'. [ 128.176760][ T29] kauditd_printk_skb: 449 callbacks suppressed [ 128.176775][ T29] audit: type=1326 audit(128.155:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11953 comm="syz.0.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f250ffff749 code=0x7ffc0000 [ 128.218202][ T29] audit: type=1326 audit(128.195:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11953 comm="syz.0.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f250ffff749 code=0x7ffc0000 [ 128.241162][ T29] audit: type=1326 audit(128.195:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11953 comm="syz.0.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f250ffff749 code=0x7ffc0000 [ 128.264214][ T29] audit: type=1326 audit(128.215:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11953 comm="syz.0.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f250ffff749 code=0x7ffc0000 [ 128.287443][ T29] audit: type=1326 audit(128.225:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11953 comm="syz.0.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f250ffff749 code=0x7ffc0000 [ 128.310321][ T29] audit: type=1326 audit(128.235:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11953 comm="syz.0.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f250ffff749 code=0x7ffc0000 [ 128.333635][ T29] audit: type=1326 audit(128.245:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11953 comm="syz.0.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f250ffff749 code=0x7ffc0000 [ 128.357081][ T29] audit: type=1326 audit(128.265:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11953 comm="syz.0.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f250ffff749 code=0x7ffc0000 [ 128.380143][ T29] audit: type=1326 audit(128.275:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11953 comm="syz.0.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f250ffff749 code=0x7ffc0000 [ 128.403060][ T29] audit: type=1326 audit(128.285:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11953 comm="syz.0.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f250ffff749 code=0x7ffc0000 [ 128.506872][T12011] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12011 comm=syz.6.3665 [ 128.528505][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 128.561388][T12013] netlink: 444 bytes leftover after parsing attributes in process `syz.3.3666'. [ 128.587320][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3666'. [ 128.666888][T12017] netlink: 'syz.1.3668': attribute type 8 has an invalid length. [ 128.708107][T11989] Set syz1 is full, maxelem 65536 reached [ 128.741890][T12021] syzkaller0: entered promiscuous mode [ 128.747408][T12021] syzkaller0: entered allmulticast mode [ 128.783809][T12023] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 129.851684][T12185] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 129.927612][T12197] loop6: detected capacity change from 0 to 1024 [ 129.939126][T12197] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.949108][T12197] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 129.957252][T12197] System zones: 0-1, 3-36 [ 129.962900][T12197] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.990261][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.046971][T12211] atomic_op ffff8881108efd28 conn xmit_atomic 0000000000000000 [ 130.233252][T12231] bond1: entered promiscuous mode [ 130.424935][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3770'. [ 130.520730][T12225] Set syz1 is full, maxelem 65536 reached [ 130.811457][T12277] loop3: detected capacity change from 0 to 512 [ 130.820958][T12277] EXT4-fs: Ignoring removed bh option [ 130.839329][T12277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.906586][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.244128][T12328] loop6: detected capacity change from 0 to 512 [ 131.274250][T12328] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 131.297504][T12328] EXT4-fs (loop6): mount failed [ 131.443790][T12347] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 131.451700][T12347] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 131.459595][T12347] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 131.467352][T12347] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 131.475123][T12347] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 131.482991][T12347] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 131.490784][T12347] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 131.498537][T12347] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 131.587861][T12367] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3821'. [ 131.651408][T12380] loop1: detected capacity change from 0 to 512 [ 131.665834][T12382] syzkaller1: entered promiscuous mode [ 131.668141][T12380] EXT4-fs error (device loop1): ext4_get_journal_inode:5808: comm syz.1.3827: inode #1792: comm syz.1.3827: iget: illegal inode # [ 131.671390][T12382] syzkaller1: entered allmulticast mode [ 131.691430][T12380] EXT4-fs (loop1): Remounting filesystem read-only [ 131.697961][T12380] EXT4-fs (loop1): no journal found [ 131.703172][T12380] EXT4-fs (loop1): can't get journal size [ 131.712652][T12380] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 131.724613][T12380] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 131.732797][T12380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.786402][ T9265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.922568][T12400] loop3: detected capacity change from 0 to 1024 [ 131.950490][T12400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 131.971007][T12400] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.3835: lblock 3 mapped to illegal pblock 3 (length 3) [ 131.985618][T12400] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 131.997976][T12400] EXT4-fs (loop3): This should not happen!! Data will be lost [ 131.997976][T12400] [ 132.016525][T12400] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.3835: lblock 3 mapped to illegal pblock 3 (length 1) [ 132.032419][T12400] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.3835: lblock 3 mapped to illegal pblock 3 (length 1) [ 132.047079][T12400] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.3835: lblock 3 mapped to illegal pblock 3 (length 1) [ 132.077999][T12400] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.3835: lblock 3 mapped to illegal pblock 3 (length 1) [ 132.079798][T12399] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 4: comm syz.3.3835: lblock 4 mapped to illegal pblock 4 (length 2) [ 132.093162][T12400] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.3835: lblock 3 mapped to illegal pblock 3 (length 1) [ 132.114667][T12399] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 4: comm syz.3.3835: lblock 4 mapped to illegal pblock 4 (length 2) [ 132.134843][T12399] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 4: comm syz.3.3835: lblock 4 mapped to illegal pblock 4 (length 2) [ 132.149443][T12399] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 4: comm syz.3.3835: lblock 4 mapped to illegal pblock 4 (length 2) [ 132.253962][T12419] loop6: detected capacity change from 0 to 512 [ 132.279255][T12419] EXT4-fs error (device loop6): ext4_get_journal_inode:5808: comm syz.6.3841: inode #1792: comm syz.6.3841: iget: illegal inode # [ 132.298928][T12419] EXT4-fs (loop6): Remounting filesystem read-only [ 132.305465][T12419] EXT4-fs (loop6): no journal found [ 132.310694][T12419] EXT4-fs (loop6): can't get journal size [ 132.324708][T12419] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 132.334507][T12419] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 132.342797][T12419] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.369797][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.789148][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 132.801471][ T52] EXT4-fs (loop3): This should not happen!! Data will be lost [ 132.801471][ T52] [ 132.812653][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 132.840814][T12455] cgroup: Unknown subsys name 'cpuset' [ 132.899398][T12466] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.3861'. [ 133.181542][ T29] kauditd_printk_skb: 2995 callbacks suppressed [ 133.181556][ T29] audit: type=1326 audit(133.165:7210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12444 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 133.214533][ T29] audit: type=1326 audit(133.195:7211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12444 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 133.238176][ T29] audit: type=1326 audit(133.205:7212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12444 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 133.241212][T12496] loop3: detected capacity change from 0 to 2048 [ 133.261154][ T29] audit: type=1326 audit(133.215:7213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12444 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 133.290284][ T29] audit: type=1326 audit(133.255:7214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12444 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 133.313231][ T29] audit: type=1326 audit(133.265:7215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12444 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 133.315579][T12496] Alternate GPT is invalid, using primary GPT. [ 133.336088][ T29] audit: type=1326 audit(133.275:7216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12444 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 133.336112][ T29] audit: type=1326 audit(133.295:7217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12444 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 133.342726][ T29] audit: type=1326 audit(133.325:7218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12444 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 133.365252][T12496] loop3: p2 p3 p7 [ 133.388143][ T29] audit: type=1326 audit(133.375:7219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12444 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 133.444295][T12499] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3876'. [ 134.660323][T12563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3899'. [ 134.668458][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 134.927951][T12578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.936786][T12578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.482486][T12594] netlink: 'syz.1.3917': attribute type 1 has an invalid length. [ 135.496994][T12594] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.510129][T12594] bond2 (unregistering): Released all slaves [ 135.563606][T12601] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 135.592768][T12604] loop1: detected capacity change from 0 to 2048 [ 135.600742][T12604] EXT4-fs: Ignoring removed bh option [ 135.620342][T12604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.640581][T12613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.712046][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3927'. [ 135.727384][T12613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.827067][ T4524] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 135.857191][ T4524] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 18 with max blocks 8 with error 28 [ 135.869617][ T4524] EXT4-fs (loop1): This should not happen!! Data will be lost [ 135.869617][ T4524] [ 135.879269][ T4524] EXT4-fs (loop1): Total free blocks count 0 [ 135.885241][ T4524] EXT4-fs (loop1): Free/Dirty block details [ 135.891145][ T4524] EXT4-fs (loop1): free_blocks=2415919104 [ 135.896963][ T4524] EXT4-fs (loop1): dirty_blocks=32 [ 135.902080][ T4524] EXT4-fs (loop1): Block reservation details [ 135.908049][ T4524] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 135.947584][ T9265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.115497][T12671] loop1: detected capacity change from 0 to 164 [ 136.520474][T12729] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 136.540733][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3977'. [ 136.632237][T12747] IPv6: NLM_F_CREATE should be specified when creating new route [ 136.678366][T12754] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 136.708835][T12759] 9p: Unknown Cache mode or invalid value r [ 136.867774][T12775] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3999'. [ 136.876962][T12775] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 136.884297][T12775] 0ªî{X¹¦: entered allmulticast mode [ 136.890204][T12775] net_ratelimit: 51 callbacks suppressed [ 136.890281][T12775] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 137.291166][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4011'. [ 137.361378][T12810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4015'. [ 137.466356][T12822] IPv6: NLM_F_CREATE should be specified when creating new route [ 137.495938][T12826] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4023'. [ 137.521063][T12826] netlink: 'syz.2.4023': attribute type 12 has an invalid length. [ 137.529206][T12826] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4023'. [ 137.870871][T12856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4037'. [ 137.878476][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 138.397092][T12868] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 138.398859][ T29] kauditd_printk_skb: 372 callbacks suppressed [ 138.398871][ T29] audit: type=1326 audit(138.375:7592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12869 comm="syz.1.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 138.445949][ T29] audit: type=1326 audit(138.415:7593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12869 comm="syz.1.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 138.468894][ T29] audit: type=1326 audit(138.415:7594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12869 comm="syz.1.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faad04cf783 code=0x7ffc0000 [ 138.491587][ T29] audit: type=1326 audit(138.415:7595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12869 comm="syz.1.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faad04cf783 code=0x7ffc0000 [ 138.514252][ T29] audit: type=1326 audit(138.415:7596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12869 comm="syz.1.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 138.537086][ T29] audit: type=1326 audit(138.415:7597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12869 comm="syz.1.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 138.559922][ T29] audit: type=1326 audit(138.415:7598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12869 comm="syz.1.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 138.582837][ T29] audit: type=1326 audit(138.415:7599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12869 comm="syz.1.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 138.605757][ T29] audit: type=1326 audit(138.415:7600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12869 comm="syz.1.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 138.628643][ T29] audit: type=1326 audit(138.415:7601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12869 comm="syz.1.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 138.818777][T12909] tipc: Started in network mode [ 138.823661][T12909] tipc: Node identity ac14140f, cluster identity 4711 [ 138.831124][T12909] tipc: New replicast peer: 255.255.255.255 [ 138.837494][T12909] tipc: Enabled bearer , priority 10 [ 138.845650][T12909] __nla_validate_parse: 1 callbacks suppressed [ 138.845663][T12909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4062'. [ 138.860965][T12909] tipc: Disabling bearer [ 138.978451][T12924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4068'. [ 139.305306][T12959] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 139.531043][T12986] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4096'. [ 139.542000][T12986] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4096'. [ 139.554743][T12988] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4097'. [ 139.610423][T12991] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 4278190080) [ 139.622572][T12991] SELinux: failed to load policy [ 139.656766][ T23] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 139.674376][ T23] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 140.005939][T13032] loop1: detected capacity change from 0 to 512 [ 140.029336][T13032] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 140.037442][T13032] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #13: comm syz.1.4118: iget: bad i_size value: 12154757448730 [ 140.064614][T13032] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4118: couldn't read orphan inode 13 (err -117) [ 140.078937][T13032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.128829][ T9265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.447212][T13072] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4134'. [ 140.708598][T13088] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 140.708598][T13088] program syz.0.4141 not setting count and/or reply_len properly [ 140.823123][T13058] Set syz1 is full, maxelem 65536 reached [ 141.093088][T13124] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 141.694027][T13173] loop3: detected capacity change from 0 to 8192 [ 141.762724][T13179] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4181'. [ 141.885791][T13197] loop1: detected capacity change from 0 to 1024 [ 141.918321][T13197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.947263][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4190'. [ 142.037919][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4190'. [ 142.472032][ T9265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.609144][T13240] Set syz1 is full, maxelem 65536 reached [ 142.688322][T13247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.715677][T13247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.986892][T13282] ref_ctr_offset mismatch. inode: 0xab offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 142.988965][T13284] netlink: 'syz.2.4222': attribute type 1 has an invalid length. [ 143.005641][T13284] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4222'. [ 143.022715][T13286] loop1: detected capacity change from 0 to 2048 [ 143.052223][T13286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.108322][ T9265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.398793][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 143.398805][ T29] audit: type=1326 audit(143.385:7971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13329 comm="syz.1.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 143.434116][ T29] audit: type=1326 audit(143.415:7972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13329 comm="syz.1.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 143.459098][ T29] audit: type=1400 audit(143.415:7973): avc: denied { create } for pid=13346 comm="syz.6.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 143.478112][ T29] audit: type=1400 audit(143.435:7974): avc: denied { write } for pid=13346 comm="syz.6.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 143.496881][ T29] audit: type=1326 audit(143.445:7975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13329 comm="syz.1.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 143.522363][ T29] audit: type=1326 audit(143.465:7976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13329 comm="syz.1.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 143.545309][ T29] audit: type=1326 audit(143.475:7977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13329 comm="syz.1.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 143.568181][ T29] audit: type=1326 audit(143.485:7978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13329 comm="syz.1.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 143.591053][ T29] audit: type=1326 audit(143.495:7979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13329 comm="syz.1.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 143.614642][ T29] audit: type=1326 audit(143.525:7980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13329 comm="syz.1.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 143.932028][T13403] __nla_validate_parse: 1 callbacks suppressed [ 143.932042][T13403] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4273'. [ 143.948346][T13402] loop3: detected capacity change from 0 to 128 [ 143.962398][T13402] bio_check_eod: 74 callbacks suppressed [ 143.962411][T13402] syz.3.4274: attempt to access beyond end of device [ 143.962411][T13402] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 143.993748][T13402] syz.3.4274: attempt to access beyond end of device [ 143.993748][T13402] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 144.007140][T13402] buffer_io_error: 46 callbacks suppressed [ 144.007152][T13402] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 144.023170][T13402] syz.3.4274: attempt to access beyond end of device [ 144.023170][T13402] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 144.036637][T13402] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 144.045553][T13402] syz.3.4274: attempt to access beyond end of device [ 144.045553][T13402] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 144.059915][T13402] syz.3.4274: attempt to access beyond end of device [ 144.059915][T13402] loop3: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 144.073328][T13402] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 144.086994][T13402] syz.3.4274: attempt to access beyond end of device [ 144.086994][T13402] loop3: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 144.100455][T13402] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 144.115037][T13402] syz.3.4274: attempt to access beyond end of device [ 144.115037][T13402] loop3: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 144.148745][T13402] syz.3.4274: attempt to access beyond end of device [ 144.148745][T13402] loop3: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 144.162214][T13402] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 144.210497][T13402] syz.3.4274: attempt to access beyond end of device [ 144.210497][T13402] loop3: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 144.224006][T13402] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 144.239542][T13402] syz.3.4274: attempt to access beyond end of device [ 144.239542][T13402] loop3: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 144.286482][T13402] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 144.295179][T13402] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 144.305080][T13402] Buffer I/O error on dev loop3, logical block 111, lost async page write [ 144.314307][T13402] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 144.950464][T13429] netlink: 'syz.1.4282': attribute type 1 has an invalid length. [ 144.958222][T13429] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4282'. [ 145.136294][T13465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4296'. [ 145.305798][T13488] loop3: detected capacity change from 0 to 512 [ 145.350876][T13488] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 145.382692][T13488] EXT4-fs (loop3): mount failed [ 145.541954][ T4524] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.551889][ T4524] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.631219][ T4524] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.641068][ T4524] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.700313][ T4524] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.710306][ T4524] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.751521][ T4524] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.761387][ T4524] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.807100][T13508] chnl_net:caif_netlink_parms(): no params data found [ 145.863800][T13508] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.871086][T13508] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.878675][T13508] bridge_slave_0: entered allmulticast mode [ 145.885081][T13508] bridge_slave_0: entered promiscuous mode [ 145.891908][T13697] loop1: detected capacity change from 0 to 512 [ 145.892337][T13508] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.905233][T13508] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.912720][T13508] bridge_slave_1: entered allmulticast mode [ 145.919065][T13508] bridge_slave_1: entered promiscuous mode [ 145.919598][T13697] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 145.925435][ T4524] bridge_slave_1: left allmulticast mode [ 145.939914][T13697] EXT4-fs (loop1): mount failed [ 145.945256][ T4524] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.958331][ T4524] bridge_slave_0: left promiscuous mode [ 145.964016][ T4524] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.080759][ T4524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.095611][ T4524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.108650][ T4524] bond0 (unregistering): Released all slaves [ 146.128018][T13715] syzkaller1: entered promiscuous mode [ 146.133595][T13715] syzkaller1: entered allmulticast mode [ 146.163760][T13508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.190727][T13508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.202340][ T4524] hsr_slave_0: left promiscuous mode [ 146.208085][ T4524] hsr_slave_1: left promiscuous mode [ 146.228999][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.236384][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.253700][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.261105][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.270115][ T4524] veth1_macvtap: left promiscuous mode [ 146.278984][ T4524] veth0_macvtap: left promiscuous mode [ 146.284487][ T4524] veth1_vlan: left promiscuous mode [ 146.298641][ T4524] veth0_vlan: left promiscuous mode [ 146.384376][T13769] loop1: detected capacity change from 0 to 512 [ 146.403725][ T4524] team0 (unregistering): Port device team_slave_1 removed [ 146.415395][ T4524] team0 (unregistering): Port device team_slave_0 removed [ 146.439001][T13769] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.4331: iget: bad extra_isize 90 (inode size 256) [ 146.461359][T13769] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.4331: error while reading EA inode 18 err=-117 [ 146.482998][T13769] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.4331: iget: bad extra_isize 90 (inode size 256) [ 146.509342][T13508] team0: Port device team_slave_0 added [ 146.515944][T13508] team0: Port device team_slave_1 added [ 146.540178][T13769] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.4331: error while reading EA inode 18 err=-117 [ 146.564163][T13769] EXT4-fs (loop1): 1 orphan inode deleted [ 146.570574][T13769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.583675][T13508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.590706][T13508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.616709][T13508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.632255][T13508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.639226][T13508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.665158][T13508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.676834][ T9265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.706025][T13855] loop6: detected capacity change from 0 to 512 [ 146.708637][T13508] hsr_slave_0: entered promiscuous mode [ 146.725402][T13508] hsr_slave_1: entered promiscuous mode [ 146.731937][T13508] debugfs: 'hsr0' already exists in 'hsr' [ 146.737660][T13508] Cannot create hsr debugfs directory [ 146.759963][T13855] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.4345: iget: bad extra_isize 90 (inode size 256) [ 146.778868][T13855] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.4345: error while reading EA inode 18 err=-117 [ 146.806531][T13855] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.4345: iget: bad extra_isize 90 (inode size 256) [ 146.830616][T13855] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.4345: error while reading EA inode 18 err=-117 [ 146.843892][T13855] EXT4-fs (loop6): 1 orphan inode deleted [ 146.850243][T13855] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.970258][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.000581][ T4524] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.010514][ T4524] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.075315][T13964] loop1: detected capacity change from 0 to 128 [ 147.083933][ T4524] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.093739][ T4524] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.157100][T14001] loop6: detected capacity change from 0 to 512 [ 147.166765][ T4524] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.176550][ T4524] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.177913][T14001] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 147.201437][T14001] EXT4-fs (loop6): mount failed [ 147.246492][ T4524] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.256368][ T4524] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.282731][T13940] chnl_net:caif_netlink_parms(): no params data found [ 147.290938][T13508] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 147.299362][T13508] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 147.319897][T13508] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 147.330904][T13508] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 147.359253][T13940] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.366312][T13940] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.373522][T13940] bridge_slave_0: entered allmulticast mode [ 147.379971][T13940] bridge_slave_0: entered promiscuous mode [ 147.391625][T13940] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.398762][T13940] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.405861][T13940] bridge_slave_1: entered allmulticast mode [ 147.412307][T13940] bridge_slave_1: entered promiscuous mode [ 147.438444][T13940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.448629][T13940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.457846][ T4524] bridge_slave_1: left allmulticast mode [ 147.463621][ T4524] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.471161][ T4524] bridge_slave_0: left allmulticast mode [ 147.476897][ T4524] bridge_slave_0: left promiscuous mode [ 147.482595][ T4524] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.560670][ T4524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.570241][ T4524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.579601][ T4524] bond0 (unregistering): Released all slaves [ 147.602482][T13940] team0: Port device team_slave_0 added [ 147.608944][T13940] team0: Port device team_slave_1 added [ 147.629277][ T4524] hsr_slave_0: left promiscuous mode [ 147.634823][ T4524] hsr_slave_1: left promiscuous mode [ 147.642357][ T4524] veth1_macvtap: left promiscuous mode [ 147.647887][ T4524] veth1_vlan: left promiscuous mode [ 147.653163][ T4524] veth0_vlan: left promiscuous mode [ 147.701944][ T4524] team0 (unregistering): Port device team_slave_1 removed [ 147.710906][ T4524] team0 (unregistering): Port device team_slave_0 removed [ 147.731672][ T4524] team0 (unregistering): Port device dummy0 removed [ 147.742345][T13940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.749429][T13940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.775323][T13940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.786486][T13940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.793475][T13940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.819386][T13940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.849194][T13940] hsr_slave_0: entered promiscuous mode [ 147.855226][T13940] hsr_slave_1: entered promiscuous mode [ 147.861067][T13940] debugfs: 'hsr0' already exists in 'hsr' [ 147.866776][T13940] Cannot create hsr debugfs directory [ 147.902379][T13508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.933977][T13508] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.944324][ T4505] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.951394][ T4505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.961763][ T4529] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.968812][ T4529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.021925][T13508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.073056][T13508] veth0_vlan: entered promiscuous mode [ 148.080482][T13508] veth1_vlan: entered promiscuous mode [ 148.095464][T13508] veth0_macvtap: entered promiscuous mode [ 148.102591][T13508] veth1_macvtap: entered promiscuous mode [ 148.112068][T13508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.122352][T13508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.131936][ T4505] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.140778][ T4505] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.151549][ T4505] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.160359][ T4505] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.189689][T13940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 148.198222][T13940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 148.206983][T13940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 148.215715][T13940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 148.259050][T13940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.271647][T13940] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.282231][ T4529] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.289376][ T4529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.315086][T13940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.325509][T13940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.339032][ T4529] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.346142][ T4529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.377516][T14389] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 148.448121][T13940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.614199][T13940] veth0_vlan: entered promiscuous mode [ 148.638152][T13940] veth1_vlan: entered promiscuous mode [ 148.671461][T13940] veth0_macvtap: entered promiscuous mode [ 148.714435][T13940] veth1_macvtap: entered promiscuous mode [ 148.741109][T13940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.756693][T13940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.768990][ T4496] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.780915][ T4496] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.796464][ T4496] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.813632][T14454] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.4378'. [ 148.814878][ T4496] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.846159][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 148.846171][ T29] audit: type=1400 audit(156.824:8093): avc: denied { write } for pid=13940 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 148.855390][T14454] netlink: zone id is out of range [ 148.882579][T14454] netlink: zone id is out of range [ 148.895328][T14454] netlink: zone id is out of range [ 148.899356][ T29] audit: type=1400 audit(156.824:8094): avc: denied { open } for pid=13940 comm="syz-executor" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 148.913417][T14454] netlink: set zone limit has 8 unknown bytes [ 149.000421][T14470] A link change request failed with some changes committed already. Interface $Hÿ may have been left with an inconsistent configuration, please check. [ 149.112583][T14508] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4380'. [ 149.170791][ T29] audit: type=1326 audit(157.134:8095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14519 comm="syz.3.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb0fcf749 code=0x7ffc0000 [ 149.193709][ T29] audit: type=1326 audit(157.134:8096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14519 comm="syz.3.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb0fcf749 code=0x7ffc0000 [ 149.216646][ T29] audit: type=1326 audit(157.144:8097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14519 comm="syz.3.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fb0fcf749 code=0x7ffc0000 [ 149.239522][ T29] audit: type=1326 audit(157.144:8098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14519 comm="syz.3.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb0fcf749 code=0x7ffc0000 [ 149.262432][ T29] audit: type=1326 audit(157.144:8099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14519 comm="syz.3.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb0fcf749 code=0x7ffc0000 [ 149.285312][ T29] audit: type=1326 audit(157.144:8100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14519 comm="syz.3.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fb0fcf749 code=0x7ffc0000 [ 149.308171][ T29] audit: type=1326 audit(157.144:8101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14519 comm="syz.3.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb0fcf749 code=0x7ffc0000 [ 149.331029][ T29] audit: type=1326 audit(157.144:8102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14519 comm="syz.3.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fb0fcf749 code=0x7ffc0000 [ 149.359122][T14525] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.4387'. [ 149.378538][T14525] netlink: zone id is out of range [ 149.383659][T14525] netlink: zone id is out of range [ 149.388451][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 149.389050][T14525] netlink: zone id is out of range [ 149.416047][T14525] netlink: set zone limit has 8 unknown bytes [ 149.432664][T14531] syzkaller1: entered promiscuous mode [ 149.438141][T14531] syzkaller1: entered allmulticast mode [ 149.534410][T14550] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4396'. [ 149.890018][T14591] syzkaller1: entered promiscuous mode [ 149.895522][T14591] syzkaller1: entered allmulticast mode [ 149.919030][T14596] cgroup: Unknown subsys name 'cpuset' [ 150.055900][T14613] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4419'. [ 150.115942][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4421'. [ 150.285305][T14654] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.4427'. [ 150.543941][T14664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.552716][T14664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.529679][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4437'. [ 151.648424][T14727] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4448'. [ 152.377585][T14835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4485'. [ 152.482504][T14832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.491026][T14832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.105780][T14910] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 153.157199][T14918] 9p: Unknown Cache mode or invalid value r [ 153.289328][T14933] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4497'. [ 153.298315][T14933] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 153.306346][T14933] 0ªî{X¹¦: entered allmulticast mode [ 153.399476][T14923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.424990][T14923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.140835][T14997] __nla_validate_parse: 1 callbacks suppressed [ 154.140849][T14997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4512'. [ 154.236666][T15003] loop3: detected capacity change from 0 to 512 [ 154.263946][T15003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.323542][T13940] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.421775][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 154.421788][ T29] audit: type=1326 audit(162.404:8180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15026 comm="syz.0.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982687f749 code=0x7ffc0000 [ 154.469288][ T29] audit: type=1326 audit(162.434:8181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15026 comm="syz.0.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f982687f749 code=0x7ffc0000 [ 154.492224][ T29] audit: type=1326 audit(162.434:8182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15026 comm="syz.0.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982687f749 code=0x7ffc0000 [ 154.515358][ T29] audit: type=1326 audit(162.434:8183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15026 comm="syz.0.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982687f749 code=0x7ffc0000 [ 154.538299][ T29] audit: type=1326 audit(162.434:8184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15026 comm="syz.0.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f982687f749 code=0x7ffc0000 [ 154.561164][ T29] audit: type=1326 audit(162.434:8185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15026 comm="syz.0.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982687f749 code=0x7ffc0000 [ 154.584020][ T29] audit: type=1326 audit(162.434:8186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15026 comm="syz.0.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982687f749 code=0x7ffc0000 [ 154.606934][ T29] audit: type=1326 audit(162.434:8187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15026 comm="syz.0.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f982687f749 code=0x7ffc0000 [ 154.629982][ T29] audit: type=1326 audit(162.434:8188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15026 comm="syz.0.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982687f749 code=0x7ffc0000 [ 154.652913][ T29] audit: type=1326 audit(162.434:8189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15026 comm="syz.0.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982687f749 code=0x7ffc0000 [ 154.772688][T15041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4530'. [ 154.784129][T15041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4530'. [ 154.877195][T15033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.889787][T15033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.134393][T15058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.152061][ T3420] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 155.159770][ T3420] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 155.167629][ T3420] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x3 [ 155.180441][T15058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.187693][ T3420] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 155.344704][T15086] loop6: detected capacity change from 0 to 256 [ 155.857941][T15123] tipc: Started in network mode [ 155.862970][T15123] tipc: Node identity ac14140f, cluster identity 4711 [ 155.870062][T15123] tipc: New replicast peer: 255.255.255.255 [ 155.876109][T15123] tipc: Enabled bearer , priority 10 [ 155.929204][T15123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4557'. [ 155.938181][T15123] tipc: Disabling bearer [ 156.224884][T15200] loop3: detected capacity change from 0 to 2048 [ 156.231647][T15200] EXT4-fs: Ignoring removed bh option [ 156.244960][T15200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.340601][ T9] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 156.348298][ T9] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 156.364989][ T9] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x3 [ 156.397400][ T9] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 156.398286][T15185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.423635][T15185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.473100][ T4516] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 156.488074][ T4516] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 18 with max blocks 8 with error 28 [ 156.500385][ T4516] EXT4-fs (loop3): This should not happen!! Data will be lost [ 156.500385][ T4516] [ 156.510109][ T4516] EXT4-fs (loop3): Total free blocks count 0 [ 156.516082][ T4516] EXT4-fs (loop3): Free/Dirty block details [ 156.521984][ T4516] EXT4-fs (loop3): free_blocks=2415919104 [ 156.527697][ T4516] EXT4-fs (loop3): dirty_blocks=32 [ 156.532818][ T4516] EXT4-fs (loop3): Block reservation details [ 156.538884][ T4516] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 156.548762][T13940] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.769127][T15255] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4578'. [ 156.778119][T15255] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 156.845155][T15255] 0ªî{X¹¦: entered allmulticast mode [ 156.851779][T15255] net_ratelimit: 7 callbacks suppressed [ 156.851792][T15255] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 156.893070][T15257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.906805][T15257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.082213][T15277] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4588'. [ 157.185758][T15292] loop1: detected capacity change from 0 to 128 [ 157.188423][T15295] loop6: detected capacity change from 0 to 2048 [ 157.202118][T15295] EXT4-fs: Ignoring removed bh option [ 157.209646][T15292] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 157.219943][T15295] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.390554][ T4529] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 157.406025][ T4529] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 18 with max blocks 8 with error 28 [ 157.418309][ T4529] EXT4-fs (loop6): This should not happen!! Data will be lost [ 157.418309][ T4529] [ 157.427998][ T4529] EXT4-fs (loop6): Total free blocks count 0 [ 157.434060][ T4529] EXT4-fs (loop6): Free/Dirty block details [ 157.440071][ T4529] EXT4-fs (loop6): free_blocks=2415919104 [ 157.445792][ T4529] EXT4-fs (loop6): dirty_blocks=32 [ 157.450899][ T4529] EXT4-fs (loop6): Block reservation details [ 157.456858][ T4529] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 157.464235][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.548575][T15312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.560676][T15310] 9p: Unknown Cache mode or invalid value r [ 157.571457][T15312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.701615][T15332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4607'. [ 157.746754][T15311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.756195][T15311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.888649][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 157.901237][ T3375] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 158.289200][T15377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.304466][T15377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.331940][T15378] loop6: detected capacity change from 0 to 8192 [ 158.368705][T15378] loop6: p1 p2 < > p3 p4 < p5 > [ 158.373669][T15378] loop6: partition table partially beyond EOD, truncated [ 158.386441][T15378] loop6: p1 size 100663296 extends beyond EOD, truncated [ 158.394497][T15378] loop6: p2 start 591104 is beyond EOD, truncated [ 158.401011][T15378] loop6: p3 start 33572980 is beyond EOD, truncated [ 158.408334][T15378] loop6: p5 size 100663296 extends beyond EOD, truncated [ 158.484997][T15406] IPv6: NLM_F_CREATE should be specified when creating new route [ 159.183770][T15427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4633'. [ 159.194664][T15427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4633'. [ 159.233343][T15435] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 159.486860][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 159.486872][ T29] audit: type=1326 audit(167.464:8267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15478 comm="syz.6.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053a97f749 code=0x7ffc0000 [ 159.524730][ T29] audit: type=1326 audit(167.504:8268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15478 comm="syz.6.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f053a97f749 code=0x7ffc0000 [ 159.547654][ T29] audit: type=1326 audit(167.504:8269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15478 comm="syz.6.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053a97f749 code=0x7ffc0000 [ 159.570788][ T29] audit: type=1326 audit(167.504:8270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15478 comm="syz.6.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053a97f749 code=0x7ffc0000 [ 159.593732][ T29] audit: type=1326 audit(167.504:8271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15478 comm="syz.6.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f053a97f749 code=0x7ffc0000 [ 159.616952][ T29] audit: type=1326 audit(167.504:8272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15478 comm="syz.6.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053a97f749 code=0x7ffc0000 [ 159.640051][ T29] audit: type=1326 audit(167.504:8273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15478 comm="syz.6.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053a97f749 code=0x7ffc0000 [ 160.119339][T15499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4661'. [ 160.133052][T15499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4661'. [ 160.184006][T15506] loop3: detected capacity change from 0 to 8192 [ 160.228715][T15506] loop3: p1 p2 < > p3 p4 < p5 > [ 160.233684][T15506] loop3: partition table partially beyond EOD, truncated [ 160.240859][T15506] loop3: p1 size 100663296 extends beyond EOD, truncated [ 160.248231][T15506] loop3: p2 start 591104 is beyond EOD, truncated [ 160.254672][T15506] loop3: p3 start 33572980 is beyond EOD, truncated [ 160.261736][T15506] loop3: p5 size 100663296 extends beyond EOD, truncated [ 160.292383][T15521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4666'. [ 160.308591][T15521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4666'. [ 160.572597][T15561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4684'. [ 160.670583][ T29] audit: type=1326 audit(168.654:8274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15571 comm="syz.3.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb0fcf749 code=0x7ffc0000 [ 160.694793][ T29] audit: type=1326 audit(168.654:8275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15571 comm="syz.3.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb0fcf749 code=0x7ffc0000 [ 160.717813][ T29] audit: type=1326 audit(168.654:8276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15571 comm="syz.3.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fb0fcf749 code=0x7ffc0000 [ 160.987767][T15578] tipc: Started in network mode [ 160.992777][T15578] tipc: Node identity ac14140f, cluster identity 4711 [ 160.999864][T15578] tipc: New replicast peer: 255.255.255.255 [ 161.006033][T15578] tipc: Enabled bearer , priority 10 [ 161.013097][T15578] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4694'. [ 161.022155][T15578] tipc: Disabling bearer [ 161.354551][T15615] ref_ctr_offset mismatch. inode: 0x21 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 161.459319][T15632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4714'. [ 162.693811][T15705] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 162.979243][T15721] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 162.979243][T15721] program syz.2.4764 not setting count and/or reply_len properly [ 163.061643][T15724] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4760'. [ 163.088132][T15728] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 163.088132][T15728] program syz.3.4766 not setting count and/or reply_len properly [ 163.166024][T15744] loop3: detected capacity change from 0 to 512 [ 163.176233][T15744] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 163.185852][T15744] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #13: comm syz.3.4759: iget: bad i_size value: 12154757448730 [ 163.198829][T15744] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.4759: couldn't read orphan inode 13 (err -117) [ 163.212301][T15744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.237398][T13940] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.944485][T15755] Set syz1 is full, maxelem 65536 reached [ 164.260340][T15827] loop6: detected capacity change from 0 to 8192 [ 164.319362][T15836] __nla_validate_parse: 5 callbacks suppressed [ 164.319375][T15836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4802'. [ 164.348196][T15840] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4803'. [ 164.552862][T15869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.583437][T15869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.750359][T15886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4817'. [ 164.763513][T15888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4819'. [ 165.150775][T15921] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4832'. [ 165.230894][T15943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.239619][T15943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.370114][T15956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4850'. [ 165.470534][T15982] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 165.516939][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 165.516952][ T29] audit: type=1400 audit(181.491:8357): avc: denied { accept } for pid=15979 comm="syz.0.4863" lport=34624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.030766][T15992] loop6: detected capacity change from 0 to 2048 [ 166.041208][T15992] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.076896][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.174645][ T29] audit: type=1400 audit(182.151:8358): avc: denied { connect } for pid=16032 comm="syz.3.4881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 166.206250][ T29] audit: type=1400 audit(182.181:8359): avc: denied { block_suspend } for pid=16034 comm="syz.6.4882" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 166.264703][ T29] audit: type=1326 audit(182.241:8360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.2.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 166.293493][ T29] audit: type=1326 audit(182.271:8361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.2.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4a852bf749 code=0x7ffc0000 [ 166.316560][ T29] audit: type=1326 audit(182.271:8362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.2.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4a852bf783 code=0x7ffc0000 [ 166.339372][ T29] audit: type=1326 audit(182.271:8363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.2.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4a852be1ff code=0x7ffc0000 [ 166.362417][ T29] audit: type=1326 audit(182.271:8364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.2.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4a852bf7d7 code=0x7ffc0000 [ 166.385410][ T29] audit: type=1326 audit(182.271:8365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.2.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a852bdf90 code=0x7ffc0000 [ 166.408415][ T29] audit: type=1326 audit(182.271:8366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.2.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4a852be3aa code=0x7ffc0000 [ 166.482743][T16068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4895'. [ 166.515509][T16076] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4898'. [ 166.631143][T16106] netlink: 'syz.0.4911': attribute type 4 has an invalid length. [ 166.655016][T16108] random: crng reseeded on system resumption [ 166.752276][T16129] SELinux: ebitmap: truncated map [ 166.760809][T16129] SELinux: failed to load policy [ 166.800829][T16142] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 166.810415][T16142] block device autoloading is deprecated and will be removed. [ 166.978128][T16167] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4939'. [ 167.009333][T16169] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 167.187976][T16208] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4959'. [ 167.423610][T16270] random: crng reseeded on system resumption [ 167.465630][T16278] loop1: detected capacity change from 0 to 512 [ 167.483279][T16278] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.4988: ea_inode file size=0 entry size=6 [ 167.513247][T16278] EXT4-fs (loop1): 1 orphan inode deleted [ 167.519673][T16278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.545186][ T9265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.557631][T16293] random: crng reseeded on system resumption [ 167.724453][T16344] random: crng reseeded on system resumption [ 167.979959][T16396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.988362][T16396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.883737][T16453] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 168.891291][T16453] vhci_hcd: invalid port number 96 [ 168.896391][T16453] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 169.396002][T16515] __nla_validate_parse: 9 callbacks suppressed [ 169.396016][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5077'. [ 169.420449][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5077'. [ 169.567054][T16531] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 169.574521][T16531] vhci_hcd: invalid port number 96 [ 169.579644][T16531] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 169.694378][T16547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5091'. [ 169.756571][T16547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5091'. [ 170.436310][T16619] sd 0:0:1:0: device reset [ 170.562101][T16630] loop3: detected capacity change from 0 to 512 [ 170.577315][T16630] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 170.609969][T16630] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 170.619033][T16630] System zones: 1-12 [ 170.623892][T16630] EXT4-fs (loop3): 1 truncate cleaned up [ 170.638749][T16630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.665332][T16630] EXT4-fs warning (device loop3): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 170.676914][T16630] EXT4-fs warning (device loop3): ext4_group_extend:1891: can't read last block, resize aborted [ 170.678739][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 170.678752][ T29] audit: type=1400 audit(186.641:8436): avc: denied { ioctl } for pid=16628 comm="syz.3.5130" path="/131/file2/bus" dev="loop3" ino=18 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 170.749525][T13940] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.840795][ T29] audit: type=1326 audit(186.821:8437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="syz.3.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb0fcf749 code=0x7ffc0000 [ 170.863771][ T29] audit: type=1326 audit(186.821:8438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="syz.3.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb0fcf749 code=0x7ffc0000 [ 170.886848][ T29] audit: type=1326 audit(186.821:8439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="syz.3.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7f2fb0fcf749 code=0x7ffc0000 [ 170.909952][ T29] audit: type=1326 audit(186.821:8440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="syz.3.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb0fcf749 code=0x7ffc0000 [ 170.911215][T16678] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 170.932836][ T29] audit: type=1326 audit(186.821:8441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="syz.3.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb0fcf749 code=0x7ffc0000 [ 171.002590][T16685] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5152'. [ 171.012225][T16686] sd 0:0:1:0: device reset [ 171.022389][T16688] loop3: detected capacity change from 0 to 512 [ 171.048128][T16688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.061002][T16688] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.5154: corrupted xattr block 6: invalid header [ 171.061197][T16688] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 171.084061][T16688] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.5154: corrupted xattr block 6: invalid header [ 171.084191][T16688] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 171.106652][T16688] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.5154: corrupted xattr block 6: invalid header [ 171.106795][T16688] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 171.128800][T16688] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.5154: corrupted xattr block 6: invalid header [ 171.129025][T16688] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 171.150947][T16688] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.5154: corrupted xattr block 6: invalid header [ 171.151002][ T29] audit: type=1400 audit(187.141:8442): avc: denied { add_name } for pid=16687 comm="syz.3.5154" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.164298][T16688] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 171.207657][ T29] audit: type=1400 audit(187.181:8443): avc: denied { create } for pid=16687 comm="syz.3.5154" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 171.218908][T16688] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.5154: corrupted xattr block 6: invalid header [ 171.260721][T13940] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.390992][T16710] netlink: 'syz.3.5161': attribute type 3 has an invalid length. [ 171.518444][ T29] audit: type=1400 audit(187.461:8444): avc: denied { write } for pid=16724 comm="syz.3.5167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 171.537671][ T29] audit: type=1400 audit(187.461:8445): avc: denied { read } for pid=16724 comm="syz.3.5167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 171.656717][T16739] netlink: 'syz.0.5175': attribute type 3 has an invalid length. [ 171.853205][T16775] netlink: 'syz.6.5189': attribute type 3 has an invalid length. [ 172.048645][T16812] netlink: 'syz.1.5201': attribute type 3 has an invalid length. [ 173.344125][T16931] bond0: option packets_per_slave: invalid value (18446744072268814746) [ 173.352671][T16931] bond0: option packets_per_slave: allowed values 0 - 65535 [ 173.836467][T16994] bond0: option packets_per_slave: invalid value (18446744072268814746) [ 173.844996][T16994] bond0: option packets_per_slave: allowed values 0 - 65535 [ 173.870784][T16999] ip6gre1: entered allmulticast mode [ 174.084532][T17010] SELinux: policydb version 0 does not match my version range 15-35 [ 174.092811][T17010] SELinux: failed to load policy [ 174.111438][T17019] loop1: detected capacity change from 0 to 512 [ 174.119067][T17019] EXT4-fs (loop1): 1 truncate cleaned up [ 174.124957][T17019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.137633][T17019] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.543720][T17042] atomic_op ffff8881a81ecd28 conn xmit_atomic 0000000000000000 [ 174.548542][T17043] ip6gre1: entered allmulticast mode [ 174.558782][T17045] bond0: option packets_per_slave: invalid value (18446744072268814746) [ 174.567320][T17045] bond0: option packets_per_slave: allowed values 0 - 65535 [ 175.160009][T17076] program syz.2.5306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.174147][T17077] atomic_op ffff8881036fdd28 conn xmit_atomic 0000000000000000 [ 175.214624][T17085] ip6gre1: entered allmulticast mode [ 175.215465][T17081] loop6: detected capacity change from 0 to 1024 [ 175.246119][T17081] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 175.290640][T17081] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.5309: lblock 0 mapped to illegal pblock 0 (length 1) [ 175.311568][T17081] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 175.323935][T17081] EXT4-fs (loop6): This should not happen!! Data will be lost [ 175.323935][T17081] [ 175.376427][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 175.547180][T17130] atomic_op ffff8881036fcd28 conn xmit_atomic 0000000000000000 [ 175.620572][T17140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5329'. [ 175.716907][T17158] atomic_op ffff8881a81ef128 conn xmit_atomic 0000000000000000 [ 175.731680][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5342'. [ 175.766119][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 175.766132][ T29] audit: type=1400 audit(191.741:8586): avc: denied { mount } for pid=17174 comm="syz.0.5345" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 175.819373][ T29] audit: type=1400 audit(191.751:8587): avc: denied { bind } for pid=17172 comm="syz.3.5344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.838206][ T29] audit: type=1400 audit(191.751:8588): avc: denied { name_bind } for pid=17172 comm="syz.3.5344" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 175.858642][ T29] audit: type=1400 audit(191.751:8589): avc: denied { node_bind } for pid=17172 comm="syz.3.5344" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 175.880869][ T29] audit: type=1400 audit(191.791:8590): avc: denied { read } for pid=17177 comm="syz.2.5348" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 175.904352][ T29] audit: type=1400 audit(191.791:8591): avc: denied { open } for pid=17177 comm="syz.2.5348" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 175.933401][ T29] audit: type=1400 audit(191.911:8592): avc: denied { connect } for pid=17181 comm="syz.2.5349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.952549][ T29] audit: type=1400 audit(191.911:8593): avc: denied { read } for pid=17181 comm="syz.2.5349" path="socket:[49483]" dev="sockfs" ino=49483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.978140][ T29] audit: type=1326 audit(191.961:8594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17185 comm="syz.0.5350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982687f749 code=0x7ffc0000 [ 176.014799][ T29] audit: type=1326 audit(191.991:8595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17185 comm="syz.0.5350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f982687f749 code=0x7ffc0000 [ 176.055480][T17190] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5352'. [ 176.184832][T17205] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5359'. [ 176.193890][T17205] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5359'. [ 176.210868][T17205] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5359'. [ 176.219971][T17205] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5359'. [ 176.269839][T17205] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5359'. [ 176.279030][T17205] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5359'. [ 176.476839][T17251] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5374'. [ 176.583752][T17265] SELinux: security policydb version 16 (MLS) not backwards compatible [ 176.602740][T17265] SELinux: failed to load policy [ 176.737831][T17290] loop6: detected capacity change from 0 to 512 [ 176.751372][T17290] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.860786][T17298] ip6gre2: entered promiscuous mode [ 176.866095][T17298] ip6gre2: entered allmulticast mode [ 176.874672][ T4516] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 176.882322][ T4516] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 176.890499][T17298] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 176.908152][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 176.932510][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.982041][T17307] loop6: detected capacity change from 0 to 1024 [ 177.008110][T17307] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.5395: bad orphan inode 134217728 [ 177.047276][T17307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.208631][ T3407] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 177.288059][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.298482][ T3407] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 177.420664][T17362] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 177.472838][T17371] loop6: detected capacity change from 0 to 2048 [ 177.509691][T17371] Alternate GPT is invalid, using primary GPT. [ 177.515981][T17371] loop6: p1 p2 p3 [ 177.519792][T17371] loop6: partition table partially beyond EOD, truncated [ 177.591153][T17404] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 177.607712][T17409] netlink: 'syz.0.5432': attribute type 22 has an invalid length. [ 177.642696][T17409] netlink: 'syz.0.5432': attribute type 22 has an invalid length. [ 177.650619][ T4516] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.650657][ T4516] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.650685][ T4516] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.681660][ T4516] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.063668][T17494] netlink: 'syz.1.5459': attribute type 2 has an invalid length. [ 178.189041][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 178.339302][T17528] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 178.749709][T17565] SELinux: failed to load policy [ 178.824718][T17601] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 178.898763][T17609] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 178.906459][T17609] SELinux: failed to load policy [ 178.952543][T17625] loop6: detected capacity change from 0 to 512 [ 179.004755][T17625] EXT4-fs (loop6): too many log groups per flexible block group [ 179.026636][T17625] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 179.042893][T17625] EXT4-fs (loop6): mount failed [ 179.166912][T17673] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 179.796171][T17733] IPVS: stopping master sync thread 17734 ... [ 179.808504][T17734] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 179.903736][T17743] macvtap1: entered promiscuous mode [ 179.909322][T17743] macvtap1: entered allmulticast mode [ 179.947601][T17743] dummy0: entered promiscuous mode [ 180.012833][T17743] dummy0: entered allmulticast mode [ 180.026026][T17743] team0: Device macvtap1 failed to register rx_handler [ 180.053409][T17743] dummy0: left allmulticast mode [ 180.059126][T17743] dummy0: left promiscuous mode [ 180.092724][T17756] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 180.235757][T17791] SELinux: policydb version -295468586 does not match my version range 15-35 [ 180.245162][T17791] SELinux: failed to load policy [ 180.251365][T17789] loop3: detected capacity change from 0 to 512 [ 180.289779][T17789] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.5574: error while reading EA inode 32 err=-116 [ 180.325711][T17789] EXT4-fs (loop3): Remounting filesystem read-only [ 180.345775][T17789] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 180.369498][T17789] EXT4-fs (loop3): 1 orphan inode deleted [ 180.375787][T17789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.388459][T17789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.429695][T17821] wireguard0: entered promiscuous mode [ 180.435241][T17821] wireguard0: entered allmulticast mode [ 180.697465][T17890] __nla_validate_parse: 8 callbacks suppressed [ 180.697479][T17890] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5603'. [ 180.751855][T17899] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 180.779376][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 180.779390][ T29] audit: type=1400 audit(196.761:8812): avc: denied { create } for pid=17904 comm="syz.3.5609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 180.804601][ T29] audit: type=1326 audit(196.771:8813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.1.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 180.827554][ T29] audit: type=1326 audit(196.771:8814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.1.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 180.850439][ T29] audit: type=1326 audit(196.771:8815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.1.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 180.873324][ T29] audit: type=1326 audit(196.771:8816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.1.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 180.896206][ T29] audit: type=1326 audit(196.771:8817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.1.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 180.919109][ T29] audit: type=1326 audit(196.771:8818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.1.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 180.941980][ T29] audit: type=1326 audit(196.771:8819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.1.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 180.964815][ T29] audit: type=1326 audit(196.771:8820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.1.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 180.987704][ T29] audit: type=1326 audit(196.771:8821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.1.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faad04cf749 code=0x7ffc0000 [ 181.228445][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 181.398501][T17993] loop6: detected capacity change from 0 to 128 [ 181.411392][T17993] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff0000) [ 181.419264][T17993] FAT-fs (loop6): Filesystem has been set read-only [ 181.528327][T18015] loop6: detected capacity change from 0 to 512 [ 181.544726][T18015] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.5653: error while reading EA inode 32 err=-116 [ 181.558533][T18015] EXT4-fs (loop6): Remounting filesystem read-only [ 181.565076][T18015] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 181.576280][T18015] EXT4-fs (loop6): 1 orphan inode deleted [ 181.582470][T18015] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.595227][T18015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.629009][T18029] atomic_op ffff888119685128 conn xmit_atomic 0000000000000000 [ 181.652124][T18032] loop6: detected capacity change from 0 to 2048 [ 181.672707][T18032] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.715826][T18043] loop3: detected capacity change from 0 to 512 [ 181.724588][T18043] EXT4-fs: Ignoring removed oldalloc option [ 181.739095][T18043] EXT4-fs (loop3): 1 truncate cleaned up [ 181.745385][T18043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.786026][T13940] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.808313][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.851973][T18059] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5667'. [ 182.137457][T18083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5676'. [ 182.346391][T18117] SELinux: failed to load policy [ 182.451774][T18154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5696'. [ 182.469136][T18154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5696'. [ 182.489087][T18154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5696'. [ 182.498793][T18154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5696'. [ 182.542871][T18162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5699'. [ 182.580849][T18166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5700'. [ 182.667862][T18175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5705'. [ 182.729218][T18155] ================================================================== [ 182.737320][T18155] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 182.745907][T18155] [ 182.748219][T18155] write to 0xffff888115701168 of 8 bytes by task 18138 on cpu 0: [ 182.755920][T18155] shmem_file_splice_read+0x470/0x600 [ 182.761282][T18155] splice_direct_to_actor+0x26f/0x680 [ 182.766655][T18155] do_splice_direct+0xda/0x150 [ 182.771407][T18155] do_sendfile+0x380/0x650 [ 182.775830][T18155] __x64_sys_sendfile64+0x105/0x150 [ 182.781023][T18155] x64_sys_call+0x2bb4/0x3000 [ 182.785698][T18155] do_syscall_64+0xd2/0x200 [ 182.790190][T18155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.796075][T18155] [ 182.798389][T18155] write to 0xffff888115701168 of 8 bytes by task 18155 on cpu 1: [ 182.806095][T18155] shmem_file_splice_read+0x470/0x600 [ 182.811462][T18155] splice_direct_to_actor+0x26f/0x680 [ 182.816823][T18155] do_splice_direct+0xda/0x150 [ 182.821584][T18155] do_sendfile+0x380/0x650 [ 182.826002][T18155] __x64_sys_sendfile64+0x105/0x150 [ 182.831202][T18155] x64_sys_call+0x2bb4/0x3000 [ 182.835877][T18155] do_syscall_64+0xd2/0x200 [ 182.840374][T18155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.846264][T18155] [ 182.848573][T18155] value changed: 0x000000000002ce62 -> 0x000000000002ce86 [ 182.855657][T18155] [ 182.857963][T18155] Reported by Kernel Concurrency Sanitizer on: [ 182.864104][T18155] CPU: 1 UID: 0 PID: 18155 Comm: syz.1.5695 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 182.875451][T18155] Tainted: [W]=WARN [ 182.879235][T18155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 182.889268][T18155] ================================================================== [ 190.348481][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!