last executing test programs: 26.100729122s ago: executing program 2 (id=2874): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r0, &(0x7f0000000340), 0x0}, 0x20) 26.037350853s ago: executing program 2 (id=2875): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={0x0, r2}, 0x18) 26.036834933s ago: executing program 2 (id=2877): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 25.968537104s ago: executing program 2 (id=2879): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 25.938552854s ago: executing program 2 (id=2881): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) 25.857198346s ago: executing program 2 (id=2884): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x6}}) 25.818736946s ago: executing program 32 (id=2884): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x6}}) 11.986489411s ago: executing program 5 (id=3265): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.916895622s ago: executing program 5 (id=3268): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d00), 0x240, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='rxrpc_rx_rwind_change\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x4081) unshare(0x2040600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x54) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f00000002c0)=""/176, &(0x7f0000001cc0)=0xffffffffffffff17) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r11 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r11, 0x65, 0x1, 0xfffffffffffffffe, &(0x7f0000001280)=0x5a) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r12, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240080e4) 11.828785133s ago: executing program 5 (id=3273): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r0}) 11.824938353s ago: executing program 5 (id=3274): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80100) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) 11.745102265s ago: executing program 5 (id=3276): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3c, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x3, 0x1}, 0x18002, 0x8002, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="0104aa00dc00000000"], 0x0) r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x1000, 0xffffffff, 0x89}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x41, 0x0, @fd_index=0x5, 0x2, 0x0, 0x8e, 0x6, 0x1}) io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) setsockopt$sock_attach_bpf(r1, 0x1, 0x50, &(0x7f0000000100), 0x48) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000080)=0xc, 0x4) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x7, 0x2, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000740)='kfree\x00', r9}, 0x18) syz_open_dev$usbfs(&(0x7f0000000240), 0xc, 0x101301) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000380)={0x0, 0x9, 0x7ff, 0x10000}) r10 = syz_open_dev$usbfs(&(0x7f0000000340), 0x3, 0x200900) ioctl$USBDEVFS_IOCTL(r10, 0xc0105500, &(0x7f0000000040)=@usbdevfs_connect={0x8000}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000005c0)=""/15, 0xf) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r11}, 0x18) r12 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004ff6943b80000000800000028f20000000086070000", 0x4000, r12) request_key(&(0x7f0000000480)='.dead\x00', &(0x7f00000007c0)={'syz', 0x2}, &(0x7f0000000600)='\x00', r12) write$cgroup_int(r5, &(0x7f0000000000)=0xfe8e, 0x12) 11.545293788s ago: executing program 5 (id=3284): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d00), 0x240, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='rxrpc_rx_rwind_change\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x4081) unshare(0x2040600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x54) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f00000002c0)=""/176, &(0x7f0000001cc0)=0xffffffffffffff17) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r11 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r11, 0x65, 0x1, 0xfffffffffffffffe, &(0x7f0000001280)=0x5a) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r12, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240080e4) 11.541732227s ago: executing program 33 (id=3284): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d00), 0x240, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='rxrpc_rx_rwind_change\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x4081) unshare(0x2040600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x54) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f00000002c0)=""/176, &(0x7f0000001cc0)=0xffffffffffffff17) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r11 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r11, 0x65, 0x1, 0xfffffffffffffffe, &(0x7f0000001280)=0x5a) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r12, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240080e4) 1.848413994s ago: executing program 1 (id=3533): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.779634155s ago: executing program 1 (id=3537): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000060023"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1.624461607s ago: executing program 1 (id=3539): unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r3}, 0xc) 1.623952207s ago: executing program 1 (id=3540): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x380cc52, &(0x7f0000000140)={[{@unhide}, {@session={'session', 0x3d, 0x13}}, {@nocompress}, {@mode={'mode', 0x3d, 0x4}}, {@check_relaxed}, {@check_relaxed}, {@cruft}, {@mode={'mode', 0x3d, 0x6}}, {@gid}, {@sbsector={'sbsector', 0x3d, 0x1}}, {@map_off}, {@map_normal}, {@map_acorn}, {@session={'session', 0x3d, 0x5}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@seclabel}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@measure}, {@fsmagic={'fsmagic', 0x3d, 0xc754ea6}}], 0x2c}, 0x3, 0x9d1, &(0x7f0000000280)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x4000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 1.593858178s ago: executing program 1 (id=3543): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) io_setup(0x6, &(0x7f0000000300)=0x0) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) 1.149017013s ago: executing program 0 (id=3557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) 1.148457144s ago: executing program 0 (id=3558): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r1) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$packet(0x11, 0x3, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket(0x1e, 0x2, 0x0) sendmsg$tipc(r9, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x8}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040014}, 0x4000000) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000880)={0x4, &(0x7f0000000840)=[{0x2, 0xf4, 0x9, 0x5}, {0xfff9, 0xb2, 0x4, 0xf613}, {0x4, 0x6, 0xf3, 0x8}, {0x4, 0xde, 0xe, 0x8}]}) splice(r4, 0x0, r6, 0x0, 0x7, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1c8, 0xc8, 0x8, 0x0, 0x5803, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xff000000, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x0, 0x7, 0x7, 0x1d}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c1234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@hl={{0x28}, {0x3, 0x11}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x4, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x16, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3fc) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x3, 0x6, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, 0x80, 0x80, 0x2}}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r12}, 0x10) write$P9_RWRITE(r6, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) read(r5, &(0x7f0000032440)=""/102364, 0x18fdc) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0xffffffff, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c091}, 0x9004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3704000880fc0b0b000300", 0x33fe0}], 0x1}, 0x0) 1.016786406s ago: executing program 3 (id=3564): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c000000100039042cbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="83000400100000002c00128008000100736974002000028014000b00fe8000040000000000000000000000aa08000300e0"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 1.002317186s ago: executing program 3 (id=3566): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 961.803106ms ago: executing program 4 (id=3567): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) 934.800737ms ago: executing program 3 (id=3568): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000100)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@usrjquota}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 921.407207ms ago: executing program 4 (id=3569): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000100)) 873.340018ms ago: executing program 4 (id=3570): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0xef, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004) 872.415668ms ago: executing program 3 (id=3571): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x7, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e788d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea004337"], 0x34}, {&(0x7f0000000780)={0xf0, 0x1b, 0x8, 0x70bd26, 0x25dfdbfb, "", [@nested={0xe0, 0x50, 0x0, 0x1, [@nested={0x4, 0xff}, @nested={0xd5, 0x117, 0x0, 0x1, [@generic="c021c281b32bb8060c215e4453cb7f9693560a8ffef38201ebc8fda1ec148028b64ff3d39cfa53c3b17235fe7e00c7c49d85410c6624b86e53e7d56251f800bceb5c0aa8485c552832710a2b51e909e8e8356f04cbedb5b195da15ebc98ac8c55322f84f98c576fc0bea2886de6a4a79a8e6615533a1c06f315780171433827d78fcd5c71c2aa2cbd0fe9c0add69cc577531c73766", @typed={0x39, 0xcd, 0x0, 0x0, @binary="36edc9d5dbc7f3d47be32a87d2e221035eea9bf2814edae01da16c89f3e2215eb5502e41d18c9ee42a51caf07339c45363866b5dd2"}]}]}]}, 0xf0}], 0x2, 0x0, 0x0, 0x20000080}, 0x4000) 819.483539ms ago: executing program 3 (id=3573): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x28c82) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x9, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000301000/0x4000)=nil, 0x4000, 0x0, 0x13012, r0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) 782.894209ms ago: executing program 4 (id=3575): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c598700", @ANYRES16=0x0, @ANYBLOB="01000000000000000000120000000800080000000000180001801400020076657468305f6d6163767461700000000800070001"], 0x3c}}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2006c00010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c) 769.009979ms ago: executing program 6 (id=3576): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3c, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x3, 0x1}, 0x18002, 0x8002, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="0104aa00dc00000000"], 0x0) r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x1000, 0xffffffff, 0x89}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x41, 0x0, @fd_index=0x5, 0x2, 0x0, 0x8e, 0x6, 0x1}) io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) setsockopt$sock_attach_bpf(r1, 0x1, 0x50, &(0x7f0000000100), 0x48) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000080)=0xc, 0x4) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x7, 0x2, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={0x0, r9}, 0x18) syz_open_dev$usbfs(&(0x7f0000000240), 0xc, 0x101301) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000380)={0x0, 0x9, 0x7ff, 0x10000}) r10 = syz_open_dev$usbfs(&(0x7f0000000340), 0x3, 0x200900) ioctl$USBDEVFS_IOCTL(r10, 0xc0105500, &(0x7f0000000040)=@usbdevfs_connect={0x8000}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000005c0)=""/15, 0xf) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r11}, 0x18) r12 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004ff6943b80000000800000028f20000000086070000", 0x4000, r12) request_key(&(0x7f0000000480)='.dead\x00', &(0x7f00000007c0)={'syz', 0x2}, &(0x7f0000000600)='\x00', r12) write$cgroup_int(r5, &(0x7f0000000000)=0xfe8e, 0x12) 735.91692ms ago: executing program 4 (id=3577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 735.3165ms ago: executing program 3 (id=3578): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r1) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$packet(0x11, 0x3, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket(0x1e, 0x2, 0x0) sendmsg$tipc(r9, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x8}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040014}, 0x4000000) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000880)={0x4, &(0x7f0000000840)=[{0x2, 0xf4, 0x9, 0x5}, {0xfff9, 0xb2, 0x4, 0xf613}, {0x4, 0x6, 0xf3, 0x8}, {0x4, 0xde, 0xe, 0x8}]}) splice(r4, 0x0, r6, 0x0, 0x7, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1c8, 0xc8, 0x8, 0x0, 0x5803, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xff000000, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x0, 0x7, 0x7, 0x1d}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c1234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@hl={{0x28}, {0x3, 0x11}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x4, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x16, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3fc) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x3, 0x6, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, 0x80, 0x80, 0x2}}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r12}, 0x10) write$P9_RWRITE(r6, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) read(r5, &(0x7f0000032440)=""/102364, 0x18fdc) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0xffffffff, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c091}, 0x9004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3704000880fc0b0b000300", 0x33fe0}], 0x1}, 0x0) 734.88851ms ago: executing program 4 (id=3579): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 642.528811ms ago: executing program 1 (id=3580): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r1) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$packet(0x11, 0x3, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket(0x1e, 0x2, 0x0) sendmsg$tipc(r9, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x8}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040014}, 0x4000000) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000880)={0x4, &(0x7f0000000840)=[{0x2, 0xf4, 0x9, 0x5}, {0xfff9, 0xb2, 0x4, 0xf613}, {0x4, 0x6, 0xf3, 0x8}, {0x4, 0xde, 0xe, 0x8}]}) splice(r4, 0x0, r6, 0x0, 0x7, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1c8, 0xc8, 0x8, 0x0, 0x5803, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xff000000, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x0, 0x7, 0x7, 0x1d}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c1234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@hl={{0x28}, {0x3, 0x11}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x4, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x16, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3fc) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x3, 0x6, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, 0x80, 0x80, 0x2}}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r12}, 0x10) write$P9_RWRITE(r6, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) read(r5, &(0x7f0000032440)=""/102364, 0x18fdc) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0xffffffff, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c091}, 0x9004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3704000880fc0b0b000300", 0x33fe0}], 0x1}, 0x0) 554.540982ms ago: executing program 6 (id=3581): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 499.861873ms ago: executing program 6 (id=3582): r0 = syz_io_uring_setup(0x103b, &(0x7f0000000600)={0x0, 0x1078, 0x1100, 0x2, 0xffffffff}, &(0x7f00000004c0)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x100, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x3516, 0x483, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x45) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100003e4e00000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200"/521], 0x290) close_range(r6, 0xffffffffffffffff, 0x0) r8 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r8) open(0x0, 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x603f) futex(0x0, 0x5, 0x4, 0x0, 0x0, 0x1ffffff) syz_read_part_table(0x1059, &(0x7f0000001700)="$eJzsz7FNA0EQBdC/B3d7ZJRAREekCIlCOJGQ0AgU5HI81p1syW7AdvBesqs/mhlNuLHnno/0tHz+tIxr0pbhVBxSVbWv6sdgzvp7Ssb6fn/NlKSfDas2be9D8lWPl4uqtv6/+aVakiW/u7f/a1wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPfuEAAA//9nABRm") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r4}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f00000002c0)={0x1800, 0x1, "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"}) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c000440000000000000000214"], 0xe4}}, 0x200000d4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x25, &(0x7f0000000500)=0x104, 0x4) sendmsg$inet(r12, &(0x7f00000023c0)={&(0x7f0000002300)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002380)=[@ip_retopts={{0x10}}], 0x10}, 0x20048000) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000018110004", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10) 329.409275ms ago: executing program 6 (id=3583): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 261.319686ms ago: executing program 6 (id=3584): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000004000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 260.646136ms ago: executing program 0 (id=3585): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = epoll_create(0x3ff) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000280)={0x2000000}) 185.310417ms ago: executing program 0 (id=3586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x74, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x9, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0) 180.981848ms ago: executing program 0 (id=3587): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private2}, 0x1c) 146.621958ms ago: executing program 0 (id=3588): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)=0x0) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000340)={[0x41b]}, 0x8) 0s ago: executing program 6 (id=3589): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x10) r1 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x2004000, 0x0) kernel console output (not intermixed with test programs): [3657]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 99.457066][ T7830] EXT4-fs: Ignoring removed orlov option [ 99.468665][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 99.483421][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 99.503991][ T7832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.522921][ T7832] ext4 filesystem being mounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.537192][ T7830] EXT4-fs (loop2): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 99.551215][ T7830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.567197][ T7832] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1648: bg 0: block 217: padding at end of block bitmap is not set [ 99.573001][ T7846] loop3: detected capacity change from 0 to 512 [ 99.637707][ T7846] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.646129][ T7846] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.659956][ T7846] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 99.671554][ T7846] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002] [ 99.684482][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.696833][ T7846] System zones: 1-12 [ 99.708761][ T7846] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.1650: corrupted in-inode xattr: e_value size too large [ 99.736917][ T7846] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1650: couldn't read orphan inode 15 (err -117) [ 99.773944][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.787855][ T7846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.850997][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.881515][ T7870] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.1657'. [ 100.015214][ T7883] loop2: detected capacity change from 0 to 1024 [ 100.029433][ T7883] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.050396][ T7883] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.081273][ T7883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.138163][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.216883][ T3502] printk: udevd: 22 output lines suppressed due to ratelimiting [ 100.293464][ T7893] loop2: detected capacity change from 0 to 8192 [ 100.433537][ T7904] random: crng reseeded on system resumption [ 100.540327][ T7915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1676'. [ 100.617534][ T7925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1680'. [ 100.626863][ T7925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1680'. [ 101.194364][ T7939] netlink: 'syz.0.1686': attribute type 6 has an invalid length. [ 101.399877][ T7945] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1690'. [ 101.423759][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1689'. [ 101.508451][ T7956] loop4: detected capacity change from 0 to 512 [ 101.612440][ T7958] loop2: detected capacity change from 0 to 4096 [ 101.644821][ T7958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.669527][ T7952] bridge0: entered promiscuous mode [ 101.674887][ T7952] macsec1: entered allmulticast mode [ 101.680356][ T7952] bridge0: entered allmulticast mode [ 101.687758][ T7952] bridge0: port 3(macsec1) entered blocking state [ 101.694272][ T7952] bridge0: port 3(macsec1) entered disabled state [ 101.702486][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.720343][ T7952] bridge0: left allmulticast mode [ 101.725423][ T7952] bridge0: left promiscuous mode [ 101.734959][ T7973] binfmt_misc: register: failed to install interpreter file ./file0 [ 101.844496][ T7987] loop2: detected capacity change from 0 to 512 [ 101.853909][ T7987] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.873758][ T7987] EXT4-fs (loop2): 1 truncate cleaned up [ 101.884019][ T7987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.905219][ T7996] loop3: detected capacity change from 0 to 1024 [ 101.913977][ T7997] netlink: 'syz.1.1710': attribute type 1 has an invalid length. [ 101.933357][ T7996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.959376][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.975415][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.065014][ T8017] vhci_hcd: default hub control req: 4001 v0008 i0003 l0 [ 102.100776][ T8021] ipvlan2: entered promiscuous mode [ 102.123289][ T8023] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 102.137845][ T8025] geneve0: entered allmulticast mode [ 102.156617][ T8028] loop4: detected capacity change from 0 to 256 [ 102.489675][ T8067] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 102.506118][ T8047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.506356][ T8047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.785026][ T8083] bridge0: entered promiscuous mode [ 102.785064][ T8083] macsec1: entered allmulticast mode [ 102.785079][ T8083] bridge0: entered allmulticast mode [ 102.785790][ T8083] bridge0: port 1(macsec1) entered blocking state [ 102.785831][ T8083] bridge0: port 1(macsec1) entered disabled state [ 102.817398][ T8083] bridge0: left allmulticast mode [ 102.817425][ T8083] bridge0: left promiscuous mode [ 103.029944][ T8118] loop2: detected capacity change from 0 to 1024 [ 103.030421][ T8118] EXT4-fs: Ignoring removed bh option [ 103.056836][ T8118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.081317][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.119674][ T8114] loop4: detected capacity change from 0 to 8192 [ 103.122348][ T8123] __nla_validate_parse: 3 callbacks suppressed [ 103.122365][ T8123] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1766'. [ 103.154365][ T8114] loop4: p2 p3 p4 [ 103.154412][ T8114] loop4: p2 size 327551 extends beyond EOD, truncated [ 103.158645][ T8114] loop4: p3 size 16776960 extends beyond EOD, truncated [ 103.168824][ T8114] loop4: p4 size 3599499392 extends beyond EOD, truncated [ 103.246867][ T8135] loop4: detected capacity change from 0 to 512 [ 103.255516][ T29] kauditd_printk_skb: 965 callbacks suppressed [ 103.255533][ T29] audit: type=1400 audit(1749362210.207:12638): avc: denied { validate_trans } for pid=8130 comm="syz.0.1771" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 103.261374][ T8135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.261470][ T8135] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.266982][ T29] audit: type=1326 audit(1749362210.217:12639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8138 comm="syz.3.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcde93e929 code=0x7ffc0000 [ 103.335914][ T29] audit: type=1326 audit(1749362210.227:12640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8138 comm="syz.3.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcde93e929 code=0x7ffc0000 [ 103.336025][ T29] audit: type=1326 audit(1749362210.227:12641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8138 comm="syz.3.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcde93e929 code=0x7ffc0000 [ 103.336134][ T29] audit: type=1400 audit(1749362210.237:12642): avc: denied { setattr } for pid=8134 comm="syz.4.1769" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.336161][ T29] audit: type=1400 audit(1749362210.247:12643): avc: denied { write } for pid=8131 comm="syz.2.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.337253][ T29] audit: type=1326 audit(1749362210.287:12644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8138 comm="syz.3.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcde93e929 code=0x7ffc0000 [ 103.337283][ T29] audit: type=1326 audit(1749362210.287:12645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8138 comm="syz.3.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcde93e929 code=0x7ffc0000 [ 103.358202][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.525568][ T29] audit: type=1326 audit(1749362210.457:12646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000 [ 103.549292][ T29] audit: type=1326 audit(1749362210.457:12647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000 [ 103.628295][ T8164] loop2: detected capacity change from 0 to 736 [ 103.679216][ T8164] rock: directory entry would overflow storage [ 103.685438][ T8164] rock: sig=0x5850, size=36, remaining=14 [ 103.706077][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1788'. [ 103.810209][ T8175] loop3: detected capacity change from 0 to 8192 [ 103.850624][ T8175] loop3: p2 p3 p4 [ 103.860856][ T8175] loop3: p2 size 327551 extends beyond EOD, truncated [ 103.890061][ T8175] loop3: p3 size 16776960 extends beyond EOD, truncated [ 103.906206][ T8175] loop3: p4 size 3599499392 extends beyond EOD, truncated [ 103.984203][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1790'. [ 104.094519][ T8178] bridge0: entered promiscuous mode [ 104.099947][ T8178] macsec1: entered allmulticast mode [ 104.105271][ T8178] bridge0: entered allmulticast mode [ 104.119687][ T8178] bridge0: port 1(macsec1) entered blocking state [ 104.126190][ T8178] bridge0: port 1(macsec1) entered disabled state [ 104.136813][ T8178] bridge0: left allmulticast mode [ 104.141979][ T8178] bridge0: left promiscuous mode [ 104.412276][ T8248] ipvlan0: entered promiscuous mode [ 104.426883][ T8248] ipvlan0: left promiscuous mode [ 104.523971][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1818'. [ 104.608584][ T8241] bridge0: entered promiscuous mode [ 104.615602][ T8241] macsec1: entered allmulticast mode [ 104.621075][ T8241] bridge0: entered allmulticast mode [ 104.629446][ T8241] bridge0: port 1(macsec1) entered blocking state [ 104.635939][ T8241] bridge0: port 1(macsec1) entered disabled state [ 104.649988][ T8241] bridge0: left allmulticast mode [ 104.655072][ T8241] bridge0: left promiscuous mode [ 104.730505][ T8286] set match dimension is over the limit! [ 104.758764][ T8290] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1839'. [ 104.811288][ T8298] netlink: 'syz.2.1843': attribute type 7 has an invalid length. [ 105.140485][ T8314] bridge: RTM_NEWNEIGH with invalid ether address [ 105.144817][ T8314] bridge0: entered promiscuous mode [ 105.144854][ T8314] macsec1: entered allmulticast mode [ 105.144870][ T8314] bridge0: entered allmulticast mode [ 105.145505][ T8314] bridge0: port 1(macsec1) entered blocking state [ 105.145615][ T8314] bridge0: port 1(macsec1) entered disabled state [ 105.160544][ T8314] bridge0: left allmulticast mode [ 105.160568][ T8314] bridge0: left promiscuous mode [ 105.307751][ T8338] loop4: detected capacity change from 0 to 2048 [ 105.332630][ T8338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.339552][ T8338] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 105.339701][ T8338] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 105.339730][ T8338] EXT4-fs (loop4): This should not happen!! Data will be lost [ 105.339730][ T8338] [ 105.339745][ T8338] EXT4-fs (loop4): Total free blocks count 0 [ 105.339757][ T8338] EXT4-fs (loop4): Free/Dirty block details [ 105.339767][ T8338] EXT4-fs (loop4): free_blocks=2415919504 [ 105.339792][ T8338] EXT4-fs (loop4): dirty_blocks=16 [ 105.339807][ T8338] EXT4-fs (loop4): Block reservation details [ 105.339820][ T8338] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 105.373138][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.418111][ T8348] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 105.418111][ T8348] program syz.2.1865 not setting count and/or reply_len properly [ 105.519798][ T8350] loop3: detected capacity change from 0 to 8192 [ 105.521259][ T8350] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.712293][ T8377] SELinux: policydb version 0 does not match my version range 15-34 [ 105.712426][ T8377] SELinux: failed to load policy [ 105.759025][ T8380] loop3: detected capacity change from 0 to 1024 [ 105.778137][ T8380] EXT4-fs: Ignoring removed bh option [ 105.806122][ T8380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 105.863249][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 105.910573][ T8414] loop3: detected capacity change from 0 to 512 [ 105.938307][ T8414] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.957104][ T8414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.957197][ T8414] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.963971][ T8420] loop4: detected capacity change from 0 to 512 [ 105.964610][ T8420] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.979275][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.980669][ T8420] EXT4-fs (loop4): 1 truncate cleaned up [ 106.021108][ T8420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.030050][ T8420] EXT4-fs error (device loop4): ext4_read_inline_dir:1502: inode #12: block 7: comm syz.4.1894: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 106.066586][ T8420] EXT4-fs (loop4): Remounting filesystem read-only [ 106.069938][ T8424] netlink: 'syz.3.1895': attribute type 1 has an invalid length. [ 106.081682][ T8424] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1895'. [ 106.151825][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.171048][ T8428] random: crng reseeded on system resumption [ 106.270439][ T8441] loop4: detected capacity change from 0 to 764 [ 106.277935][ T8441] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 106.452533][ T8464] SELinux: Context system_u:object_r:logrotate_var_lib_t:s0 is not valid (left unmapped). [ 106.481409][ T8466] SELinux: syz.0.1913 (8466) set checkreqprot to 1. This is no longer supported. [ 106.495757][ T8468] loop2: detected capacity change from 0 to 512 [ 106.522014][ T8468] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1914: Failed to acquire dquot type 1 [ 106.522667][ T8468] EXT4-fs (loop2): 1 truncate cleaned up [ 106.523113][ T8468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.553151][ T8468] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.557653][ T8468] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1914: Failed to acquire dquot type 1 [ 106.648689][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.696864][ T8486] loop2: detected capacity change from 0 to 512 [ 106.706634][ T8486] EXT4-fs (loop2): orphan cleanup on readonly fs [ 106.708006][ T8486] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1920: bg 0: block 248: padding at end of block bitmap is not set [ 106.731453][ T8486] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1920: Failed to acquire dquot type 1 [ 106.758701][ T8486] EXT4-fs (loop2): 1 truncate cleaned up [ 106.759750][ T8486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.794994][ T8494] loop4: detected capacity change from 0 to 512 [ 106.804610][ T8486] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 106.818502][ T8494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.833434][ T8498] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1926'. [ 106.844679][ T8494] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.845034][ T8486] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 106.898071][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.908483][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.941073][ T8508] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 107.034843][ T8523] random: crng reseeded on system resumption [ 107.071395][ T8527] loop3: detected capacity change from 0 to 128 [ 107.089442][ T8527] EXT4-fs: Ignoring removed nobh option [ 107.121430][ T8527] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.149311][ T8527] ext4 filesystem being mounted at /381/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.179736][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.296949][ T8541] loop3: detected capacity change from 0 to 512 [ 107.300248][ T8529] bridge: RTM_NEWNEIGH with invalid ether address [ 107.321802][ T8541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.339054][ T8541] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.354823][ T8540] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 107.397107][ T8529] bridge0: entered promiscuous mode [ 107.402552][ T8529] macsec1: entered allmulticast mode [ 107.407864][ T8529] bridge0: entered allmulticast mode [ 107.416812][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.426664][ T8529] bridge0: port 1(macsec1) entered blocking state [ 107.433271][ T8529] bridge0: port 1(macsec1) entered disabled state [ 107.450617][ T8529] bridge0: left allmulticast mode [ 107.455704][ T8529] bridge0: left promiscuous mode [ 107.628485][ T8558] loop2: detected capacity change from 0 to 512 [ 107.641748][ T8558] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.660890][ T8558] EXT4-fs (loop2): 1 truncate cleaned up [ 107.667244][ T8558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.711817][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.885703][ T8574] loop2: detected capacity change from 0 to 512 [ 107.940165][ T8574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.982016][ T8574] ext4 filesystem being mounted at /406/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.066620][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.107295][ T8588] loop3: detected capacity change from 0 to 512 [ 108.138129][ T8588] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.160204][ T8588] EXT4-fs (loop3): 1 truncate cleaned up [ 108.172232][ T8588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.266066][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.286849][ T29] kauditd_printk_skb: 1232 callbacks suppressed [ 108.286917][ T29] audit: type=1400 audit(1749362215.237:13873): avc: denied { execmem } for pid=8603 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 108.355772][ T8612] loop3: detected capacity change from 0 to 512 [ 108.371200][ T29] audit: type=1326 audit(1749362215.327:13874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8603 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e80be929 code=0x7ffc0000 [ 108.396141][ T8612] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 108.416850][ T29] audit: type=1326 audit(1749362215.327:13875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8603 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f58e80be929 code=0x7ffc0000 [ 108.440551][ T29] audit: type=1326 audit(1749362215.327:13876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8603 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e80be929 code=0x7ffc0000 [ 108.464242][ T29] audit: type=1326 audit(1749362215.327:13877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8603 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e80be929 code=0x7ffc0000 [ 108.487823][ T29] audit: type=1326 audit(1749362215.327:13878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8603 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58e80be929 code=0x7ffc0000 [ 108.511326][ T29] audit: type=1400 audit(1749362215.327:13879): avc: denied { create } for pid=8603 comm="syz.2.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.532149][ T29] audit: type=1326 audit(1749362215.327:13880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8603 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e80be929 code=0x7ffc0000 [ 108.555738][ T29] audit: type=1326 audit(1749362215.327:13881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8603 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f58e80be929 code=0x7ffc0000 [ 108.579212][ T29] audit: type=1400 audit(1749362215.327:13882): avc: denied { write } for pid=8603 comm="syz.2.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.620474][ T8612] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.1970: iget: bad i_size value: -67835469387268086 [ 108.634701][ T8612] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1970: couldn't read orphan inode 15 (err -117) [ 108.674172][ T8612] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.717316][ T8612] ext2 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.749807][ T8612] EXT4-fs error (device loop3): ext4_add_entry:2417: inode #2: comm syz.3.1970: Directory hole found for htree leaf block 0 [ 108.799533][ T3312] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 108.867902][ T8628] loop3: detected capacity change from 0 to 512 [ 108.910932][ T8628] EXT4-fs: Ignoring removed oldalloc option [ 108.963487][ T8628] EXT4-fs (loop3): 1 truncate cleaned up [ 108.987374][ T8639] IPv6: Can't replace route, no match found [ 108.987367][ T8628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.074236][ T8643] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 109.103161][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.183665][ T8655] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1990'. [ 109.323860][ T8666] loop2: detected capacity change from 0 to 512 [ 109.324382][ T8666] EXT4-fs: Ignoring removed i_version option [ 109.352511][ T8666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.418401][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.445175][ T8674] smc: net device bond0 erased user defined pnetid SYZ2 [ 109.868603][ T8698] bridge: RTM_NEWNEIGH with invalid ether address [ 109.883502][ T8698] bridge0: entered promiscuous mode [ 109.883560][ T8698] macsec1: entered allmulticast mode [ 109.883577][ T8698] bridge0: entered allmulticast mode [ 109.885880][ T8698] bridge0: port 3(macsec1) entered blocking state [ 109.910104][ T8698] bridge0: port 3(macsec1) entered disabled state [ 109.921358][ T8698] bridge0: left allmulticast mode [ 109.926507][ T8698] bridge0: left promiscuous mode [ 110.051956][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2014'. [ 110.065371][ T8716] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2014'. [ 110.177070][ T8734] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2023'. [ 110.370693][ T8751] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 110.430724][ T8757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2033'. [ 110.489634][ T8765] loop4: detected capacity change from 0 to 2048 [ 110.521247][ T8765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.556388][ T8773] loop2: detected capacity change from 0 to 4096 [ 110.568296][ T8773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.572997][ T8765] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 110.599184][ T8773] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.2041: corrupted inode contents [ 110.605560][ T8765] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 110.622818][ T8773] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #15: comm syz.2.2041: mark_inode_dirty error [ 110.623496][ T8765] EXT4-fs (loop4): This should not happen!! Data will be lost [ 110.623496][ T8765] [ 110.636464][ T8773] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.2041: corrupted inode contents [ 110.644520][ T8765] EXT4-fs (loop4): Total free blocks count 0 [ 110.658831][ T8773] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.2041: mark_inode_dirty error [ 110.662467][ T8765] EXT4-fs (loop4): Free/Dirty block details [ 110.679736][ T8765] EXT4-fs (loop4): free_blocks=66060288 [ 110.685363][ T8765] EXT4-fs (loop4): dirty_blocks=32 [ 110.690518][ T8765] EXT4-fs (loop4): Block reservation details [ 110.696728][ T8765] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 110.698355][ T8773] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.2041: corrupted inode contents [ 110.715336][ T8788] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 110.731732][ T8773] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.2041: mark_inode_dirty error [ 110.751977][ T8773] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.2041: corrupted inode contents [ 110.769323][ T8773] EXT4-fs error (device loop2): ext4_truncate:4597: inode #15: comm syz.2.2041: mark_inode_dirty error [ 110.782292][ T8773] EXT4-fs error (device loop2) in ext4_setattr:5986: Corrupt filesystem [ 110.817364][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.917725][ T8811] SELinux: failed to load policy [ 111.243108][ T8848] loop4: detected capacity change from 0 to 2048 [ 111.253730][ T8848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.385635][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.432597][ T8857] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2070'. [ 111.504042][ T8861] loop2: detected capacity change from 0 to 2048 [ 111.512426][ T8865] loop3: detected capacity change from 0 to 128 [ 111.527866][ T8865] FAT-fs (loop3): Directory bread(block 32) failed [ 111.534808][ T8865] FAT-fs (loop3): Directory bread(block 33) failed [ 111.543451][ T8865] FAT-fs (loop3): Directory bread(block 34) failed [ 111.567786][ T8865] FAT-fs (loop3): Directory bread(block 35) failed [ 111.574959][ T8865] FAT-fs (loop3): Directory bread(block 36) failed [ 111.583061][ T8865] FAT-fs (loop3): Directory bread(block 37) failed [ 111.591677][ T8865] FAT-fs (loop3): Directory bread(block 38) failed [ 111.600951][ T8865] FAT-fs (loop3): Directory bread(block 39) failed [ 111.607719][ T8865] FAT-fs (loop3): Directory bread(block 40) failed [ 111.614571][ T8865] FAT-fs (loop3): Directory bread(block 41) failed [ 111.680468][ T8865] syz.3.2075: attempt to access beyond end of device [ 111.680468][ T8865] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 111.714139][ T8865] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 111.722308][ T8865] FAT-fs (loop3): Filesystem has been set read-only [ 111.737289][ T8865] syz.3.2075: attempt to access beyond end of device [ 111.737289][ T8865] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 111.778934][ T8865] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 112.029858][ T8884] loop3: detected capacity change from 0 to 8192 [ 112.371292][ T8914] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 113.008393][ T8958] loop2: detected capacity change from 0 to 512 [ 113.042776][ T8958] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.060100][ T8966] IPv6: Can't replace route, no match found [ 113.150647][ T8979] loop3: detected capacity change from 0 to 256 [ 113.217150][ T8986] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2126'. [ 113.263174][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2128'. [ 113.279028][ T8989] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 113.285700][ T8989] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 113.293366][ T8989] vhci_hcd vhci_hcd.0: Device attached [ 113.299108][ T29] kauditd_printk_skb: 1265 callbacks suppressed [ 113.299121][ T29] audit: type=1326 audit(1749362220.227:15148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f203f07e929 code=0x7ffc0000 [ 113.309157][ T8992] loop3: detected capacity change from 0 to 2048 [ 113.329082][ T29] audit: type=1326 audit(1749362220.227:15149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x7ffc0000 [ 113.359113][ T29] audit: type=1326 audit(1749362220.227:15150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x7ffc0000 [ 113.382817][ T29] audit: type=1326 audit(1749362220.227:15151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f203f07e929 code=0x7ffc0000 [ 113.406286][ T29] audit: type=1326 audit(1749362220.227:15152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x7ffc0000 [ 113.429864][ T29] audit: type=1326 audit(1749362220.227:15153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x7ffc0000 [ 113.430774][ T8993] vhci_hcd: connection closed [ 113.453625][ T29] audit: type=1326 audit(1749362220.227:15154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f203f07e929 code=0x7ffc0000 [ 113.482352][ T29] audit: type=1326 audit(1749362220.227:15155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.1.2118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x0 [ 113.482731][ T381] vhci_hcd: stop threads [ 113.509801][ T381] vhci_hcd: release socket [ 113.514228][ T381] vhci_hcd: disconnect device [ 113.552851][ T29] audit: type=1400 audit(1749362220.337:15156): avc: denied { create } for pid=8996 comm="syz.0.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.572547][ T29] audit: type=1400 audit(1749362220.337:15157): avc: denied { create } for pid=8996 comm="syz.0.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.594859][ T8992] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.839816][ T9008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.849139][ T9008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.864741][ T9028] program syz.0.2142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.892815][ T9030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.904846][ T9030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.173355][ T9048] loop2: detected capacity change from 0 to 8192 [ 114.465251][ T9061] loop2: detected capacity change from 0 to 8192 [ 114.626927][ T9074] serio: Serial port ptm1 [ 114.697860][ T9078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2164'. [ 114.751138][ T9081] loop3: detected capacity change from 0 to 1024 [ 115.149798][ T9101] vhci_hcd: default hub control req: 600c v0001 i0008 l0 [ 115.323136][ T9113] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 115.353458][ T9115] qrtr: Invalid version 91 [ 115.358377][ T9116] loop4: detected capacity change from 0 to 1024 [ 115.365397][ T9116] EXT4-fs: Ignoring removed bh option [ 115.370930][ T9116] EXT4-fs: inline encryption not supported [ 115.377403][ T9116] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.389781][ T9116] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 115.399719][ T9116] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.2177: lblock 2 mapped to illegal pblock 2 (length 1) [ 115.414038][ T9116] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.2177: lblock 0 mapped to illegal pblock 48 (length 1) [ 115.429515][ T9116] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2177: Failed to acquire dquot type 0 [ 115.441707][ T9116] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 115.451331][ T9116] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.2177: mark_inode_dirty error [ 115.480053][ T9116] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 115.494755][ T9116] EXT4-fs (loop4): 1 orphan inode deleted [ 115.519907][ T3439] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 115.538016][ T3439] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 115.567557][ T9116] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.2177: Invalid inode table block 1 in block_group 0 [ 115.576866][ T9128] loop2: detected capacity change from 0 to 8192 [ 115.589304][ T9116] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 115.604993][ T9128] syz.2.2183: attempt to access beyond end of device [ 115.604993][ T9128] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 115.618629][ T9116] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz.4.2177: mark_inode_dirty error [ 115.665595][ T9135] syz.1.2187 uses obsolete (PF_INET,SOCK_PACKET) [ 115.909421][ T9157] loop3: detected capacity change from 0 to 8192 [ 115.934675][ T9159] netlink: 'syz.2.2197': attribute type 1 has an invalid length. [ 115.942615][ T9159] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2197'. [ 115.976854][ T9161] loop3: detected capacity change from 0 to 1024 [ 116.007281][ T9161] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.035271][ T9171] serio: Serial port ptm0 [ 116.299747][ T9190] bridge: RTM_NEWNEIGH with invalid ether address [ 116.494151][ T9227] loop3: detected capacity change from 0 to 1024 [ 116.511400][ T9227] EXT4-fs: Ignoring removed orlov option [ 116.530299][ T9227] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 116.553447][ T9227] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.2225: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 116.880427][ T9276] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 116.900502][ T9274] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 116.900526][ T9274] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 117.440033][ T9305] bridge: RTM_NEWNEIGH with invalid ether address [ 117.676312][ T9333] loop4: detected capacity change from 0 to 512 [ 117.677178][ T9333] EXT4-fs: Ignoring removed orlov option [ 117.678732][ T9333] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 117.695691][ T9333] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 117.709325][ T9333] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.2269: corrupted in-inode xattr: e_value size too large [ 117.740295][ T9333] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2269: couldn't read orphan inode 15 (err -117) [ 118.311166][ T29] kauditd_printk_skb: 1212 callbacks suppressed [ 118.311244][ T29] audit: type=1400 audit(1749362225.267:16367): avc: denied { recv } for pid=9364 comm="syz.0.2282" saddr=10.128.0.163 src=30030 daddr=10.128.1.177 dest=39192 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 118.312308][ T29] audit: type=1400 audit(1749362225.267:16368): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.368751][ T29] audit: type=1400 audit(1749362225.267:16369): avc: denied { open } for pid=3312 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.370840][ T29] audit: type=1400 audit(1749362225.277:16370): avc: denied { ioctl } for pid=3312 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.419871][ T29] audit: type=1326 audit(1749362225.307:16371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9364 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000 [ 118.419918][ T29] audit: type=1326 audit(1749362225.307:16372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9364 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000 [ 118.419967][ T29] audit: type=1400 audit(1749362225.307:16373): avc: denied { create } for pid=9380 comm="syz.3.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.419993][ T29] audit: type=1400 audit(1749362225.307:16374): avc: denied { ioctl } for pid=9380 comm="syz.3.2289" path="socket:[23572]" dev="sockfs" ino=23572 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.425222][ T29] audit: type=1326 audit(1749362225.377:16375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.2.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e80be929 code=0x7ffc0000 [ 118.536268][ T29] audit: type=1326 audit(1749362225.377:16376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.2.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e80be929 code=0x7ffc0000 [ 118.766049][ T9398] loop4: detected capacity change from 0 to 512 [ 118.795434][ T9398] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 118.795630][ T9398] EXT4-fs (loop4): orphan cleanup on readonly fs [ 118.795895][ T9398] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.796233][ T9398] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 118.796759][ T9398] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2294: bg 0: block 40: padding at end of block bitmap is not set [ 118.867193][ T9398] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 118.873974][ T9398] EXT4-fs (loop4): 1 truncate cleaned up [ 119.122020][ T9430] SELinux: ebitmap start bit (3317329373) is not a multiple of the map unit size (64) [ 119.133132][ T9430] SELinux: failed to load policy [ 119.208420][ T9426] bridge: RTM_NEWNEIGH with invalid ether address [ 119.297233][ T9449] ALSA: seq fatal error: cannot create timer (-19) [ 119.331564][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2318'. [ 119.426301][ T9465] loop2: detected capacity change from 0 to 1024 [ 119.434581][ T9465] EXT4-fs: Ignoring removed nobh option [ 119.440314][ T9465] EXT4-fs: Ignoring removed bh option [ 119.897157][ T9494] usb usb1: usbfs: process 9494 (syz.4.2333) did not claim interface 0 before use [ 119.950653][ T9499] loop3: detected capacity change from 0 to 512 [ 119.965713][ T9499] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.009353][ T9499] EXT4-fs (loop3): mount failed [ 120.022074][ T9503] loop4: detected capacity change from 0 to 512 [ 120.043645][ T9503] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 120.060858][ T9503] EXT4-fs (loop4): invalid journal inode [ 120.065274][ T9490] bridge: RTM_NEWNEIGH with invalid ether address [ 120.083205][ T9503] EXT4-fs (loop4): can't get journal size [ 120.092534][ T9503] EXT4-fs (loop4): 1 truncate cleaned up [ 120.113851][ T9487] loop2: detected capacity change from 0 to 32768 [ 120.153709][ T9487] loop2: p1 p2 p3 < p5 p6 > [ 120.158626][ T9512] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.167618][ T9487] loop2: p1 size 242222080 extends beyond EOD, truncated [ 120.196019][ T9487] loop2: p2 start 4294967295 is beyond EOD, truncated [ 120.530987][ T9534] bridge: RTM_NEWNEIGH with invalid ether address [ 120.559452][ T9558] syzkaller1: entered promiscuous mode [ 120.559554][ T9558] syzkaller1: entered allmulticast mode [ 120.805392][ T9576] loop3: detected capacity change from 0 to 164 [ 120.886042][ T9576] rock: corrupted directory entry. extent=29, offset=956301312, size=3 [ 120.888680][ T9576] rock: corrupted directory entry. extent=29, offset=956301312, size=3 [ 121.092537][ T9590] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.341671][ T9600] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.2374'. [ 121.448303][ T9608] SELinux: failed to load policy [ 121.504024][ T9592] bridge: RTM_NEWNEIGH with invalid ether address [ 121.742142][ T9628] program syz.0.2393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.830541][ T9637] sd 0:0:1:0: device reset [ 121.980311][ T9640] loop2: detected capacity change from 0 to 8192 [ 121.983865][ T9648] @ÿ: renamed from bond_slave_0 [ 122.005185][ T9640] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.013688][ T9640] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 122.030556][ T9640] FAT-fs (loop2): Filesystem has been set read-only [ 122.050151][ T9640] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 122.050193][ T9640] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 122.235328][ T9668] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2404'. [ 122.244461][ T9668] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2404'. [ 122.253593][ T9668] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2404'. [ 122.691857][ T9715] loop3: detected capacity change from 0 to 512 [ 122.718648][ T9715] ext4 filesystem being mounted at /480/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.080911][ T9737] SELinux: syz.3.2430 (9737) set checkreqprot to 1. This is no longer supported. [ 123.125390][ T9741] loop3: detected capacity change from 0 to 1024 [ 123.144969][ T9741] EXT4-fs: Ignoring removed bh option [ 123.162309][ T9741] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.211605][ T9747] IPv6: Can't replace route, no match found [ 123.282844][ T9754] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2438'. [ 123.326438][ T29] kauditd_printk_skb: 818 callbacks suppressed [ 123.326457][ T29] audit: type=1400 audit(1749362230.277:17193): avc: denied { create } for pid=9758 comm="syz.4.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.362525][ T29] audit: type=1400 audit(1749362230.317:17194): avc: denied { getopt } for pid=9758 comm="syz.4.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.416496][ T29] audit: type=1400 audit(1749362230.367:17195): avc: denied { read write } for pid=9762 comm="syz.3.2442" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 123.440066][ T29] audit: type=1400 audit(1749362230.367:17196): avc: denied { open } for pid=9762 comm="syz.3.2442" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 123.463400][ T29] audit: type=1400 audit(1749362230.367:17197): avc: denied { ioctl } for pid=9762 comm="syz.3.2442" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 123.493410][ T9764] loop4: detected capacity change from 0 to 2048 [ 123.496075][ T29] audit: type=1400 audit(1749362230.447:17198): avc: denied { create } for pid=9766 comm="syz.2.2444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.519842][ T29] audit: type=1400 audit(1749362230.447:17199): avc: denied { ioctl } for pid=9766 comm="syz.2.2444" path="socket:[24104]" dev="sockfs" ino=24104 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.544988][ T29] audit: type=1400 audit(1749362230.447:17200): avc: denied { write } for pid=9766 comm="syz.2.2444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.564840][ T29] audit: type=1400 audit(1749362230.457:17201): avc: denied { mounton } for pid=9763 comm="syz.4.2443" path="/437/file1" dev="tmpfs" ino=2278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 123.610956][ T29] audit: type=1400 audit(1749362230.567:17202): avc: denied { mount } for pid=9763 comm="syz.4.2443" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 123.773287][ T9793] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 123.872195][ T9809] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 123.872318][ T9807] IPVS: stopping master sync thread 9809 ... [ 123.960809][ T9816] loop4: detected capacity change from 0 to 1024 [ 123.992975][ T9816] ext4 filesystem being mounted at /442/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.071671][ T9822] SELinux: security policydb version 18 (MLS) not backwards compatible [ 124.081332][ T9822] SELinux: failed to load policy [ 124.087783][ T9824] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 124.130880][ T9828] loop4: detected capacity change from 0 to 512 [ 124.162561][ T9828] ext4 filesystem being mounted at /444/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.240337][ T9845] loop4: detected capacity change from 0 to 2048 [ 124.461679][ T9877] loop4: detected capacity change from 0 to 512 [ 124.480046][ T9877] EXT4-fs (loop4): too many log groups per flexible block group [ 124.487765][ T9877] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 124.494938][ T9877] EXT4-fs (loop4): mount failed [ 124.508820][ T9881] random: crng reseeded on system resumption [ 124.551433][ T9887] SELinux: policydb version 941535249 does not match my version range 15-34 [ 124.561725][ T9887] SELinux: failed to load policy [ 124.693044][ T9906] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 124.699721][ T9906] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 124.707289][ T9906] vhci_hcd vhci_hcd.0: Device attached [ 124.716886][ T9908] vhci_hcd: connection closed [ 124.718876][ T12] vhci_hcd: stop threads [ 124.727838][ T12] vhci_hcd: release socket [ 124.732317][ T12] vhci_hcd: disconnect device [ 124.897004][ T9926] netlink: 'syz.3.2512': attribute type 1 has an invalid length. [ 124.904933][ T9926] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2512'. [ 124.948475][ T9929] program syz.3.2514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.165510][ T9944] syzkaller1: entered promiscuous mode [ 125.165608][ T9944] syzkaller1: entered allmulticast mode [ 125.550265][ T9959] bridge: RTM_NEWNEIGH with invalid ether address [ 125.560948][ T9959] bridge0: entered promiscuous mode [ 125.560979][ T9959] macsec1: entered allmulticast mode [ 125.560991][ T9959] bridge0: entered allmulticast mode [ 125.751671][ T9984] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2536'. [ 125.751693][ T9984] netlink: 'syz.0.2536': attribute type 9 has an invalid length. [ 125.751706][ T9984] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2536'. [ 125.751720][ T9984] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2536'. [ 125.820210][ T9986] SELinux: failed to load policy [ 125.940318][ T9995] loop4: detected capacity change from 0 to 512 [ 125.958329][ T9995] EXT4-fs: Ignoring removed i_version option [ 125.978602][ T9995] EXT4-fs (loop4): orphan cleanup on readonly fs [ 126.003667][ T9995] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2541: bg 0: block 131: padding at end of block bitmap is not set [ 126.021487][T10004] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.029920][ T9995] EXT4-fs (loop4): Remounting filesystem read-only [ 126.040913][ T9995] EXT4-fs (loop4): 1 truncate cleaned up [ 126.091092][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2547'. [ 126.146344][T10000] bridge: RTM_NEWNEIGH with invalid ether address [ 126.200940][T10025] loop4: detected capacity change from 0 to 1024 [ 126.239121][T10025] ext4 filesystem being mounted at /462/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.253573][T10025] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 3: comm syz.4.2554: lblock 3 mapped to illegal pblock 3 (length 3) [ 126.316948][T10025] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 126.329356][T10025] EXT4-fs (loop4): This should not happen!! Data will be lost [ 126.329356][T10025] [ 126.381187][T10043] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 6: comm syz.4.2554: lblock 6 mapped to illegal pblock 6 (length 10) [ 126.417288][T10043] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 6 with max blocks 10 with error 117 [ 126.429753][T10043] EXT4-fs (loop4): This should not happen!! Data will be lost [ 126.429753][T10043] [ 126.891373][T10078] SELinux: policydb version -71945047 does not match my version range 15-34 [ 126.900528][T10078] SELinux: failed to load policy [ 126.920784][T10080] IPVS: stopping master sync thread 3874 ... [ 126.948223][T10084] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 126.948223][T10084] program syz.1.2575 not setting count and/or reply_len properly [ 127.076127][T10097] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 127.076127][T10097] program syz.1.2581 not setting count and/or reply_len properly [ 127.217526][T10108] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 127.217526][T10108] program syz.1.2596 not setting count and/or reply_len properly [ 127.246375][T10110] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 127.257632][T10109] IPVS: stopping master sync thread 10110 ... [ 127.513954][T10143] xt_connbytes: Forcing CT accounting to be enabled [ 127.514082][T10143] set match dimension is over the limit! [ 127.743018][T10149] bridge: RTM_NEWNEIGH with invalid ether address [ 127.843573][T10169] SELinux: syz.0.2614 (10169) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 128.329916][ T29] kauditd_printk_skb: 1180 callbacks suppressed [ 128.329935][ T29] audit: type=1326 audit(1749362235.277:18383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f203f07e929 code=0x7ffc0000 [ 128.359993][ T29] audit: type=1326 audit(1749362235.277:18384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x7ffc0000 [ 128.383859][ T29] audit: type=1326 audit(1749362235.287:18385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f203f07e929 code=0x7ffc0000 [ 128.407387][ T29] audit: type=1326 audit(1749362235.287:18386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x7ffc0000 [ 128.433765][ T29] audit: type=1326 audit(1749362235.287:18387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x7ffc0000 [ 128.457447][ T29] audit: type=1326 audit(1749362235.287:18388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f203f0758e7 code=0x7ffc0000 [ 128.481272][ T29] audit: type=1326 audit(1749362235.287:18389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f203f01ab19 code=0x7ffc0000 [ 128.504873][ T29] audit: type=1326 audit(1749362235.287:18390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x7ffc0000 [ 128.528933][ T29] audit: type=1326 audit(1749362235.287:18391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f203f0758e7 code=0x7ffc0000 [ 128.552623][ T29] audit: type=1326 audit(1749362235.287:18392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f203f01ab19 code=0x7ffc0000 [ 128.606727][T10209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2631'. [ 128.672088][T10217] hub 9-0:1.0: USB hub found [ 128.676847][T10217] hub 9-0:1.0: 8 ports detected [ 128.712181][T10228] ref_ctr_offset mismatch. inode: 0xaa4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 129.031594][T10249] bridge: RTM_NEWNEIGH with invalid ether address [ 129.180559][T10259] SELinux: ebitmap: high bit 2147942784 is not equal to the expected value 384 [ 129.180706][T10259] SELinux: failed to load policy [ 129.439911][T10281] bridge: RTM_NEWNEIGH with invalid ether address [ 129.443098][T10281] bridge0: entered promiscuous mode [ 129.452546][T10281] macsec1: entered allmulticast mode [ 129.452567][T10281] bridge0: entered allmulticast mode [ 129.453868][T10281] bridge0: port 3(macsec1) entered blocking state [ 129.470791][T10281] bridge0: port 3(macsec1) entered disabled state [ 129.484563][T10281] bridge0: left allmulticast mode [ 129.484589][T10281] bridge0: left promiscuous mode [ 129.721614][T10328] random: crng reseeded on system resumption [ 129.734776][T10330] loop4: detected capacity change from 0 to 128 [ 129.742008][T10330] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.755544][T10330] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 129.842161][T10334] loop4: detected capacity change from 0 to 8192 [ 130.202654][T10350] hsr0: entered promiscuous mode [ 130.202804][T10350] vlan2: entered promiscuous mode [ 130.607127][T10366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2696'. [ 130.758247][T10379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2703'. [ 130.775929][T10381] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.821095][T10387] netlink: 209788 bytes leftover after parsing attributes in process `syz.0.2706'. [ 130.821122][T10387] netlink: zone id is out of range [ 130.821209][T10387] netlink: zone id is out of range [ 130.821220][T10387] netlink: zone id is out of range [ 130.821268][T10387] netlink: zone id is out of range [ 130.821276][T10387] netlink: zone id is out of range [ 130.821284][T10387] netlink: zone id is out of range [ 130.821292][T10387] netlink: del zone limit has 8 unknown bytes [ 130.967121][T10385] bridge: RTM_NEWNEIGH with invalid ether address [ 130.978971][T10385] bridge0: entered promiscuous mode [ 130.984474][T10385] macsec1: entered allmulticast mode [ 130.989880][T10385] bridge0: entered allmulticast mode [ 131.001432][T10385] bridge0: port 3(macsec1) entered blocking state [ 131.007934][T10385] bridge0: port 3(macsec1) entered disabled state [ 131.019595][T10385] bridge0: left allmulticast mode [ 131.024691][T10385] bridge0: left promiscuous mode [ 131.036773][T10408] loop4: detected capacity change from 0 to 128 [ 132.021192][T10448] bridge: RTM_NEWNEIGH with invalid ether address [ 132.074990][T10448] bridge0: entered promiscuous mode [ 132.080721][T10448] macsec1: entered allmulticast mode [ 132.086043][T10448] bridge0: entered allmulticast mode [ 132.092774][T10448] bridge0: port 1(macsec1) entered blocking state [ 132.099338][T10448] bridge0: port 1(macsec1) entered disabled state [ 132.107003][T10448] bridge0: left allmulticast mode [ 132.112192][T10448] bridge0: left promiscuous mode [ 132.250966][T10467] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2735'. [ 132.761781][T10513] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2757'. [ 132.762722][T10511] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2757'. [ 133.194941][T10546] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 133.311146][T10558] rdma_op ffff88811e6df580 conn xmit_rdma 0000000000000000 [ 133.351191][ T29] kauditd_printk_skb: 1632 callbacks suppressed [ 133.351209][ T29] audit: type=1400 audit(1749362240.307:20025): avc: denied { mount } for pid=10566 comm="syz.2.2783" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 133.396703][T10577] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2785'. [ 133.406031][T10577] unsupported nla_type 65024 [ 133.425852][ T29] audit: type=1400 audit(1749362240.377:20026): avc: denied { module_load } for pid=10578 comm="syz.2.2786" path="/sys/kernel/notes" dev="sysfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 133.425879][T10580] Invalid ELF header magic: != ELF [ 133.505694][ T29] audit: type=1400 audit(1749362240.457:20027): avc: denied { append } for pid=10589 comm="syz.2.2801" name="001" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 133.629034][ T29] audit: type=1326 audit(1749362240.567:20028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000 [ 133.652893][ T29] audit: type=1326 audit(1749362240.567:20029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000 [ 133.676576][ T29] audit: type=1326 audit(1749362240.567:20030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000 [ 133.700131][ T29] audit: type=1326 audit(1749362240.567:20031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000 [ 133.723728][ T29] audit: type=1326 audit(1749362240.567:20032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000 [ 133.747574][ T29] audit: type=1326 audit(1749362240.567:20033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000 [ 133.771237][ T29] audit: type=1326 audit(1749362240.567:20034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000 [ 134.077713][T10613] loop4: detected capacity change from 0 to 512 [ 134.078040][T10613] EXT4-fs: Ignoring removed nobh option [ 134.179886][T10613] EXT4-fs mount: 34 callbacks suppressed [ 134.179909][T10613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.201045][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.254393][T10602] bridge: RTM_NEWNEIGH with invalid ether address [ 134.277887][T10602] bridge0: entered promiscuous mode [ 134.277928][T10602] macsec1: entered allmulticast mode [ 134.277945][T10602] bridge0: entered allmulticast mode [ 134.279776][T10602] bridge0: port 3(macsec1) entered blocking state [ 134.300710][T10602] bridge0: port 3(macsec1) entered disabled state [ 134.360466][T10602] bridge0: left allmulticast mode [ 134.365564][T10602] bridge0: left promiscuous mode [ 134.542721][T10659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2819'. [ 134.542751][T10659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2819'. [ 134.545155][T10659] erspan0: entered promiscuous mode [ 134.545996][T10659] gretap0: entered promiscuous mode [ 134.652812][T10669] SELinux: syz.1.2824 (10669) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 134.724716][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2827'. [ 134.783802][T10686] netlink: 'syz.4.2833': attribute type 7 has an invalid length. [ 134.885810][T10701] syzkaller1: entered promiscuous mode [ 134.885832][T10701] syzkaller1: entered allmulticast mode [ 136.086864][T10851] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:6c17:c6ff:feb9:d59b error=-28 [ 136.133732][T10851] infiniband syz!: set active [ 136.138461][T10851] infiniband syz!: added team_slave_0 [ 136.152000][T10851] RDS/IB: syz!: added [ 136.156118][T10851] smc: adding ib device syz! with port count 1 [ 136.162408][T10851] smc: ib device syz! port 1 has pnetid [ 137.060545][T10840] syz.3.2849 (10840) used greatest stack depth: 7160 bytes left [ 137.545766][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.596621][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.681786][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.720787][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.874770][T10971] SELinux: Context system_u:object_r:urandom_device_t:s0 is not valid (left unmapped). [ 137.922552][ T31] $Hÿ (unregistering): Released all slaves [ 137.996022][ T31] IPVS: stopping master sync thread 3591 ... [ 138.043929][ T31] hsr_slave_0: left promiscuous mode [ 138.044256][ T31] hsr_slave_1: left promiscuous mode [ 138.050634][ T31] veth1_macvtap: left promiscuous mode [ 138.050726][ T31] veth0_macvtap: left promiscuous mode [ 138.050891][ T31] veth1_vlan: left promiscuous mode [ 138.050931][ T31] veth0_vlan: left promiscuous mode [ 138.227007][T10935] chnl_net:caif_netlink_parms(): no params data found [ 138.267458][T10935] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.274759][T10935] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.276606][T10935] bridge_slave_0: entered allmulticast mode [ 138.290993][T10935] bridge_slave_0: entered promiscuous mode [ 138.292152][T10935] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.303997][T10935] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.312484][T10935] bridge_slave_1: entered allmulticast mode [ 138.313147][T10935] bridge_slave_1: entered promiscuous mode [ 138.336759][T10935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.338626][T10935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.361356][ T29] kauditd_printk_skb: 1069 callbacks suppressed [ 138.361370][ T29] audit: type=1326 audit(1749362245.317:21104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.4.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1277a958e7 code=0x7ffc0000 [ 138.361404][ T29] audit: type=1326 audit(1749362245.317:21105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.4.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1277a3ab19 code=0x7ffc0000 [ 138.361487][ T29] audit: type=1326 audit(1749362245.317:21106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.4.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f1277a9e929 code=0x7ffc0000 [ 138.368274][ T29] audit: type=1326 audit(1749362245.317:21107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f203f0758e7 code=0x7ffc0000 [ 138.368313][ T29] audit: type=1326 audit(1749362245.317:21108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f203f01ab19 code=0x7ffc0000 [ 138.368399][ T29] audit: type=1326 audit(1749362245.317:21109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f203f07e929 code=0x7ffc0000 [ 138.369559][T10935] team0: Port device team_slave_0 added [ 138.392468][ T29] audit: type=1326 audit(1749362245.347:21110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f203f0758e7 code=0x7ffc0000 [ 138.452214][T10935] team0: Port device team_slave_1 added [ 138.462496][ T29] audit: type=1326 audit(1749362245.347:21111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f203f01ab19 code=0x7ffc0000 [ 138.567947][ T29] audit: type=1326 audit(1749362245.347:21112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f203f07e929 code=0x7ffc0000 [ 138.568448][ T29] audit: type=1326 audit(1749362245.467:21113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.4.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1277a958e7 code=0x7ffc0000 [ 138.630120][T10935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.630136][T10935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.630188][T10935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.633897][T10935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.681460][T10935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.681525][T10935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.685482][ T31] IPVS: stop unused estimator thread 0... [ 138.770232][T10935] hsr_slave_0: entered promiscuous mode [ 138.770746][T10935] hsr_slave_1: entered promiscuous mode [ 138.771042][T10935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.771058][T10935] Cannot create hsr debugfs directory [ 138.891469][T10935] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 138.904522][T10935] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 138.913718][T10935] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 138.923795][T10935] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 138.971398][T11008] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2911'. [ 138.993639][T10935] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.000783][T10935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.008132][T10935] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.015227][T10935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.035703][T11015] $Hÿ: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 139.035732][T11015] $Hÿ: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 139.036192][T11015] $Hÿ: (slave ipvlan2): Error -95 calling set_mac_address [ 139.079689][T10935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.096733][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.143088][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.166566][T11027] xt_hashlimit: max too large, truncated to 1048576 [ 139.176186][T10935] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.191104][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.198235][ T381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.216292][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.223531][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.308344][T11036] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2919'. [ 139.325179][T10935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.465014][T10935] veth0_vlan: entered promiscuous mode [ 139.468248][T10935] veth1_vlan: entered promiscuous mode [ 139.485364][T10935] veth0_macvtap: entered promiscuous mode [ 139.491145][T10935] veth1_macvtap: entered promiscuous mode [ 139.505179][T10935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.510664][T10935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.523794][T10935] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.523836][T10935] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.523931][T10935] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.523977][T10935] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.696994][T11064] loop4: detected capacity change from 0 to 2048 [ 139.716269][T11064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.896339][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.914117][T11077] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2931'. [ 139.992393][T11084] loop5: detected capacity change from 0 to 1024 [ 140.012321][T11084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.083232][T10935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.108584][T11095] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2936'. [ 140.114424][T11092] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2936'. [ 140.175758][T11103] loop5: detected capacity change from 0 to 2048 [ 140.180486][T11105] 9pnet: Could not find request transport: t [ 140.204018][T11101] loop4: detected capacity change from 0 to 8192 [ 140.249125][T11112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2945'. [ 140.351061][T11128] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.2952'. [ 140.502408][T11140] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2955'. [ 140.522341][T11134] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2955'. [ 140.926257][T11165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.084662][T11178] loop5: detected capacity change from 0 to 1024 [ 141.130676][T11178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.130925][T11178] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.142854][T11178] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 141.155401][T11178] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 141.181299][T11178] EXT4-fs (loop5): This should not happen!! Data will be lost [ 141.181299][T11178] [ 141.191140][T11178] EXT4-fs (loop5): Total free blocks count 0 [ 141.197157][T11178] EXT4-fs (loop5): Free/Dirty block details [ 141.203105][T11178] EXT4-fs (loop5): free_blocks=4293918720 [ 141.203165][T11178] EXT4-fs (loop5): dirty_blocks=64 [ 141.203182][T11178] EXT4-fs (loop5): Block reservation details [ 141.203197][T11178] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 141.243477][T10935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.285516][T11194] xt_hashlimit: max too large, truncated to 1048576 [ 141.502487][T11214] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 141.566691][T11216] loop4: detected capacity change from 0 to 128 [ 141.574247][T11216] FAT-fs (loop4): Directory bread(block 162) failed [ 141.574275][T11216] FAT-fs (loop4): Directory bread(block 163) failed [ 141.574372][T11216] FAT-fs (loop4): Directory bread(block 164) failed [ 141.574395][T11216] FAT-fs (loop4): Directory bread(block 165) failed [ 141.574488][T11216] FAT-fs (loop4): Directory bread(block 166) failed [ 141.574510][T11216] FAT-fs (loop4): Directory bread(block 167) failed [ 141.574532][T11216] FAT-fs (loop4): Directory bread(block 168) failed [ 141.574577][T11216] FAT-fs (loop4): Directory bread(block 169) failed [ 141.575577][T11216] FAT-fs (loop4): Directory bread(block 162) failed [ 141.575645][T11216] FAT-fs (loop4): Directory bread(block 163) failed [ 141.576046][T11216] syz.4.2989: attempt to access beyond end of device [ 141.576046][T11216] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 141.576071][T11216] syz.4.2989: attempt to access beyond end of device [ 141.576071][T11216] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 141.631944][T11211] bridge: RTM_NEWNEIGH with invalid ether address [ 141.645559][T11219] loop4: detected capacity change from 0 to 2048 [ 141.656678][T11211] bridge0: entered promiscuous mode [ 141.706788][T11211] macsec1: entered allmulticast mode [ 141.706811][T11211] bridge0: entered allmulticast mode [ 141.707683][T11211] bridge0: port 1(macsec1) entered blocking state [ 141.724581][T11211] bridge0: port 1(macsec1) entered disabled state [ 141.734226][T11211] bridge0: left allmulticast mode [ 141.734249][T11211] bridge0: left promiscuous mode [ 142.002784][T11243] vhci_hcd: default hub control req: 4016 v0009 i0000 l0 [ 142.120260][T11248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3001'. [ 142.410609][T11254] bridge: RTM_NEWNEIGH with invalid ether address [ 142.433102][T11254] bridge0: entered promiscuous mode [ 142.456010][T11254] macsec1: entered allmulticast mode [ 142.461521][T11254] bridge0: entered allmulticast mode [ 142.472194][T11254] bridge0: port 1(macsec1) entered blocking state [ 142.478868][T11254] bridge0: port 1(macsec1) entered disabled state [ 142.495428][T11254] bridge0: left allmulticast mode [ 142.500615][T11254] bridge0: left promiscuous mode [ 142.563601][T11277] loop4: detected capacity change from 0 to 8192 [ 142.609676][T11277] loop4: p2 p3 p4 [ 142.629112][T11277] loop4: p2 size 327551 extends beyond EOD, truncated [ 142.640083][T11277] loop4: p3 size 16776960 extends beyond EOD, truncated [ 142.657148][T11277] loop4: p4 size 3599499392 extends beyond EOD, truncated [ 142.671095][T11293] loop5: detected capacity change from 0 to 2048 [ 142.720323][T11293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.930599][T11302] loop4: detected capacity change from 0 to 1024 [ 142.961802][T11302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.020241][T11302] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.043801][T11302] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 3: comm syz.4.3021: lblock 3 mapped to illegal pblock 3 (length 1) [ 143.058171][T11302] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 143.070549][T11302] EXT4-fs (loop4): This should not happen!! Data will be lost [ 143.070549][T11302] [ 143.156684][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.172157][T10935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.214892][T11312] loop4: detected capacity change from 0 to 256 [ 143.234573][T11315] loop5: detected capacity change from 0 to 2048 [ 143.294265][T11319] SELinux: failed to load policy [ 143.375380][ T29] kauditd_printk_skb: 2681 callbacks suppressed [ 143.375400][ T29] audit: type=1326 audit(1749362250.327:23795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7f334c58e7 code=0x7ffc0000 [ 143.435913][ T29] audit: type=1326 audit(1749362250.327:23796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7f3346ab19 code=0x7ffc0000 [ 143.459482][ T29] audit: type=1326 audit(1749362250.327:23797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000 [ 143.483209][ T29] audit: type=1326 audit(1749362250.337:23798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7f334c58e7 code=0x7ffc0000 [ 143.490147][T11324] loop5: detected capacity change from 0 to 8192 [ 143.506730][ T29] audit: type=1326 audit(1749362250.337:23799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7f3346ab19 code=0x7ffc0000 [ 143.536881][ T29] audit: type=1326 audit(1749362250.337:23800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000 [ 143.560758][ T29] audit: type=1326 audit(1749362250.337:23801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7f334c58e7 code=0x7ffc0000 [ 143.584345][ T29] audit: type=1326 audit(1749362250.337:23802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7f3346ab19 code=0x7ffc0000 [ 143.607915][ T29] audit: type=1326 audit(1749362250.337:23803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f7f334ce929 code=0x7ffc0000 [ 143.631791][ T29] audit: type=1326 audit(1749362250.357:23804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7f334c58e7 code=0x7ffc0000 [ 143.664434][T11330] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3032'. [ 144.004282][T11343] bridge: RTM_NEWNEIGH with invalid ether address [ 144.017360][T11343] bridge0: entered promiscuous mode [ 144.022788][T11343] macsec1: entered allmulticast mode [ 144.028142][T11343] bridge0: entered allmulticast mode [ 144.037196][T11343] bridge0: port 3(macsec1) entered blocking state [ 144.043809][T11343] bridge0: port 3(macsec1) entered disabled state [ 144.054529][T11343] bridge0: left allmulticast mode [ 144.059657][T11343] bridge0: left promiscuous mode [ 144.410240][T11379] SELinux: Context system_u:object_r:utempter_exec_t:s0 is not valid (left unmapped). [ 144.979483][T11428] vxcan0: tx drop: invalid da for name 0xffffffffffffffff [ 145.012429][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3074'. [ 145.365945][T11456] loop5: detected capacity change from 0 to 512 [ 145.380524][T11456] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 145.405772][T11456] EXT4-fs (loop5): 1 truncate cleaned up [ 145.414600][T11456] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.475234][ T12] tipc: Subscription rejected, illegal request [ 145.520956][T10935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.918372][T11494] binfmt_misc: register: failed to install interpreter file ./file2 [ 146.177358][T11524] netlink: 'syz.3.3116': attribute type 1 has an invalid length. [ 146.474607][T11557] loop5: detected capacity change from 0 to 256 [ 146.484813][T11557] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.759812][T11559] bridge: RTM_NEWNEIGH with invalid ether address [ 146.935394][T11573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.942753][T11573] IPv6: NLM_F_CREATE should be set when creating new route [ 146.942785][T11573] IPv6: NLM_F_CREATE should be set when creating new route [ 146.942796][T11573] IPv6: NLM_F_CREATE should be set when creating new route [ 147.131927][T11586] loop4: detected capacity change from 0 to 8192 [ 147.164559][T11593] loop5: detected capacity change from 0 to 512 [ 147.172938][T11593] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: inode #32: comm syz.5.3146: iget: special inode unallocated [ 147.179175][T11586] loop4: p2 p3 p4 [ 147.187866][T11593] EXT4-fs (loop5): Remounting filesystem read-only [ 147.195025][T11586] loop4: p2 size 327551 extends beyond EOD, [ 147.195997][T11593] EXT4-fs (loop5): no journal found [ 147.196012][T11593] EXT4-fs (loop5): can't get journal size [ 147.202044][T11586] truncated [ 147.205790][T11586] loop4: p3 size 16776960 extends beyond EOD, [ 147.208656][T11593] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 147.213129][T11586] truncated [ 147.248855][T11586] loop4: p4 size 3599499392 extends beyond EOD, truncated [ 147.249019][T11593] EXT4-fs (loop5): failed to initialize system zone (-117) [ 147.267882][T11593] EXT4-fs (loop5): mount failed [ 147.485417][T11598] bridge: RTM_NEWNEIGH with invalid ether address [ 147.592668][T11601] macsec1: entered allmulticast mode [ 147.598043][T11601] bridge0: entered allmulticast mode [ 147.616995][T11601] bridge0: port 1(macsec1) entered blocking state [ 147.623631][T11601] bridge0: port 1(macsec1) entered disabled state [ 147.653840][T11601] bridge0: left allmulticast mode [ 147.983934][T11600] syz.5.3149 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 147.984045][T11600] CPU: 0 UID: 0 PID: 11600 Comm: syz.5.3149 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 147.984082][T11600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.984095][T11600] Call Trace: [ 147.984102][T11600] [ 147.984110][T11600] __dump_stack+0x1d/0x30 [ 147.984130][T11600] dump_stack_lvl+0xe8/0x140 [ 147.984174][T11600] dump_stack+0x15/0x1b [ 147.984193][T11600] dump_header+0x81/0x220 [ 147.984296][T11600] oom_kill_process+0x334/0x3f0 [ 147.984339][T11600] out_of_memory+0x979/0xb80 [ 147.984372][T11600] try_charge_memcg+0x5e6/0x9e0 [ 147.984455][T11600] obj_cgroup_charge_pages+0xa6/0x150 [ 147.984493][T11600] __memcg_kmem_charge_page+0x9f/0x170 [ 147.984529][T11600] __alloc_frozen_pages_noprof+0x188/0x360 [ 147.984596][T11600] alloc_pages_mpol+0xb3/0x250 [ 147.984635][T11600] alloc_pages_noprof+0x90/0x130 [ 147.984672][T11600] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 147.984819][T11600] __kvmalloc_node_noprof+0x30f/0x4e0 [ 147.984851][T11600] ? ip_set_alloc+0x1f/0x30 [ 147.984874][T11600] ? ip_set_alloc+0x1f/0x30 [ 147.984894][T11600] ? __kmalloc_cache_noprof+0x189/0x320 [ 147.984957][T11600] ip_set_alloc+0x1f/0x30 [ 147.984973][T11600] hash_netiface_create+0x282/0x740 [ 147.984999][T11600] ? __pfx_hash_netiface_create+0x10/0x10 [ 147.985026][T11600] ip_set_create+0x3cc/0x960 [ 147.985071][T11600] ? __nla_parse+0x40/0x60 [ 147.985127][T11600] nfnetlink_rcv_msg+0x4c3/0x590 [ 147.985187][T11600] ? selinux_capable+0x1f9/0x270 [ 147.985213][T11600] netlink_rcv_skb+0x120/0x220 [ 147.985237][T11600] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 147.985275][T11600] nfnetlink_rcv+0x16b/0x1690 [ 147.985356][T11600] ? __kfree_skb+0x109/0x150 [ 147.985375][T11600] ? nlmon_xmit+0x4f/0x60 [ 147.985400][T11600] ? consume_skb+0x49/0x150 [ 147.985420][T11600] ? nlmon_xmit+0x4f/0x60 [ 147.985521][T11600] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 147.985553][T11600] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 147.985578][T11600] ? __dev_queue_xmit+0x182/0x1fb0 [ 147.985609][T11600] ? ref_tracker_free+0x37d/0x3e0 [ 147.985636][T11600] ? __netlink_deliver_tap+0x4dc/0x500 [ 147.985729][T11600] netlink_unicast+0x5a1/0x670 [ 147.985753][T11600] netlink_sendmsg+0x58b/0x6b0 [ 147.985777][T11600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.985849][T11600] __sock_sendmsg+0x142/0x180 [ 147.985895][T11600] ____sys_sendmsg+0x31e/0x4e0 [ 147.985946][T11600] ___sys_sendmsg+0x17b/0x1d0 [ 147.985972][T11600] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 147.986028][T11600] __x64_sys_sendmsg+0xd4/0x160 [ 147.986073][T11600] x64_sys_call+0x2999/0x2fb0 [ 147.986094][T11600] do_syscall_64+0xd2/0x200 [ 147.986181][T11600] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 147.986220][T11600] ? clear_bhb_loop+0x40/0x90 [ 147.986251][T11600] ? clear_bhb_loop+0x40/0x90 [ 147.986283][T11600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.986397][T11600] RIP: 0033:0x7f8fc9c8e929 [ 147.986427][T11600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.986451][T11600] RSP: 002b:00007f8fc82f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.986478][T11600] RAX: ffffffffffffffda RBX: 00007f8fc9eb5fa0 RCX: 00007f8fc9c8e929 [ 147.986495][T11600] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000006 [ 147.986511][T11600] RBP: 00007f8fc9d10b39 R08: 0000000000000000 R09: 0000000000000000 [ 147.986563][T11600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.986580][T11600] R13: 0000000000000000 R14: 00007f8fc9eb5fa0 R15: 00007fff5840d6b8 [ 147.986605][T11600] [ 147.986629][T11600] memory: usage 307200kB, limit 307200kB, failcnt 104 [ 148.359305][T11600] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0 [ 148.359322][T11600] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 148.359337][T11600] Memory cgroup stats for /syz5: [ 148.359627][T11600] cache 0 [ 148.382790][T11600] rss 4096 [ 148.382803][T11600] shmem 0 [ 148.382811][T11600] mapped_file 0 [ 148.382820][T11600] dirty 0 [ 148.395193][T11600] writeback 0 [ 148.395205][T11600] workingset_refault_anon 8 [ 148.395215][T11600] workingset_refault_file 0 [ 148.395236][T11600] swap 180224 [ 148.395244][T11600] swapcached 8192 [ 148.395253][T11600] pgpgin 5254 [ 148.395260][T11600] pgpgout 5252 [ 148.395268][T11600] pgfault 8143 [ 148.395277][T11600] pgmajfault 2 [ 148.395284][T11600] inactive_anon 0 [ 148.395293][T11600] active_anon 8192 [ 148.395300][T11600] inactive_file 0 [ 148.395306][T11600] active_file 0 [ 148.395312][T11600] unevictable 0 [ 148.395319][T11600] hierarchical_memory_limit 314572800 [ 148.395327][T11600] hierarchical_memsw_limit 9223372036854771712 [ 148.395401][T11600] total_cache 0 [ 148.395410][T11600] total_rss 4096 [ 148.395441][T11600] total_shmem 0 [ 148.395449][T11600] total_mapped_file 0 [ 148.395487][T11600] total_dirty 0 [ 148.395495][T11600] total_writeback 0 [ 148.395504][T11600] total_workingset_refault_anon 8 [ 148.395513][T11600] total_workingset_refault_file 0 [ 148.395523][T11600] total_swap 180224 [ 148.395532][T11600] total_swapcached 8192 [ 148.395539][T11600] total_pgpgin 5254 [ 148.395546][T11600] total_pgpgout 5252 [ 148.395552][T11600] total_pgfault 8143 [ 148.395559][T11600] total_pgmajfault 2 [ 148.395566][T11600] total_inactive_anon 0 [ 148.395573][T11600] total_active_anon 8192 [ 148.395583][T11600] total_inactive_file 0 [ 148.395590][T11600] total_active_file 0 [ 148.395596][T11600] total_unevictable 0 [ 148.395604][T11600] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3149,pid=11599,uid=0 [ 148.395725][T11600] Memory cgroup out of memory: Killed process 11599 (syz.5.3149) total-vm:95668kB, anon-rss:936kB, file-rss:22008kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 148.533062][ T29] kauditd_printk_skb: 1756 callbacks suppressed [ 148.533155][ T29] audit: type=1400 audit(1749362255.487:25561): avc: denied { create } for pid=11630 comm="syz.0.3168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 148.634120][ T29] audit: type=1400 audit(1749362255.527:25562): avc: denied { listen } for pid=11630 comm="syz.0.3168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 148.682016][T11634] binfmt_misc: register: failed to install interpreter file ./file2 [ 148.749193][ T29] audit: type=1326 audit(1749362255.697:25563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11637 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x7ffc0000 [ 148.749235][ T29] audit: type=1326 audit(1749362255.697:25564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11637 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f203f07e929 code=0x7ffc0000 [ 148.749316][ T29] audit: type=1326 audit(1749362255.697:25565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11637 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x7ffc0000 [ 148.749402][ T29] audit: type=1326 audit(1749362255.697:25566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11637 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f203f07e929 code=0x7ffc0000 [ 148.749435][ T29] audit: type=1326 audit(1749362255.697:25567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11637 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203f07e929 code=0x7ffc0000 [ 148.885627][ T29] audit: type=1400 audit(1749362255.837:25568): avc: denied { create } for pid=11649 comm="syz.4.3164" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.885695][ T29] audit: type=1401 audit(1749362255.837:25569): op=setxattr invalid_context="" [ 148.894912][ T29] audit: type=1400 audit(1749362255.847:25570): avc: denied { unlink } for pid=3307 comm="syz-executor" name="file0" dev="tmpfs" ino=2970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 149.013282][T11660] loop4: detected capacity change from 0 to 1024 [ 149.020941][T11660] EXT4-fs: Ignoring removed orlov option [ 149.029890][T11660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.064788][T11668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3173'. [ 149.122939][T11671] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.394491][T11701] loop4: detected capacity change from 0 to 512 [ 149.404082][T11701] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.3190: corrupted in-inode xattr: invalid ea_ino [ 149.404281][T11701] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.3190: couldn't read orphan inode 15 (err -117) [ 149.405043][T11701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.459244][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.607089][T11711] loop4: detected capacity change from 0 to 512 [ 149.607987][T11711] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.628458][T11711] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c0a8, mo2=0002] [ 149.628868][T11711] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.3193: missing EA_INODE flag [ 149.629021][T11711] EXT4-fs (loop4): Remounting filesystem read-only [ 149.629055][T11711] EXT4-fs (loop4): 1 orphan inode deleted [ 149.629530][T11711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.657789][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.998190][T11731] loop5: detected capacity change from 0 to 8192 [ 150.019115][T11731] loop5: p2 p3 p4 [ 150.019161][T11731] loop5: p2 size 327551 extends beyond EOD, truncated [ 150.021183][T11731] loop5: p3 size 16776960 extends beyond EOD, truncated [ 150.021873][T11731] loop5: p4 size 3599499392 extends beyond EOD, truncated [ 150.314471][T11759] loop4: detected capacity change from 0 to 512 [ 150.324233][T11755] bridge: RTM_NEWNEIGH with invalid ether address [ 150.345591][T11759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.347996][T11746] bridge0: entered promiscuous mode [ 150.364940][T11746] macsec1: entered allmulticast mode [ 150.370305][T11746] bridge0: entered allmulticast mode [ 150.377353][T11746] bridge0: port 3(macsec1) entered blocking state [ 150.383913][T11746] bridge0: port 3(macsec1) entered disabled state [ 150.386390][T11759] ext4 filesystem being mounted at /586/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.410534][T11746] bridge0: left allmulticast mode [ 150.415716][T11746] bridge0: left promiscuous mode [ 150.446790][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.492793][T11771] loop5: detected capacity change from 0 to 256 [ 150.586672][T11787] loop4: detected capacity change from 0 to 256 [ 150.646793][T11793] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 150.653268][T11793] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 150.672005][T11796] loop5: detected capacity change from 0 to 512 [ 150.692040][T11796] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.704900][T11796] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.735505][T10935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.770756][T11810] loop5: detected capacity change from 0 to 164 [ 150.778188][T11810] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 150.792129][T11810] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 150.800882][T11810] Symlink component flag not implemented [ 150.806546][T11810] Symlink component flag not implemented [ 150.813672][T11810] Symlink component flag not implemented (7) [ 150.819690][T11810] Symlink component flag not implemented (116) [ 150.988556][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3245'. [ 151.333354][T11872] loop4: detected capacity change from 0 to 1024 [ 151.350921][T11872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.377731][T11872] ext4 filesystem being mounted at /597/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.402731][T11882] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3266'. [ 151.415251][T11872] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm syz.4.3263: lblock 1 mapped to illegal pblock 1 (length 15) [ 151.431558][T11872] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.3263: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 151.503338][T11890] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 151.511566][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.632579][T11894] loop4: detected capacity change from 0 to 8192 [ 151.680510][T11894] loop4: p2 p3 p4 [ 151.684717][T11894] loop4: p2 size 327551 extends beyond EOD, truncated [ 151.694666][T11894] loop4: p3 size 16776960 extends beyond EOD, truncated [ 151.702576][T11894] loop4: p4 size 3599499392 extends beyond EOD, truncated [ 151.770655][T11915] SELinux: policydb version 0 does not match my version range 15-34 [ 151.779127][T11915] SELinux: failed to load policy [ 151.795595][ T262] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.842433][ T262] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.916034][ T262] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.989069][T11936] loop4: detected capacity change from 0 to 1024 [ 151.996841][T11936] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 152.007689][T11936] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 152.008494][ T262] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.018679][T11936] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 152.021043][T11936] JBD2: no valid journal superblock found [ 152.044481][T11936] EXT4-fs (loop4): Could not load journal inode [ 152.122248][ T262] bridge_slave_1: left allmulticast mode [ 152.127981][ T262] bridge_slave_1: left promiscuous mode [ 152.133695][ T262] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.144366][ T262] bridge_slave_0: left allmulticast mode [ 152.150080][ T262] bridge_slave_0: left promiscuous mode [ 152.155846][ T262] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.272098][ T262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.282946][ T262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.293009][ T262] bond0 (unregistering): Released all slaves [ 152.305890][T11948] netlink: 'syz.4.3294': attribute type 13 has an invalid length. [ 152.313818][T11948] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.3294'. [ 152.446198][ T262] hsr_slave_0: left promiscuous mode [ 152.476093][ T262] hsr_slave_1: left promiscuous mode [ 152.490705][ T262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.498201][ T262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.506584][ T262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.514103][ T262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.526437][ T262] veth1_macvtap: left promiscuous mode [ 152.532602][ T262] veth0_macvtap: left promiscuous mode [ 152.538380][ T262] veth1_vlan: left promiscuous mode [ 152.539662][T11961] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 152.543911][ T262] veth0_vlan: left promiscuous mode [ 152.558502][T11961] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 152.580834][T11961] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 152.710887][ T262] team0 (unregistering): Port device team_slave_1 removed [ 152.728940][ T262] team0 (unregistering): Port device team_slave_0 removed [ 152.788357][T11922] chnl_net:caif_netlink_parms(): no params data found [ 152.813216][T11982] loop4: detected capacity change from 0 to 8192 [ 153.003738][T11922] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.010927][T11922] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.020311][T11922] bridge_slave_0: entered allmulticast mode [ 153.027357][T11922] bridge_slave_0: entered promiscuous mode [ 153.036021][T11922] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.043143][T11922] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.051348][T11922] bridge_slave_1: entered allmulticast mode [ 153.058040][T11922] bridge_slave_1: entered promiscuous mode [ 153.086580][T12004] loop4: detected capacity change from 0 to 1024 [ 153.095117][T11922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.105877][T11922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.124694][T12004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.163054][T11922] team0: Port device team_slave_0 added [ 153.180793][T11922] team0: Port device team_slave_1 added [ 153.205003][T11922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.206217][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.212000][T11922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.212103][T11922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.258634][T11922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.265640][T11922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.291728][T11922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.368389][T11922] hsr_slave_0: entered promiscuous mode [ 153.380557][T11922] hsr_slave_1: entered promiscuous mode [ 153.389573][T11922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.408940][T11922] Cannot create hsr debugfs directory [ 153.457251][T12025] loop4: detected capacity change from 0 to 512 [ 153.484990][T12025] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 153.501111][T12025] EXT4-fs (loop4): mount failed [ 153.551930][ T29] kauditd_printk_skb: 686 callbacks suppressed [ 153.551946][ T29] audit: type=1400 audit(1749362260.507:26256): avc: denied { create } for pid=12031 comm="syz.4.3331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 153.558427][T11922] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 153.597079][ T29] audit: type=1400 audit(1749362260.537:26257): avc: denied { write } for pid=12031 comm="syz.4.3331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 153.621596][ T29] audit: type=1400 audit(1749362260.577:26258): avc: denied { create } for pid=12033 comm="syz.4.3332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.641509][ T29] audit: type=1400 audit(1749362260.577:26259): avc: denied { connect } for pid=12033 comm="syz.4.3332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.663592][T11922] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 153.681849][T11922] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 153.690918][T11922] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 153.711241][T12044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3335'. [ 153.720242][T12044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3335'. [ 153.752051][T11922] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.759178][T11922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.766581][T11922] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.773747][T11922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.782315][ T29] audit: type=1400 audit(1749362260.727:26260): avc: denied { read write } for pid=12051 comm="syz.4.3337" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.806320][ T29] audit: type=1400 audit(1749362260.727:26261): avc: denied { open } for pid=12051 comm="syz.4.3337" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.855573][T11922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.864732][ T29] audit: type=1326 audit(1749362260.817:26262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.4.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277a9e929 code=0x7ffc0000 [ 153.893989][ T29] audit: type=1326 audit(1749362260.847:26263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.4.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1277a9e929 code=0x7ffc0000 [ 153.917892][ T29] audit: type=1326 audit(1749362260.847:26264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.4.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277a9e929 code=0x7ffc0000 [ 153.941637][ T29] audit: type=1326 audit(1749362260.847:26265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.4.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1277a9e929 code=0x7ffc0000 [ 153.973554][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.995640][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.022543][T11922] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.041477][ T3427] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.048606][ T3427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.087885][T11922] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.098048][T12073] netlink: 'syz.3.3343': attribute type 21 has an invalid length. [ 154.098377][T11922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.119271][ T3427] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.126381][ T3427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.206853][T12083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3347'. [ 154.221605][T11922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.418135][T11922] veth0_vlan: entered promiscuous mode [ 154.422440][T11922] veth1_vlan: entered promiscuous mode [ 154.446132][T11922] veth0_macvtap: entered promiscuous mode [ 154.446407][ C1] vcan0: j1939_tp_rxtimer: 0xffff888103d04c00: rx timeout, send abort [ 154.446488][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888103d04c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 154.447971][T11922] veth1_macvtap: entered promiscuous mode [ 154.493850][T11922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.499444][T11922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.541982][T11922] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.542016][T11922] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.542054][T11922] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.542109][T11922] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.617735][T12113] loop6: detected capacity change from 0 to 164 [ 154.625237][T12113] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 154.630995][T12113] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 154.631526][T12113] rock: directory entry would overflow storage [ 154.631534][T12113] rock: sig=0x4f50, size=4, remaining=3 [ 154.631547][T12113] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 154.928377][T12129] loop6: detected capacity change from 0 to 764 [ 155.011773][T12132] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3362'. [ 155.063552][T12139] loop6: detected capacity change from 0 to 512 [ 155.081090][T12139] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 155.106448][T12139] EXT4-fs (loop6): 1 truncate cleaned up [ 155.128546][T12139] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.312764][T12158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.331804][T12158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.561809][T12183] bond1: entered promiscuous mode [ 155.561831][T12183] bond1: entered allmulticast mode [ 155.567261][T12183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.573879][T11922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.602560][T12183] bond1 (unregistering): Released all slaves [ 155.884466][T12207] vhci_hcd: invalid port number 16 [ 155.889779][T12207] vhci_hcd: default hub control req: 0000 v0008 i0010 l0 [ 155.968007][T12216] loop4: detected capacity change from 0 to 2048 [ 156.001433][T12216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.017288][T12220] loop6: detected capacity change from 0 to 256 [ 156.025373][T12220] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 156.044022][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.083186][T12228] loop6: detected capacity change from 0 to 1024 [ 156.083595][T12228] EXT4-fs: Ignoring removed bh option [ 156.103379][T12228] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 156.139445][T11922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 156.191593][T12239] SELinux: failed to load policy [ 156.192232][T12242] loop6: detected capacity change from 0 to 512 [ 156.192716][T12242] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.193025][T12242] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 156.195053][T12242] EXT4-fs (loop6): 1 truncate cleaned up [ 156.195425][T12242] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.294377][T12255] EXT4-fs (loop6): shut down requested (2) [ 156.314066][T11922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.431013][T12272] loop4: detected capacity change from 0 to 1024 [ 156.439427][T12272] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 156.451838][T12272] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 156.463796][T12272] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 156.502894][T12272] EXT4-fs (loop4): orphan cleanup on readonly fs [ 156.524695][T12272] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.3417: Inode bitmap for bg 0 marked uninitialized [ 156.546852][T12272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 156.612146][T12272] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 156.634334][T12288] __nla_validate_parse: 1 callbacks suppressed [ 156.634391][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3424'. [ 156.634406][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3424'. [ 156.659067][T12266] bridge: RTM_NEWNEIGH with invalid ether address [ 156.682878][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.688186][T12266] bridge0: entered promiscuous mode [ 156.688275][T12266] macsec1: entered allmulticast mode [ 156.688291][T12266] bridge0: entered allmulticast mode [ 156.692199][T12266] bridge0: port 3(macsec1) entered blocking state [ 156.692336][T12266] bridge0: port 3(macsec1) entered disabled state [ 156.693529][T12266] bridge0: left allmulticast mode [ 156.693629][T12266] bridge0: left promiscuous mode [ 157.602884][T12302] program syz.1.3428 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.757866][T12328] loop4: detected capacity change from 0 to 128 [ 157.767609][T12328] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.781269][T12328] ext4 filesystem being mounted at /638/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.812500][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.865688][T12345] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 157.970101][T12353] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 157.997610][T12357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3454'. [ 158.548106][T12388] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 158.592215][T12398] loop6: detected capacity change from 0 to 512 [ 158.668645][T12402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3471'. [ 158.691774][T12402] netem: change failed [ 158.807619][T12412] loop4: detected capacity change from 0 to 512 [ 158.834123][T12412] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 158.881017][T12398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.893735][T12398] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.905866][ T29] kauditd_printk_skb: 1077 callbacks suppressed [ 158.905878][ T29] audit: type=1400 audit(1749362265.857:27343): avc: denied { read } for pid=12397 comm="syz.6.3470" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.943167][T12412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.956457][T12412] ext4 filesystem being mounted at /646/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.970663][ T29] audit: type=1400 audit(1749362265.927:27344): avc: denied { ioctl } for pid=12397 comm="syz.6.3470" path="/31/bus/file1" dev="loop6" ino=15 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.983503][T12412] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.3476: corrupted xattr block 19: overlapping e_value [ 159.024368][T11922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.063455][T12412] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 159.072900][T12412] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.3476: corrupted xattr block 19: overlapping e_value [ 159.131208][T12412] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 159.149063][T12412] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.3476: corrupted xattr block 19: overlapping e_value [ 159.163049][ T29] audit: type=1400 audit(1749362266.107:27345): avc: denied { read write } for pid=12411 comm="syz.4.3476" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 159.186018][ T29] audit: type=1326 audit(1749362266.107:27346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.3.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcde93e929 code=0x7ffc0000 [ 159.220722][T12412] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 159.259881][ T29] audit: type=1326 audit(1749362266.117:27347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.3.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcde93e929 code=0x7ffc0000 [ 159.283573][ T29] audit: type=1326 audit(1749362266.117:27348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.3.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcde93e929 code=0x7ffc0000 [ 159.307264][ T29] audit: type=1326 audit(1749362266.117:27349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.3.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcde93e929 code=0x7ffc0000 [ 159.331007][ T29] audit: type=1326 audit(1749362266.117:27350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.3.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efcde93e929 code=0x7ffc0000 [ 159.354697][ T29] audit: type=1326 audit(1749362266.117:27351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.3.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcde93e929 code=0x7ffc0000 [ 159.378419][ T29] audit: type=1326 audit(1749362266.117:27352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.3.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efcde93e929 code=0x7ffc0000 [ 159.412366][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.093036][T12475] loop6: detected capacity change from 0 to 1024 [ 160.122369][T12475] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.135198][T12475] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.158741][T11922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.521239][T12493] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 160.896795][T12519] loop4: detected capacity change from 0 to 512 [ 160.913388][T12519] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 160.944466][T12521] atomic_op ffff88811f430928 conn xmit_atomic 0000000000000000 [ 160.954259][T12519] EXT4-fs (loop4): 1 truncate cleaned up [ 160.974591][T12519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.118290][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.328049][T12537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3520'. [ 161.390479][T12537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3520'. [ 161.443968][T12548] loop4: detected capacity change from 0 to 1764 [ 161.517405][T12560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3532'. [ 161.557025][T12562] hub 9-0:1.0: USB hub found [ 161.566501][T12562] hub 9-0:1.0: 8 ports detected [ 161.800561][T12582] vhci_hcd: invalid port number 96 [ 161.805818][T12582] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 162.011688][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3551'. [ 162.056105][T12609] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3552'. [ 162.386879][T12641] hub 9-0:1.0: USB hub found [ 162.396030][T12641] hub 9-0:1.0: 8 ports detected [ 162.509184][T12650] vlan0: entered allmulticast mode [ 162.514417][T12650] bridge_slave_0: entered allmulticast mode [ 162.583151][T12656] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3574'. [ 162.652807][T12672] loop4: detected capacity change from 0 to 1024 [ 162.662452][T12672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.960612][T12683] loop6: detected capacity change from 0 to 8192 [ 162.999106][T12683] loop6: p2 p3 p4 [ 163.002932][T12683] loop6: p2 size 327551 extends beyond EOD, truncated [ 163.013627][T12683] loop6: p3 size 16776960 extends beyond EOD, truncated [ 163.022099][T12683] loop6: p4 size 3599499392 extends beyond EOD, truncated [ 163.393178][T12675] ================================================================== [ 163.401333][T12675] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 163.410318][T12675] [ 163.412651][T12675] read-write to 0xffff888106fdbb50 of 8 bytes by task 12672 on cpu 0: [ 163.420830][T12675] __filemap_add_folio+0x5b9/0x7d0 [ 163.425984][T12675] filemap_add_folio+0x98/0x1b0 [ 163.430873][T12675] __filemap_get_folio+0x31e/0x650 [ 163.436025][T12675] ext4_write_begin+0x234/0xd30 [ 163.440917][T12675] generic_perform_write+0x184/0x490 [ 163.446225][T12675] ext4_buffered_write_iter+0x1ee/0x3c0 [ 163.451804][T12675] ext4_file_write_iter+0xdbf/0xf00 [ 163.457027][T12675] iter_file_splice_write+0x5ef/0x970 [ 163.462436][T12675] direct_splice_actor+0x153/0x2a0 [ 163.467593][T12675] splice_direct_to_actor+0x30f/0x680 [ 163.473000][T12675] do_splice_direct+0xda/0x150 [ 163.477811][T12675] do_sendfile+0x380/0x650 [ 163.482269][T12675] __x64_sys_sendfile64+0x105/0x150 [ 163.487498][T12675] x64_sys_call+0xb39/0x2fb0 [ 163.492121][T12675] do_syscall_64+0xd2/0x200 [ 163.496660][T12675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.502580][T12675] [ 163.504918][T12675] read to 0xffff888106fdbb50 of 8 bytes by task 12675 on cpu 1: [ 163.512649][T12675] filemap_write_and_wait_range+0x59/0x340 [ 163.518673][T12675] ext4_file_write_iter+0xe04/0xf00 [ 163.523910][T12675] iter_file_splice_write+0x5ef/0x970 [ 163.529335][T12675] direct_splice_actor+0x153/0x2a0 [ 163.534494][T12675] splice_direct_to_actor+0x30f/0x680 [ 163.539915][T12675] do_splice_direct+0xda/0x150 [ 163.544721][T12675] do_sendfile+0x380/0x650 [ 163.549163][T12675] __x64_sys_sendfile64+0x105/0x150 [ 163.554403][T12675] x64_sys_call+0xb39/0x2fb0 [ 163.559065][T12675] do_syscall_64+0xd2/0x200 [ 163.563605][T12675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.569559][T12675] [ 163.571893][T12675] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 163.579014][T12675] [ 163.581370][T12675] Reported by Kernel Concurrency Sanitizer on: [ 163.587542][T12675] CPU: 1 UID: 0 PID: 12675 Comm: syz.4.3579 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 163.599728][T12675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.609893][T12675] ================================================================== [ 163.756266][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.