last executing test programs: 53.270220754s ago: executing program 3 (id=307): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000e40)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_128={{0x304}, "3d0d5ab62d2b85f1", "081395f002ffaa6f4edfdf9a020300", "b682b25f", "d196d106da305619"}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 53.216129849s ago: executing program 3 (id=309): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x14010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ff, &(0x7f0000000d80)="$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") connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 52.096882779s ago: executing program 3 (id=317): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r0, &(0x7f0000000080)='3', 0x1, 0x0) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @local}}, 0x1e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r1, 0x20, 0x0, 0x8000) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x161842, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 51.038513415s ago: executing program 3 (id=334): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$eJzs3U9oHNUfAPDvzDb59U9+JhURWxQDHipIt9lYrHpqezGHggU9iHhoaDY1ZNOEJAUTemjBi1BB1KuHXgTP3iV3byKoN48iVJGIJyEyu7NJTHaTELJOmvl8YHbfn03e++7wMu/t7CMBlNZw9pBGnImIG0nE4Ka6Y5FXDrdet/rH3ZvZkcTa2lu/J5HkZe3XJ/nzqTxzPCK+uxrxZGV7uwtLy9PjjUZ9Ps9fWJyZu7CwtHx+amb8Vv1W/XZt9NWLl0Zeq12sHVisD7767Jexa28++/GH778y+X3jfBKXYyCv2xzHQRmO4fX3ZLPsfb100I0VpJLH0ylODr/2+euLiKdjMCr5qM8MxtSDQjsH9NRaJWINKKnE+IeSas8D2mv7XqyDD7NHV1oLoO3xH2t9NhLHm2ujk6vJppVRa707dADtZ238fffsF9kRPfocYif37kfEM53iT5p9G2p+ipPFn/4r/jQiRvL+Z+Wj+2x/eEv+cYr/cv6clV/dZ/tFxw9AOa1caV3It1//0vX5T3SY/wx0uHbtR9HXv+7zv434K13mf9f32MbPH4192q1u8/wvO7L223PB/8Kj+xFnO8afrMefdIg/m/fc2GMbb/zw21i3uqLjX3sYca7j+mfjjlay8/3JC5NTjfpI67FjG998+96X3dovOv7s/J/sEv9O5z8rm9tjG19ffzjTrW73+NNf+5O3m6n+vOSD8cXF+VpEf3Jte/kuC5H2a9q/I4v/xRd2Hv+d4j+RrR32GP/cO9Or+4+/t7L4J/Z5/j/ZYxt/vXvnuW51RccPAAAAAAAAR0na/C5HklbX02larbb28D4VJ9PG7MLiS5Ozd25PtL7zMRR9aftO92Arn2T5Wv592HZ+dEv+5Yg4HRGfV04089Wbs42JooMHAAAAAAAAAAAAAAAAAACAQ+LUlv3/f1Za+/+BkjhWdAeAwhj/UF7GP5SX8Q/lZfxDeRn/UF7GP5SX8Q/lZfxDeRn/UF7GPwAAAAAcSaefX/kpiYh7r59oHpn+vK6v0J4BvZYW3QGgMJWiOwAUxq1/KC9rfCDZpf54t4qV3X4SAAAAAAAAAAAAADgo587Y/w9lZf8/lJf9/1Be9v9DeVnjA/b/AwAAAAAAAAAAAMDhN9A8krSa7wUeiDStViP+HxFD0ZdMTjXqIxHxRET8WOn7X5avFd1pAAAAAAAAAAAAAAAAAAAAOGIWlpanxxuN+ryEhITEeqLov0wAAAAAAAAAAAAAAAAAAFA+G5t+i+4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRn4///9y5RdIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOPpnwAAAP//bKsggw==") mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r3, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) open_tree(r2, &(0x7f0000000200)='./file2\x00', 0x1000) 50.85302985s ago: executing program 3 (id=339): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x3000)=nil) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x3c}}, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000d00)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, 0x2, 0x200) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) 50.790569315s ago: executing program 3 (id=340): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 50.790391435s ago: executing program 32 (id=340): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 22.067109006s ago: executing program 0 (id=735): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x100, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000066000000000000000000000000c3df3e91", @ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ustat(0x3, &(0x7f0000000000)) 21.985499193s ago: executing program 0 (id=736): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}}], 0x1, 0x0) 21.03689121s ago: executing program 0 (id=744): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r0, &(0x7f0000000ec0)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x6, 0xa401) ioctl$USBDEVFS_CONTROL(r1, 0x8008551c, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000e80)=ANY=[@ANYRES32=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = syz_open_pts(r0, 0x8182) r4 = dup3(r3, r0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) 20.916756179s ago: executing program 0 (id=745): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1222, &(0x7f0000002340)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, 0x0) tgkill(r0, r1, 0x27) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8000, '\x00', 0x0, 0x0}, 0x48) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = open(&(0x7f00000002c0)='./file1\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) 20.653195711s ago: executing program 0 (id=748): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f00000005c0)}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r0, 0x0, &(0x7f0000000380)=""/221}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000080)='./file0\x00', 0x3ec) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, &(0x7f0000000080)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x2, 0x80, 0x8, 0x3, 0x7, 0x53, 0x0, 0x5040, 0x104, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x580, 0xb}, 0x4003, 0x6, 0x9, 0x0, 0xe5, 0x8, 0x9, 0x0, 0xffff, 0x0, 0x82b}, r2, 0xb, r0, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={0x0, r3}, 0x18) 20.206359986s ago: executing program 0 (id=761): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000003c0)={{r0}, 0x4, &(0x7f0000000500)=[0x3, 0xa9, 0x3, 0xdd50], 0x5, 0x0, 0x1}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r1, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0xee00, 0xee00}}, './file2\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nogrpid}, {@jqfmt_vfsv0}, {@nouid32}, {@usrjquota}, {@nomblk_io_submit}, {@quota}], [{@dont_appraise}, {@measure}]}, 0x1, 0x44b, &(0x7f0000000700)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/netstat\x00') preadv(r4, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) 20.206018307s ago: executing program 33 (id=761): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000003c0)={{r0}, 0x4, &(0x7f0000000500)=[0x3, 0xa9, 0x3, 0xdd50], 0x5, 0x0, 0x1}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r1, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0xee00, 0xee00}}, './file2\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nogrpid}, {@jqfmt_vfsv0}, {@nouid32}, {@usrjquota}, {@nomblk_io_submit}, {@quota}], [{@dont_appraise}, {@measure}]}, 0x1, 0x44b, &(0x7f0000000700)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/netstat\x00') preadv(r4, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) 2.092778121s ago: executing program 4 (id=1127): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0xfffffffffffffbff}, 0x18) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x131}}, {@mblk_io_submit}, {@quota}]}, 0x3, 0x437, &(0x7f0000000d80)="$eJzs281vG0UbAPBn7aR9+/UmVOWjaYFAQUR8JE1aSg9cikDiABISHMoxJGkV6jaoCRKtIggIlSOqxB1xROIv4AQXBJyQuMIdVapQLi2cjNbeTRzHdhPHiQP+/aRtZ3bHmnm8M/bMThxAzxpO/0kiDkbEbxExUM2uLTBc/e/u8uLUX8uLU0mUy2/+mVTK3VlenMqL5q87kGf6IgqfJnGsQb3z165fmiyVZq5m+bGFy++NzV+7/tzs5cmLMxdnrkycPXv61PgLZyae70icaVx3hj6cO3701bdvvj51/uY7P32T5PHXxdGmvrr8cKvCT5bLW6xudzlUk07q3wl2rWLWcfsr438gijXdeCBe+aSrjQO2VblcLj/Q/PJSGfgPS6LbLQC6I/+iT9e/+bFDU49d4fa56gIojftudlSv9EUhK9Nft77tpOGIOL/095fpEZ15DgEA0NJ36fzn2Ubzv0LUPhf6f7aHMhgR90XE4Yg4ExFHIuL+iErZByPioU3WX79Jsn7+U7jVVmAblM7/Xsz2ttbO//LZXwwWs9yhSvz9yYXZ0szJ7D0Zif69aX68RR3fv/zr582u1c7/0iOtP58LZu241bd37WumJxcmtxJzrdsfRwz1NYo/WdkJSCLiaEQMtVnH7NNfH2927d7xt9CBfabyVxFPVe//UtTFn0ta70+O/S9KMyfH8l6x3s+/3HijWf1bir8D0vu/v2H/X4l/MKndr53ffB03fv+s6Zqm3f6/J3lrzbkPJhcWro5H7Eleqza69vxEXbmJ1fJp/CMnGo//w7H6ThyLiLQTPxwRj0TEo1nbH4uIxyPiRIv4f3zpiXfbj397pfFPb+r+ryb2RP2ZxonipR++XVPp4GbiT+//6UpqJDuzkc+/jbSrvd4MAAAA/z6FiDgYSWF0JV0ojI5W/4b/SOwvlObmF565MPf+lenqbwQGo7+QP+kaqHkeOp4t6/P8RF3+VPbc+Ivivkp+dGquNN3t4KHHHWgy/lN/FLvdOmDb+b0W9C7jH3qX8Q+9y/iH3tVg/O/rRjuAndfo+/+jLrQD2Hl149+2H/QQ63/oXQ3G/7lutAPYeb7/oSfN74t7/0heQmJdIgq7ohkS25To9icTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wTAAD//+e45xo=") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) 2.030330836s ago: executing program 4 (id=1128): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) 1.997212348s ago: executing program 4 (id=1132): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x24000420) r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x800, 0x1000, 0xffffffff, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x8daf, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x400, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pause() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r4 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r4, 0x16) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 1.205562813s ago: executing program 1 (id=1148): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r0, r2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[], 0xffdd) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000001, 0x12, r2, 0x4ebef000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) 1.195298964s ago: executing program 1 (id=1149): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffafffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) 1.150297327s ago: executing program 4 (id=1150): bpf$MAP_CREATE(0x0, 0x0, 0x48) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_wakeup_irq', 0x0, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000140)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1e, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90bf8b1c5512406c7f0000000000000000000000000000000000000000000009", [0x2, 0x40000000000000]}}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') 1.104024021s ago: executing program 4 (id=1151): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) close(0x4) 1.102739601s ago: executing program 6 (id=1154): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0xa40, 0x2e8, 0x2e8, 0xa40, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x80}, 0x2004810) socket$inet6(0xa, 0x80002, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x0) 1.050405075s ago: executing program 2 (id=1155): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000280)=0x1, 0x4) socket$l2tp(0x2, 0x2, 0x73) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r3, 0x3, 0x0, &(0x7f0000000180), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) acct(&(0x7f00000001c0)='./file0\x00') 1.049627545s ago: executing program 6 (id=1156): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) socket$netlink(0x10, 0x3, 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) 1.016041018s ago: executing program 2 (id=1157): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) r6 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 1.002312389s ago: executing program 2 (id=1158): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6558}, [@IFLA_GROUP={0x8, 0x1b, 0xc2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) r1 = socket$kcm(0x29, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)='/', 0x1}], 0x1}}], 0x2, 0x0) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 952.770763ms ago: executing program 2 (id=1159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8004902}, 0xc, &(0x7f0000000240)={0x0}}, 0x4000892) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) 952.439173ms ago: executing program 2 (id=1160): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) open(0x0, 0x60840, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x2}, 0x18) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 885.329858ms ago: executing program 2 (id=1161): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lstat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) unshare(0x60000480) 332.249813ms ago: executing program 1 (id=1163): creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x0, 0x0) 331.623883ms ago: executing program 1 (id=1164): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x400, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "b98850263a4fba3d", "d16086999f73cd61b1284027061cd857efacf6473b50bcfde5a162053376a1d0", "d0420ddb", "77cac73ecbda5d0f"}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0x8040480) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 232.372461ms ago: executing program 4 (id=1165): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x8, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) close(r1) r2 = semget$private(0x0, 0x6, 0x40d) semtimedop(r2, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r2, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r2, &(0x7f0000001240)=[{}], 0x1) semctl$GETZCNT(r2, 0x1, 0xf, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'gretap0\x00'}) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val, @void, @eth={@empty, @random="0300", @val, {@mpls_mc={0x8848, {[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x5, 0x24, 0x67, 0x0, 0x5, 0x21, 0x0, @multicast1, @multicast1}, {{0x4e24, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x7, 0x2, "82ef2b", 0x3, "b7e9a3"}}}}}}}}, 0x3e) 231.888261ms ago: executing program 6 (id=1166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 231.231151ms ago: executing program 5 (id=1167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 189.709605ms ago: executing program 5 (id=1168): socket(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 161.392487ms ago: executing program 5 (id=1169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$nl_route(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 131.892689ms ago: executing program 6 (id=1170): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x80010000}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) unshare(0x28000600) flock(r4, 0xc) r5 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r5, r1}) 131.35294ms ago: executing program 1 (id=1171): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x8000) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0)=[{0x0, 0x4f}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x2f, 0x0, 0x7, {0x0, @dev, @loopback}}}], 0x30}, 0x0) 105.546801ms ago: executing program 6 (id=1173): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0xd}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0xfda}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{}, 0x0, &(0x7f00000001c0)=r1}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 105.240821ms ago: executing program 5 (id=1174): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x10, 0x0, 0x0, 0x7, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$usbfs(&(0x7f00000002c0), 0x20008, 0x125041) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0xc02, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x0, &(0x7f0000000300)}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) 82.409144ms ago: executing program 5 (id=1175): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$eJzs3M1vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugB9VTbQgiFGloTIUSqMXgxMSR6Vo8m/gXevBj1ZGLiSe+GhCgX0FPNzM5Ad9ltt3TZrd3PJxl4nn2e7TzfPvPMPDPPbgPoWUPZP0nEtoj4LSIGqtnaCkPV/65dOTf595Vzk0ksLr72Z5LXu3rl3GRZtXzf1iIznEakHyXFTmrNnTl7YmJmZvp0kR+dP/nO6NyZs08ePzlxbPrY9KnxQ4cOHhh75unxp9oSZxbX1T3vz+7d/dIbF1+ePHLx7R+/ydq7rShfGsct2XTzS0NZ4H8t5urLHon/r2l36832Jemkr4sNYVUqEZF1V38+/geiEjc6byBe/LCrjQNuq+zatLl58cIisIEl0e0WAN1RXuiz+99y69DUY124/Fz1BiiL+1qxVUv6Ii3q9Nfd37bTUEQcWfjni2yLdjyHAABYwSeTnx+OJxrN/9K4e0m9HcUaymBE3BEROyPizojYFRF3ReR174mIe1e5//qloZvnP+mlWwqsRdn879libat2/lfO/mKwUuS25/H3J0ePz0zvL34nw9G/OcuPLbOP71745dNmZUvnf9mW7b+cCxbtuNRX94BuamJ+Ip+UtsHlDyL29DWKP7m+EpBExO6I2LO6H72jTBx/7Ou9zSqtHP8y2rDOtPhVxKPV/l+IuvhLyfLrk6P/i5np/aPlUXGzn36+8Gqz/a8p/jbI+n9L7fFflHx5pkgMvrV0vXYuVr1yeeH3j5ve09zq8b8peT0/H5XLru9NzM+fHovYlBzO8zWvj994b5kv62fxD+9rPP53Fu/J+v++iMgO4vsj4oGIeLBo+0MR8XBE7Fsm/h+eb162Hvp/quH57/rxP5jU9P/qE5UT33/bbP+t9f/BPDVcvJKf/1bQagPX8rsDAACA/4o0/wx8ko5cT6fpyEj1M/y7Yks6Mzs3//jR2XdPTVU/Kz8Y/Wn5pGtgyfPQsWSh+InV/HjxrLgsP1A8N/6sEnl+ZHJ2ZqrLsUOv29pk/Gf+qHS7dcBt12gdbbzBF9qAjad+/Ke12fOvdLIxQEf5vjb0rhXGf9qpdgCd5/oPvavR+D9fl7cWABuT6z/0LuMfepfxD72rbvxX4tdutQTooLV8r1+ilxORrotmtJRo/e9B3O7Em+ujGS0kun1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//9sbvBf") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141142, 0x0) pwrite64(r4, &(0x7f0000000300)="0e48dc", 0x3, 0x10000) r5 = creat(&(0x7f00000000c0)='./file1\x00', 0x1) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)={0x2005af9, 0xfffffff8, 0x100802, 0x2, 0x408}) r6 = dup(r1) write$UHID_INPUT(r6, &(0x7f0000000080)={0xc, {"a2e3ad21ed0d52f91b5d370987f70e06d038e7ff7fc6e5539b3247298b089b0708356d090890e0878f0e1ac6e7049b3350959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d074b0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c300003e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76e0e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9e1ed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acabdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff17705037eefcff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b4b3f0432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eef05ebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 66.674044ms ago: executing program 6 (id=1176): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x8, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xd, 0x0, 0x0, 0x8, "00629a7d82090100000000000000f7fffffb00"}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x402c542c, &(0x7f0000000000)=0xff) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1) 819.45µs ago: executing program 1 (id=1177): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 0s ago: executing program 5 (id=1178): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000180)={[{@nolazytime}, {@abort}, {@lazytime}, {@mblk_io_submit}, {@noauto_da_alloc}]}, 0xde, 0x53b, &(0x7f0000000e00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): es in process `syz.0.259'. [ 56.885441][ T5241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.893011][ T5241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.903150][ T5241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.910653][ T5241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.967984][ T5231] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.073697][ T5268] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.091060][ T5231] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.159997][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.180681][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.204227][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.217786][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.229633][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.293382][ T5295] lo speed is unknown, defaulting to 1000 [ 57.410223][ T5294] loop3: detected capacity change from 0 to 1024 [ 57.672370][ T5294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.916330][ T5332] syz.1.265 uses obsolete (PF_INET,SOCK_PACKET) [ 57.979810][ T5294] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.211415][ T5332] netlink: 'syz.1.265': attribute type 1 has an invalid length. [ 58.219079][ T5332] netlink: 224 bytes leftover after parsing attributes in process `syz.1.265'. [ 58.244317][ T5340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 58.253349][ T5340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.266'. [ 58.302218][ T5340] wireguard0: entered promiscuous mode [ 58.324986][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.825666][ T5353] loop4: detected capacity change from 0 to 1024 [ 58.833222][ T5353] EXT4-fs: Ignoring removed orlov option [ 58.877846][ T5353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.933886][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.964962][ T5359] loop3: detected capacity change from 0 to 164 [ 59.064598][ T5369] syz.0.277 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 59.291408][ T5373] tipc: Started in network mode [ 59.296370][ T5373] tipc: Node identity 825a7e1860b5, cluster identity 4711 [ 59.302267][ T5362] net_ratelimit: 2 callbacks suppressed [ 59.302321][ T5362] Set syz1 is full, maxelem 65536 reached [ 59.303594][ T5373] tipc: Enabled bearer , priority 0 [ 59.397352][ T5372] tipc: Resetting bearer [ 59.419451][ T5372] tipc: Disabling bearer [ 59.427044][ T5381] netlink: 'syz.4.283': attribute type 4 has an invalid length. [ 59.956188][ T5403] syzkaller0: entered promiscuous mode [ 59.961793][ T5403] syzkaller0: entered allmulticast mode [ 59.995770][ T5408] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.053686][ T5408] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.134454][ T5408] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.230557][ T5408] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.244865][ T5426] netlink: 'syz.3.292': attribute type 2 has an invalid length. [ 60.252578][ T5426] netlink: 'syz.3.292': attribute type 1 has an invalid length. [ 60.260339][ T5426] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.292'. [ 60.294068][ T5434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.294'. [ 60.303158][ T5434] netlink: 152 bytes leftover after parsing attributes in process `syz.4.294'. [ 60.342619][ T5413] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.373210][ T5320] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.394122][ T5320] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.432546][ T5459] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.539278][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 60.539302][ T29] audit: type=1400 audit(1754772597.638:1201): avc: denied { relabelfrom } for pid=5462 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 60.565259][ T29] audit: type=1400 audit(1754772597.638:1202): avc: denied { relabelto } for pid=5462 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 60.651956][ T5466] syzkaller0: create flow: hash 366377918 index 1 [ 60.676457][ T5318] syzkaller0: tun_net_xmit 76 [ 60.681383][ T5318] syzkaller0: tun_net_xmit 48 [ 60.702360][ T5466] syzkaller0: delete flow: hash 366377918 index 1 [ 60.987081][ T5473] GUP no longer grows the stack in syz.1.298 (5473): 200000004000-200000008000 (200000002000) [ 60.997493][ T5473] CPU: 0 UID: 0 PID: 5473 Comm: syz.1.298 Tainted: G W 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) [ 60.997524][ T5473] Tainted: [W]=WARN [ 60.997604][ T5473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 60.997616][ T5473] Call Trace: [ 60.997621][ T5473] [ 60.997627][ T5473] __dump_stack+0x1d/0x30 [ 60.997654][ T5473] dump_stack_lvl+0xe8/0x140 [ 60.997678][ T5473] dump_stack+0x15/0x1b [ 60.997698][ T5473] __get_user_pages+0x198d/0x1fa0 [ 60.997737][ T5473] ? __rcu_read_unlock+0x4f/0x70 [ 60.997767][ T5473] get_user_pages_remote+0x1d5/0x6d0 [ 60.997851][ T5473] __access_remote_vm+0x15c/0x590 [ 60.997878][ T5473] access_remote_vm+0x32/0x40 [ 60.997982][ T5473] proc_pid_cmdline_read+0x32b/0x6c0 [ 60.998016][ T5473] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 60.998047][ T5473] vfs_readv+0x3fb/0x690 [ 60.998090][ T5473] __x64_sys_preadv+0xfd/0x1c0 [ 60.998203][ T5473] x64_sys_call+0x282a/0x2ff0 [ 60.998227][ T5473] do_syscall_64+0xd2/0x200 [ 60.998267][ T5473] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.998295][ T5473] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.998336][ T5473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.998362][ T5473] RIP: 0033:0x7f9c59c5ebe9 [ 60.998380][ T5473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.998459][ T5473] RSP: 002b:00007f9c586c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 60.998479][ T5473] RAX: ffffffffffffffda RBX: 00007f9c59e85fa0 RCX: 00007f9c59c5ebe9 [ 60.998520][ T5473] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000006 [ 60.998534][ T5473] RBP: 00007f9c59ce1e19 R08: 0000000000000200 R09: 0000000000000000 [ 60.998548][ T5473] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 60.998563][ T5473] R13: 00007f9c59e86038 R14: 00007f9c59e85fa0 R15: 00007ffc7e3d65c8 [ 60.998585][ T5473] [ 61.228930][ T5475] loop4: detected capacity change from 0 to 512 [ 61.245946][ T5475] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 61.262051][ T5475] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 61.461295][ T5475] EXT4-fs (loop4): mount failed [ 61.489054][ T5483] netlink: '+}[@': attribute type 10 has an invalid length. [ 61.501940][ T5483] team0: Port device dummy0 added [ 61.554705][ T5483] netlink: '+}[@': attribute type 10 has an invalid length. [ 61.562527][ T29] audit: type=1326 audit(1754772598.598:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886755ebe9 code=0x7ffc0000 [ 61.581752][ T5483] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 61.586016][ T29] audit: type=1326 audit(1754772598.598:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f886755ebe9 code=0x7ffc0000 [ 61.617857][ T29] audit: type=1326 audit(1754772598.598:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886755ebe9 code=0x7ffc0000 [ 61.641353][ T29] audit: type=1326 audit(1754772598.658:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f886755ebe9 code=0x7ffc0000 [ 61.664743][ T29] audit: type=1326 audit(1754772598.658:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886755ebe9 code=0x7ffc0000 [ 61.688078][ T29] audit: type=1326 audit(1754772598.658:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f886755ebe9 code=0x7ffc0000 [ 61.688932][ T5495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 61.711342][ T29] audit: type=1326 audit(1754772598.658:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886755ebe9 code=0x7ffc0000 [ 61.743758][ T5483] team0: Failed to send options change via netlink (err -105) [ 61.751381][ T5483] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 61.761418][ T5483] team0: Port device dummy0 removed [ 61.769284][ T5483] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 61.779104][ T5487] tipc: Started in network mode [ 61.784104][ T5487] tipc: Node identity dabcdda8458b, cluster identity 4711 [ 61.791388][ T5487] tipc: Enabled bearer , priority 0 [ 61.805261][ T5495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.813139][ T5495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.821839][ T5495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.829286][ T5495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.844718][ T5497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'. [ 61.853758][ T5497] netlink: 152 bytes leftover after parsing attributes in process `syz.0.306'. [ 61.865120][ T5486] tipc: Resetting bearer [ 61.889882][ T5486] tipc: Disabling bearer [ 61.908757][ T5505] loop3: detected capacity change from 0 to 8192 [ 61.939348][ T5502] syzkaller0: create flow: hash 366377918 index 1 [ 61.960150][ T5502] syzkaller0: delete flow: hash 366377918 index 1 [ 62.123354][ T5519] loop1: detected capacity change from 0 to 512 [ 62.151436][ T5519] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 62.167105][ T5519] EXT4-fs (loop1): mount failed [ 62.234209][ T5517] netlink: 'syz.2.313': attribute type 2 has an invalid length. [ 62.241989][ T5517] netlink: 'syz.2.313': attribute type 1 has an invalid length. [ 62.249831][ T5517] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.313'. [ 62.276433][ T5512] loop0: detected capacity change from 0 to 2048 [ 62.306728][ T5512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.992236][ T5530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'. [ 62.994722][ T5531] loop3: detected capacity change from 0 to 1024 [ 63.017925][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.033346][ T5531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.118436][ T5537] netlink: '+}[@': attribute type 10 has an invalid length. [ 63.158173][ T5531] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 63.209516][ T5537] team0: Port device dummy0 added [ 63.212390][ T5540] netlink: 'syz.1.318': attribute type 10 has an invalid length. [ 63.308573][ T5544] loop4: detected capacity change from 0 to 128 [ 63.318320][ T5540] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 63.376408][ T5540] team0: Failed to send options change via netlink (err -105) [ 63.386583][ T5546] bio_check_eod: 9372 callbacks suppressed [ 63.386596][ T5546] syz.4.320: attempt to access beyond end of device [ 63.386596][ T5546] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 63.423232][ T5540] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 63.454190][ T5540] team0: Port device dummy0 removed [ 63.479236][ T5540] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 63.494563][ T5553] loop0: detected capacity change from 0 to 2048 [ 63.502388][ T5546] syz.4.320: attempt to access beyond end of device [ 63.502388][ T5546] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 63.502426][ T5546] syz.4.320: attempt to access beyond end of device [ 63.502426][ T5546] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 63.502540][ T5546] syz.4.320: attempt to access beyond end of device [ 63.502540][ T5546] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 63.502586][ T5546] syz.4.320: attempt to access beyond end of device [ 63.502586][ T5546] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 63.502724][ T5546] syz.4.320: attempt to access beyond end of device [ 63.502724][ T5546] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 63.502759][ T5546] syz.4.320: attempt to access beyond end of device [ 63.502759][ T5546] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 63.502833][ T5546] syz.4.320: attempt to access beyond end of device [ 63.502833][ T5546] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 63.502958][ T5546] syz.4.320: attempt to access beyond end of device [ 63.502958][ T5546] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 63.503183][ T5546] syz.4.320: attempt to access beyond end of device [ 63.503183][ T5546] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 63.545918][ T5553] Alternate GPT is invalid, using primary GPT. [ 63.653997][ T5553] loop0: p2 p3 p7 [ 63.739458][ T5328] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 63.751994][ T5328] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.751994][ T5328] [ 63.761674][ T5328] EXT4-fs (loop3): Total free blocks count 0 [ 63.767650][ T5328] EXT4-fs (loop3): Free/Dirty block details [ 63.773588][ T5328] EXT4-fs (loop3): free_blocks=20480 [ 63.778859][ T5328] EXT4-fs (loop3): dirty_blocks=10928 [ 63.784247][ T5328] EXT4-fs (loop3): Block reservation details [ 63.790331][ T5328] EXT4-fs (loop3): i_reserved_data_blocks=683 [ 63.947182][ T5569] netlink: 36 bytes leftover after parsing attributes in process `syz.2.331'. [ 63.957055][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 63.957111][ T5569] netlink: 36 bytes leftover after parsing attributes in process `syz.2.331'. [ 63.979252][ T5570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'. [ 63.989544][ T5569] netlink: 36 bytes leftover after parsing attributes in process `syz.2.331'. [ 64.024301][ T5569] netlink: 36 bytes leftover after parsing attributes in process `syz.2.331'. [ 64.033510][ T5569] netlink: 36 bytes leftover after parsing attributes in process `syz.2.331'. [ 64.045500][ T5569] netlink: 36 bytes leftover after parsing attributes in process `syz.2.331'. [ 64.073257][ T5580] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1 [ 64.082053][ T5580] ref_ctr increment failed for inode: 0x144 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104697300 [ 64.088371][ T5569] netlink: 36 bytes leftover after parsing attributes in process `syz.2.331'. [ 64.166879][ T5587] loop3: detected capacity change from 0 to 1024 [ 64.175534][ T5587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.200850][ T5587] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 64.249255][ T5004] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.302517][ T5004] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.353087][ T5004] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.408184][ T5610] netlink: 'syz.1.342': attribute type 4 has an invalid length. [ 64.417689][ T5004] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.434544][ T5597] lo speed is unknown, defaulting to 1000 [ 64.437895][ T5612] loop1: detected capacity change from 0 to 1024 [ 64.447384][ T5612] EXT4-fs: Ignoring removed orlov option [ 64.455268][ T5612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.500308][ T5004] bridge_slave_1: left allmulticast mode [ 64.505999][ T5004] bridge_slave_1: left promiscuous mode [ 64.511680][ T5004] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.519658][ T5004] bridge_slave_0: left allmulticast mode [ 64.525421][ T5004] bridge_slave_0: left promiscuous mode [ 64.531076][ T5004] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.652187][ T5004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.662751][ T5004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.672760][ T5004] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 64.682229][ T5004] bond0 (unregistering): Released all slaves [ 64.692808][ T5597] chnl_net:caif_netlink_parms(): no params data found [ 64.717877][ T5004] tipc: Disabling bearer [ 64.722888][ T5004] tipc: Left network mode [ 64.750439][ T5004] hsr_slave_0: left promiscuous mode [ 64.756837][ T5004] hsr_slave_1: left promiscuous mode [ 64.763171][ T5004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.770624][ T5004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.779198][ T5004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.786605][ T5004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.799174][ T5004] veth1_vlan: left promiscuous mode [ 64.804632][ T5004] veth0_vlan: left promiscuous mode [ 64.858297][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.867703][ T5004] team0 (unregistering): Port device team_slave_1 removed [ 64.881726][ T5004] team0 (unregistering): Port device team_slave_0 removed [ 64.899350][ T5622] loop4: detected capacity change from 0 to 1024 [ 64.922065][ T5622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.947717][ T5622] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 64.969135][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.976329][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.996335][ T5597] bridge_slave_0: entered allmulticast mode [ 65.003362][ T5597] bridge_slave_0: entered promiscuous mode [ 65.010045][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.017167][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.024593][ T5597] bridge_slave_1: entered allmulticast mode [ 65.031384][ T5597] bridge_slave_1: entered promiscuous mode [ 65.064008][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.091547][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.131377][ T5597] team0: Port device team_slave_0 added [ 65.138134][ T5597] team0: Port device team_slave_1 added [ 65.187659][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.194721][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.220701][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.277254][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.284282][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.310272][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.441293][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 65.453797][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 65.453797][ T12] [ 65.463544][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 65.469538][ T12] EXT4-fs (loop4): Free/Dirty block details [ 65.475517][ T12] EXT4-fs (loop4): free_blocks=20480 [ 65.480939][ T12] EXT4-fs (loop4): dirty_blocks=11232 [ 65.486334][ T12] EXT4-fs (loop4): Block reservation details [ 65.492374][ T12] EXT4-fs (loop4): i_reserved_data_blocks=702 [ 65.541562][ T5597] hsr_slave_0: entered promiscuous mode [ 65.547604][ T5597] hsr_slave_1: entered promiscuous mode [ 65.555118][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 65.602169][ T29] kauditd_printk_skb: 1879 callbacks suppressed [ 65.602237][ T29] audit: type=1400 audit(1754772602.708:3088): avc: denied { module_request } for pid=5597 comm="syz-executor" kmod="rtnl-link-virt_wifi" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 65.789158][ T29] audit: type=1400 audit(1754772602.888:3089): avc: denied { create } for pid=5647 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 65.837970][ T5597] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 65.853227][ T29] audit: type=1400 audit(1754772602.938:3090): avc: denied { create } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.873969][ T29] audit: type=1400 audit(1754772602.938:3091): avc: denied { write } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.894854][ T29] audit: type=1400 audit(1754772602.938:3092): avc: denied { read } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.927668][ T5597] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 65.940944][ T29] audit: type=1400 audit(1754772603.038:3093): avc: denied { watch watch_reads } for pid=5651 comm="syz.2.354" path="/80/file0" dev="tmpfs" ino=439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.964259][ T29] audit: type=1400 audit(1754772603.038:3094): avc: denied { execute } for pid=5651 comm="syz.2.354" name="file0" dev="tmpfs" ino=439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.986435][ T29] audit: type=1400 audit(1754772603.038:3095): avc: denied { execute_no_trans } for pid=5651 comm="syz.2.354" path="/80/file0" dev="tmpfs" ino=439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.030288][ T5597] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.042451][ T5645] Set syz1 is full, maxelem 65536 reached [ 66.059486][ T5597] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.066328][ T29] audit: type=1400 audit(1754772603.148:3096): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.103674][ T29] audit: type=1400 audit(1754772603.208:3097): avc: denied { execmem } for pid=5660 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 66.226429][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.239002][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.249891][ T5459] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.256959][ T5459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.265874][ T5459] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.272969][ T5459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.294719][ T5666] netlink: '+}[@': attribute type 10 has an invalid length. [ 66.328580][ T5666] team0: Port device dummy0 added [ 66.345998][ T5666] netlink: '+}[@': attribute type 10 has an invalid length. [ 66.364495][ T5666] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 66.382238][ T5666] team0: Failed to send options change via netlink (err -105) [ 66.392527][ T5666] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 66.407713][ T5666] team0: Port device dummy0 removed [ 66.415656][ T5666] : (slave dummy0): Enslaving as an active interface with an up link [ 66.466640][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.706152][ T5597] veth0_vlan: entered promiscuous mode [ 66.729672][ T5597] veth1_vlan: entered promiscuous mode [ 66.742750][ T5698] random: crng reseeded on system resumption [ 66.760581][ T5597] veth0_macvtap: entered promiscuous mode [ 66.767829][ T5597] veth1_macvtap: entered promiscuous mode [ 66.783272][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.793605][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.829913][ T5700] syzkaller0: entered promiscuous mode [ 66.835502][ T5700] syzkaller0: entered allmulticast mode [ 66.865464][ T5328] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.882869][ T5328] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.905844][ T5328] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.939663][ T5328] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.985849][ T5706] loop1: detected capacity change from 0 to 512 [ 67.041409][ T5711] loop5: detected capacity change from 0 to 512 [ 67.059590][ T5709] loop0: detected capacity change from 0 to 128 [ 67.070887][ T5711] EXT4-fs (loop5): orphan cleanup on readonly fs [ 67.077741][ T5711] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.341: Failed to acquire dquot type 1 [ 67.092222][ T5706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.126157][ T5711] EXT4-fs (loop5): 1 truncate cleaned up [ 67.140888][ T5711] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.164932][ T5706] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.209090][ T5711] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 67.233585][ T5720] loop4: detected capacity change from 0 to 2048 [ 67.235182][ T5711] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 8 [ 67.267984][ T5722] __nla_validate_parse: 5 callbacks suppressed [ 67.268001][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'. [ 67.339788][ T5597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.472781][ T5720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 67.634142][ T5732] loop2: detected capacity change from 0 to 512 [ 67.665373][ T5732] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.699322][ T5732] EXT4-fs (loop2): mount failed [ 67.706977][ T5733] syzkaller0: create flow: hash 366377918 index 1 [ 67.716795][ T5733] syzkaller0: delete flow: hash 366377918 index 1 [ 67.849690][ T5742] syzkaller0: entered promiscuous mode [ 67.855391][ T5742] syzkaller0: entered allmulticast mode [ 67.978453][ T5765] random: crng reseeded on system resumption [ 68.134406][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 68.235823][ T5807] random: crng reseeded on system resumption [ 68.454993][ T5832] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.498734][ T5837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.507573][ T5837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.960655][ T5526] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 69.102955][ T5876] wg2: entered promiscuous mode [ 69.107884][ T5876] wg2: entered allmulticast mode [ 69.121842][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.170825][ T5880] random: crng reseeded on system resumption [ 69.187153][ T5878] lo speed is unknown, defaulting to 1000 [ 69.325938][ T5887] random: crng reseeded on system resumption [ 69.492235][ T5899] loop1: detected capacity change from 0 to 512 [ 69.501984][ T5899] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.517336][ T5899] EXT4-fs (loop1): mount failed [ 69.600650][ T5909] loop1: detected capacity change from 0 to 512 [ 69.608693][ T5909] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.615429][ T5909] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.402: Failed to acquire dquot type 1 [ 69.627889][ T5909] EXT4-fs (loop1): 1 truncate cleaned up [ 69.634007][ T5909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.781213][ T5909] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 69.819156][ T5909] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 8 [ 69.847072][ T5913] loop5: detected capacity change from 0 to 512 [ 69.924879][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.991379][ T5915] lo speed is unknown, defaulting to 1000 [ 70.039561][ T5913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.053308][ T5913] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.089104][ T5917] wg2: entered promiscuous mode [ 70.094109][ T5917] wg2: entered allmulticast mode [ 70.383663][ T5929] syzkaller0: entered promiscuous mode [ 70.389185][ T5929] syzkaller0: entered allmulticast mode [ 70.792584][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 70.792598][ T29] audit: type=1400 audit(1754772607.898:3317): avc: denied { write } for pid=5937 comm="syz.4.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.828216][ T29] audit: type=1400 audit(1754772607.928:3318): avc: denied { nlmsg_write } for pid=5937 comm="syz.4.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.914516][ T5943] loop2: detected capacity change from 0 to 1024 [ 70.940584][ T5943] EXT4-fs: Ignoring removed oldalloc option [ 70.946632][ T5943] EXT4-fs: Ignoring removed bh option [ 70.966932][ T29] audit: type=1400 audit(1754772608.068:3319): avc: denied { name_bind } for pid=5944 comm="syz.0.415" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 70.988663][ T29] audit: type=1400 audit(1754772608.068:3320): avc: denied { node_bind } for pid=5944 comm="syz.0.415" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 71.014434][ T5943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.044490][ T29] audit: type=1400 audit(1754772608.138:3321): avc: denied { create } for pid=5942 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.119563][ T29] audit: type=1400 audit(1754772608.168:3322): avc: denied { write } for pid=5942 comm="syz.2.414" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 71.141219][ T29] audit: type=1400 audit(1754772608.178:3323): avc: denied { write } for pid=5948 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 71.270495][ T5943] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.414: Allocating blocks 1-17 which overlap fs metadata [ 71.303669][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.330222][ T29] audit: type=1400 audit(1754772608.428:3324): avc: denied { read } for pid=5952 comm="syz.1.417" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.353444][ T29] audit: type=1400 audit(1754772608.428:3325): avc: denied { open } for pid=5952 comm="syz.1.417" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.421224][ T29] audit: type=1400 audit(1754772608.488:3326): avc: denied { append } for pid=5953 comm="syz.4.418" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 71.480643][ T5902] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 71.822626][ T5966] loop0: detected capacity change from 0 to 512 [ 71.841372][ T5966] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.857180][ T5966] EXT4-fs (loop0): mount failed [ 71.882609][ T5971] loop0: detected capacity change from 0 to 512 [ 71.890958][ T5971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.921249][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.972010][ T5976] loop0: detected capacity change from 0 to 512 [ 71.979730][ T5976] EXT4-fs (loop0): orphan cleanup on readonly fs [ 71.986533][ T5976] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.424: Failed to acquire dquot type 1 [ 71.998756][ T5976] EXT4-fs (loop0): 1 truncate cleaned up [ 72.004913][ T5976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.020781][ T5976] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 72.030556][ T5976] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 8 [ 72.065587][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.138297][ T5981] loop1: detected capacity change from 0 to 4096 [ 72.148722][ T5983] lo speed is unknown, defaulting to 1000 [ 72.168217][ T5981] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 72.193769][ T5981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.299675][ T5992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.308361][ T5992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.410370][ T5597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.905006][ T6011] Driver unsupported XDP return value 0 on prog (id 331) dev N/A, expect packet loss! [ 72.966416][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.423956][ T6037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 73.431204][ T6037] IPv6: NLM_F_CREATE should be set when creating new route [ 73.439067][ T6037] lo: entered allmulticast mode [ 73.445404][ T6037] tunl0: entered allmulticast mode [ 73.451833][ T6037] gre0: entered allmulticast mode [ 73.460622][ T6037] gretap0: entered allmulticast mode [ 73.467219][ T6037] erspan0: entered allmulticast mode [ 73.474006][ T6037] ip_vti0: entered allmulticast mode [ 73.480140][ T6037] ip6_vti0: entered allmulticast mode [ 73.486797][ T6037] sit0: entered allmulticast mode [ 73.494661][ T6037] ip6tnl0: entered allmulticast mode [ 73.501260][ T6037] ip6gre0: entered allmulticast mode [ 73.508037][ T6037] syz_tun: entered allmulticast mode [ 73.515154][ T6037] ip6gretap0: entered allmulticast mode [ 73.522086][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.529437][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.537003][ T6037] bridge0: entered allmulticast mode [ 73.544153][ T6037] vcan0: entered allmulticast mode [ 73.550080][ T6037] bond0: entered allmulticast mode [ 73.555244][ T6037] bond_slave_0: entered allmulticast mode [ 73.561061][ T6037] bond_slave_1: entered allmulticast mode [ 73.566822][ T6037] dummy0: entered allmulticast mode [ 73.573534][ T6037] team0: entered allmulticast mode [ 73.578650][ T6037] team_slave_0: entered allmulticast mode [ 73.584509][ T6037] team_slave_1: entered allmulticast mode [ 73.592795][ T6037] nlmon0: entered allmulticast mode [ 73.599074][ T6037] caif0: entered allmulticast mode [ 73.604408][ T6037] batadv0: entered allmulticast mode [ 73.610964][ T6037] vxcan0: entered allmulticast mode [ 73.616807][ T6037] vxcan1: entered allmulticast mode [ 73.622896][ T6037] veth0: entered allmulticast mode [ 73.629385][ T6037] veth1: entered allmulticast mode [ 73.635984][ T6037] wg0: entered allmulticast mode [ 73.641956][ T6037] wg1: entered allmulticast mode [ 73.647972][ T6037] wg2: left promiscuous mode [ 73.653459][ T6037] veth0_to_bridge: entered allmulticast mode [ 73.661655][ T6037] veth1_to_bridge: entered allmulticast mode [ 73.669885][ T6037] veth0_to_bond: entered allmulticast mode [ 73.678624][ T6037] veth1_to_bond: entered allmulticast mode [ 73.685929][ T6037] veth0_to_team: entered allmulticast mode [ 73.694220][ T6037] veth1_to_team: entered allmulticast mode [ 73.702489][ T6037] veth0_to_batadv: entered allmulticast mode [ 73.709423][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.717012][ T6037] batadv_slave_0: entered allmulticast mode [ 73.724304][ T6037] veth1_to_batadv: entered allmulticast mode [ 73.731386][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.738778][ T6037] batadv_slave_1: entered allmulticast mode [ 73.746176][ T6037] xfrm0: entered allmulticast mode [ 73.752529][ T6037] veth0_to_hsr: entered allmulticast mode [ 73.753336][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 73.759461][ T6037] hsr_slave_0: entered allmulticast mode [ 73.773601][ T6037] veth1_to_hsr: entered allmulticast mode [ 73.780315][ T6037] hsr_slave_1: entered allmulticast mode [ 73.786854][ T6037] hsr0: entered allmulticast mode [ 73.792950][ T6037] veth1_virt_wifi: entered allmulticast mode [ 73.799884][ T6037] veth0_virt_wifi: entered allmulticast mode [ 73.807474][ T6037] veth1_vlan: entered allmulticast mode [ 73.814336][ T6037] veth0_vlan: entered allmulticast mode [ 73.824995][ T6037] @: entered allmulticast mode [ 73.829895][ T6037] vlan1: entered allmulticast mode [ 73.858921][ T6037] macvlan0: entered allmulticast mode [ 73.866724][ T6037] macvlan1: entered allmulticast mode [ 73.873184][ T6037] ipvlan0: entered allmulticast mode [ 73.878539][ T6037] ipvlan1: entered allmulticast mode [ 73.884236][ T6037] veth1_macvtap: entered allmulticast mode [ 73.894455][ T6037] veth0_macvtap: entered allmulticast mode [ 73.901412][ T6037] macvtap0: entered allmulticast mode [ 73.907660][ T6037] macsec0: entered allmulticast mode [ 73.914201][ T6037] geneve0: entered allmulticast mode [ 73.921696][ T6037] geneve1: entered allmulticast mode [ 73.928056][ T6037] team0.1: entered allmulticast mode [ 73.933639][ T6037] syztnl0: entered allmulticast mode [ 73.939170][ T6037] netdevsim netdevsim4 eth0: entered allmulticast mode [ 73.946138][ T6037] netdevsim netdevsim4 eth1: entered allmulticast mode [ 73.953400][ T6037] netdevsim netdevsim4 eth2: entered allmulticast mode [ 73.961666][ T6037] netdevsim netdevsim4 eth3: entered allmulticast mode [ 73.968728][ T6037] bridge1: entered allmulticast mode [ 73.974509][ T6037] syztnl2: entered allmulticast mode [ 73.979894][ T3410] lo speed is unknown, defaulting to 1000 [ 73.985787][ T3410] syz2: Port: 1 Link DOWN [ 73.996796][ T5019] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.012224][ T6051] wg2: entered promiscuous mode [ 74.017153][ T6051] wg2: entered allmulticast mode [ 74.041641][ T5019] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.061299][ T6048] lo speed is unknown, defaulting to 1000 [ 74.070321][ T56] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.104292][ T56] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.197972][ T6068] netlink: 16 bytes leftover after parsing attributes in process `syz.5.457'. [ 74.207626][ T6066] lo speed is unknown, defaulting to 1000 [ 74.247740][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.5.457'. [ 74.295801][ T6075] IPVS: Error joining to the multicast group [ 74.324518][ T6066] loop0: detected capacity change from 0 to 128 [ 74.340042][ T6066] netlink: 'syz.0.456': attribute type 11 has an invalid length. [ 74.347855][ T6066] netlink: 36 bytes leftover after parsing attributes in process `syz.0.456'. [ 74.369395][ T6084] loop1: detected capacity change from 0 to 512 [ 74.421069][ T6091] loop0: detected capacity change from 0 to 512 [ 74.438617][ T6095] loop1: detected capacity change from 0 to 164 [ 74.454342][ T6098] loop4: detected capacity change from 0 to 512 [ 74.461936][ T6091] EXT4-fs (loop0): too many log groups per flexible block group [ 74.468367][ T6095] Unable to read rock-ridge attributes [ 74.469621][ T6091] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 74.475472][ T6098] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.482826][ T6091] EXT4-fs (loop0): mount failed [ 74.503041][ T6095] Unable to read rock-ridge attributes [ 74.509428][ T6098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.522867][ T6098] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.564540][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.464'. [ 74.591149][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.600097][ T6107] lo speed is unknown, defaulting to 1000 [ 74.600528][ T6111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.472'. [ 74.614724][ T6112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.465'. [ 74.624198][ T6112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.465'. [ 74.633160][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.465'. [ 75.296938][ T6127] lo speed is unknown, defaulting to 1000 [ 75.332345][ T6128] loop5: detected capacity change from 0 to 128 [ 75.355443][ T6127] netlink: 'syz.5.475': attribute type 11 has an invalid length. [ 75.363401][ T6127] netlink: 36 bytes leftover after parsing attributes in process `syz.5.475'. [ 75.469538][ T6139] loop0: detected capacity change from 0 to 128 [ 75.619565][ T6143] loop4: detected capacity change from 0 to 8192 [ 75.654734][ T6153] macvlan2: entered promiscuous mode [ 75.660108][ T6153] macvlan2: entered allmulticast mode [ 75.692757][ T6155] loop1: detected capacity change from 0 to 8192 [ 75.804383][ T6171] lo speed is unknown, defaulting to 1000 [ 75.929909][ T6179] syzkaller0: entered promiscuous mode [ 75.935448][ T6179] syzkaller0: entered allmulticast mode [ 76.015288][ T29] kauditd_printk_skb: 444 callbacks suppressed [ 76.015301][ T29] audit: type=1326 audit(1754772613.118:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6185 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c59c5ebe9 code=0x7ffc0000 [ 76.052395][ T29] audit: type=1326 audit(1754772613.148:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6185 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9c59c5ebe9 code=0x7ffc0000 [ 76.075655][ T29] audit: type=1326 audit(1754772613.148:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9c59c914a5 code=0x7ffc0000 [ 76.099034][ T29] audit: type=1326 audit(1754772613.148:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6185 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c59c5ebe9 code=0x7ffc0000 [ 76.122468][ T29] audit: type=1326 audit(1754772613.148:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6185 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c59c5ebe9 code=0x7ffc0000 [ 76.145795][ T29] audit: type=1326 audit(1754772613.158:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6185 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c59c5ebe9 code=0x7ffc0000 [ 76.169062][ T29] audit: type=1326 audit(1754772613.158:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6185 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c59c5ebe9 code=0x7ffc0000 [ 76.192387][ T29] audit: type=1326 audit(1754772613.158:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6185 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9c59c5ebe9 code=0x7ffc0000 [ 76.236496][ T29] audit: type=1326 audit(1754772613.318:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f9c59c5ebe9 code=0x7ffc0000 [ 76.260696][ T29] audit: type=1326 audit(1754772613.368:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6185 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c59c5ebe9 code=0x7ffc0000 [ 76.489048][ T6216] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 76.512048][ T6214] netlink: 'syz.1.509': attribute type 17 has an invalid length. [ 76.539067][ T6214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.559516][ T6219] loop0: detected capacity change from 0 to 1024 [ 76.571021][ T6219] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 76.579589][ T6219] System zones: 0-1, 3-36 [ 76.594307][ T6219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.617159][ T6230] loop5: detected capacity change from 0 to 128 [ 76.694795][ T6232] macvlan0: entered promiscuous mode [ 76.700208][ T6232] macvlan0: entered allmulticast mode [ 76.799323][ T6230] bio_check_eod: 40 callbacks suppressed [ 76.799342][ T6230] syz.5.516: attempt to access beyond end of device [ 76.799342][ T6230] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 76.859074][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.924901][ T6230] syz.5.516: attempt to access beyond end of device [ 76.924901][ T6230] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 77.037513][ T6230] syz.5.516: attempt to access beyond end of device [ 77.037513][ T6230] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 77.055838][ T6230] syz.5.516: attempt to access beyond end of device [ 77.055838][ T6230] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 77.069297][ T6230] syz.5.516: attempt to access beyond end of device [ 77.069297][ T6230] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 77.088113][ T6230] syz.5.516: attempt to access beyond end of device [ 77.088113][ T6230] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 77.104778][ T6230] syz.5.516: attempt to access beyond end of device [ 77.104778][ T6230] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 77.119462][ T6230] syz.5.516: attempt to access beyond end of device [ 77.119462][ T6230] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 77.158772][ T6253] bridge_slave_1: left allmulticast mode [ 77.164653][ T6253] bridge_slave_1: left promiscuous mode [ 77.170391][ T6253] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.179268][ T6253] bridge_slave_0: left allmulticast mode [ 77.185035][ T6253] bridge_slave_0: left promiscuous mode [ 77.190786][ T6253] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.407035][ T6269] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 77.589438][ T6271] loop2: detected capacity change from 0 to 2048 [ 77.618305][ T6279] lo speed is unknown, defaulting to 1000 [ 77.653457][ T6271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.012917][ T6287] loop4: detected capacity change from 0 to 512 [ 78.035556][ T6291] loop5: detected capacity change from 0 to 1024 [ 78.044416][ T6291] EXT4-fs: Ignoring removed oldalloc option [ 78.050433][ T6291] EXT4-fs: Ignoring removed bh option [ 78.051380][ T6287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.083072][ T6287] ext4 filesystem being mounted at /122/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.119759][ T6291] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.141063][ T6287] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.535: corrupted inode contents [ 78.214430][ T6287] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #4: comm syz.4.535: mark_inode_dirty error [ 78.249289][ T6287] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.535: corrupted inode contents [ 78.269269][ T6300] macvlan0: entered promiscuous mode [ 78.274601][ T6300] macvlan0: entered allmulticast mode [ 78.312097][ T6287] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.535: mark_inode_dirty error [ 78.361257][ T6304] netlink: 'syz.1.542': attribute type 10 has an invalid length. [ 78.379440][ T6304] team0: entered promiscuous mode [ 78.384533][ T6304] team_slave_0: entered promiscuous mode [ 78.390307][ T6304] team_slave_1: entered promiscuous mode [ 78.399614][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.408722][ T6287] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.535: Failed to acquire dquot type 1 [ 78.437097][ T6306] tipc: Enabling of bearer rejected, failed to enable media [ 78.447485][ T6298] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.535: corrupted inode contents [ 78.459687][ T6298] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #4: comm syz.4.535: mark_inode_dirty error [ 78.471826][ T6298] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.535: corrupted inode contents [ 78.478727][ T6308] loop2: detected capacity change from 0 to 1024 [ 78.500452][ T6298] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.535: mark_inode_dirty error [ 78.504169][ T6291] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.536: Allocating blocks 1-17 which overlap fs metadata [ 78.526418][ T6298] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.535: Failed to acquire dquot type 1 [ 78.526782][ T6308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.563801][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.575294][ T6312] lo speed is unknown, defaulting to 1000 [ 78.606155][ T6308] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 78.635788][ T6316] loop4: detected capacity change from 0 to 128 [ 78.644519][ T6317] loop1: detected capacity change from 0 to 128 [ 78.646582][ T6319] loop0: detected capacity change from 0 to 512 [ 78.657636][ T5597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.671024][ T6316] FAT-fs (loop4): Directory bread(block 162) failed [ 78.678107][ T6319] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 78.679069][ T6316] FAT-fs (loop4): Directory bread(block 163) failed [ 78.713023][ T6312] netlink: 'syz.1.545': attribute type 11 has an invalid length. [ 78.721102][ T6316] FAT-fs (loop4): Directory bread(block 164) failed [ 78.722539][ T6319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.737983][ T6316] FAT-fs (loop4): Directory bread(block 165) failed [ 78.749299][ T6316] FAT-fs (loop4): Directory bread(block 166) failed [ 78.756269][ T6316] FAT-fs (loop4): Directory bread(block 167) failed [ 78.763545][ T6316] FAT-fs (loop4): Directory bread(block 168) failed [ 78.770391][ T6316] FAT-fs (loop4): Directory bread(block 169) failed [ 78.778718][ T6319] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.799988][ T6316] FAT-fs (loop4): Directory bread(block 162) failed [ 78.806934][ T6316] FAT-fs (loop4): Directory bread(block 163) failed [ 78.814107][ T6316] syz.4.546: attempt to access beyond end of device [ 78.814107][ T6316] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 78.827340][ T6316] syz.4.546: attempt to access beyond end of device [ 78.827340][ T6316] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 78.911337][ T6319] __nla_validate_parse: 17 callbacks suppressed [ 78.911356][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'. [ 78.930802][ T6331] bridge2: entered allmulticast mode [ 78.970610][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.022231][ T5019] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 79.034805][ T5019] EXT4-fs (loop2): This should not happen!! Data will be lost [ 79.034805][ T5019] [ 79.044469][ T5019] EXT4-fs (loop2): Total free blocks count 0 [ 79.050474][ T5019] EXT4-fs (loop2): Free/Dirty block details [ 79.056376][ T5019] EXT4-fs (loop2): free_blocks=20480 [ 79.061715][ T5019] EXT4-fs (loop2): dirty_blocks=10864 [ 79.067112][ T5019] EXT4-fs (loop2): Block reservation details [ 79.073246][ T5019] EXT4-fs (loop2): i_reserved_data_blocks=679 [ 79.197209][ T6346] netlink: 44 bytes leftover after parsing attributes in process `syz.0.553'. [ 79.206448][ T6342] netlink: 44 bytes leftover after parsing attributes in process `syz.0.553'. [ 79.229248][ T6335] loop5: detected capacity change from 0 to 2048 [ 79.229386][ T6344] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.558'. [ 79.249874][ T56] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 79.319984][ T6335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.537461][ T6364] loop0: detected capacity change from 0 to 128 [ 79.874012][ T6374] loop4: detected capacity change from 0 to 256 [ 79.882288][ T6372] loop2: detected capacity change from 0 to 128 [ 79.900560][ T6374] msdos: Bad value for 'time_offset' [ 79.970511][ T6372] vfat: Unknown parameter '' [ 79.992117][ T5597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.002766][ T6372] $Hÿ: renamed from bond0 (while UP) [ 80.018941][ T6372] $Hÿ: entered promiscuous mode [ 80.024007][ T6372] bond_slave_0: entered promiscuous mode [ 80.029747][ T6372] bond_slave_1: entered promiscuous mode [ 80.084918][ T6378] loop2: detected capacity change from 0 to 1024 [ 80.092203][ T6378] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.099157][ T6378] EXT4-fs: dax option not supported [ 80.187360][ T6383] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.572'. [ 80.348627][ T6395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.573'. [ 80.372884][ T6395] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6395 comm=syz.2.573 [ 80.428967][ T6397] lo speed is unknown, defaulting to 1000 [ 80.522547][ T6401] lo speed is unknown, defaulting to 1000 [ 80.721345][ T6408] loop2: detected capacity change from 0 to 1024 [ 80.751142][ T6408] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 80.766725][ T6408] System zones: 0-1, 3-36 [ 80.773615][ T6408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.873161][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.916324][ T6406] loop5: detected capacity change from 0 to 512 [ 80.935642][ T6406] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 80.945499][ T6406] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 80.945945][ T6419] loop2: detected capacity change from 0 to 512 [ 80.954248][ T6419] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.962776][ T6406] EXT4-fs (loop5): orphan cleanup on readonly fs [ 80.977200][ T6406] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #13: comm syz.5.579: iget: bad i_size value: 12154761577498 [ 80.989509][ T6411] lo speed is unknown, defaulting to 1000 [ 80.993431][ T6406] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.579: couldn't read orphan inode 13 (err -117) [ 81.019629][ T6419] EXT4-fs (loop2): 1 truncate cleaned up [ 81.028940][ T6406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 81.032622][ T6419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.056610][ T5429] bridge_slave_1: left promiscuous mode [ 81.062300][ T5429] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.079964][ T6419] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.098798][ T5429] bridge_slave_0: left promiscuous mode [ 81.104725][ T5429] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.122874][ T29] kauditd_printk_skb: 496 callbacks suppressed [ 81.122890][ T29] audit: type=1400 audit(1754772618.228:4269): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 81.182187][ T29] audit: type=1400 audit(1754772618.288:4270): avc: denied { read } for pid=6433 comm="syz.2.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.186786][ T6435] netfs: Couldn't get user pages (rc=-14) [ 81.227436][ T6436] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.579: dx entry: limit 65535 != root limit 120 [ 81.239588][ T6436] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.579: Corrupt directory, running e2fsck is recommended [ 81.335691][ T5429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.349251][ T5429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.358404][ T5429] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 81.368493][ T5597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.368500][ T5429] bond0 (unregistering): Released all slaves [ 81.397249][ T6429] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.584'. [ 81.415009][ T6446] netlink: 'syz.1.590': attribute type 4 has an invalid length. [ 81.427353][ T6439] lo speed is unknown, defaulting to 1000 [ 81.436361][ T6446] netlink: 'syz.1.590': attribute type 4 has an invalid length. [ 81.456709][ T5429] tipc: Left network mode [ 81.477562][ T5429] hsr_slave_0: left promiscuous mode [ 81.487919][ T5429] hsr_slave_1: left promiscuous mode [ 81.493493][ T5429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.503329][ T5429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.537686][ T5429] team0 (unregistering): Port device team_slave_1 removed [ 81.546914][ T5429] team0 (unregistering): Port device team_slave_0 removed [ 81.601175][ T6458] syzkaller0: entered promiscuous mode [ 81.606653][ T6458] syzkaller0: entered allmulticast mode [ 81.615303][ T6411] chnl_net:caif_netlink_parms(): no params data found [ 81.655439][ T6456] tipc: Enabled bearer , priority 0 [ 81.662270][ T29] audit: type=1400 audit(1754772618.768:4271): avc: denied { relabelfrom } for pid=6451 comm="syz.5.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 81.682160][ T29] audit: type=1400 audit(1754772618.768:4272): avc: denied { relabelto } for pid=6451 comm="syz.5.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 81.711753][ T6455] tipc: Resetting bearer [ 81.726635][ T6455] tipc: Disabling bearer [ 81.748558][ T29] audit: type=1400 audit(1754772618.848:4273): avc: denied { name_bind } for pid=6463 comm="syz.1.595" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 81.770329][ T29] audit: type=1400 audit(1754772618.848:4274): avc: denied { node_bind } for pid=6463 comm="syz.1.595" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 81.802063][ T6411] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.809122][ T6411] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.818305][ T6411] bridge_slave_0: entered allmulticast mode [ 81.825043][ T6411] bridge_slave_0: entered promiscuous mode [ 81.832068][ T6411] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.839113][ T6411] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.846323][ T6411] bridge_slave_1: entered allmulticast mode [ 81.852260][ T29] audit: type=1400 audit(1754772618.948:4275): avc: denied { write } for pid=6465 comm="syz.5.596" path="socket:[12518]" dev="sockfs" ino=12518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.875629][ T29] audit: type=1326 audit(1754772618.948:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.5.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9868ebe9 code=0x7ffc0000 [ 81.900529][ T6411] bridge_slave_1: entered promiscuous mode [ 81.931918][ T6469] loop0: detected capacity change from 0 to 4096 [ 81.949740][ T29] audit: type=1326 audit(1754772618.958:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.5.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7feb9868ebe9 code=0x7ffc0000 [ 81.973151][ T29] audit: type=1326 audit(1754772618.958:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.5.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9868ebe9 code=0x7ffc0000 [ 81.998528][ T6411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.027308][ T6411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.047604][ T6469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.111577][ T6411] team0: Port device team_slave_0 added [ 82.118067][ T6411] team0: Port device team_slave_1 added [ 82.134941][ T6411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.142013][ T6411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.167907][ T6411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.180432][ T6411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.187381][ T6411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.213294][ T6411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.253385][ T6411] hsr_slave_0: entered promiscuous mode [ 82.259450][ T6411] hsr_slave_1: entered promiscuous mode [ 82.270486][ T6411] debugfs: 'hsr0' already exists in 'hsr' [ 82.276304][ T6411] Cannot create hsr debugfs directory [ 82.287927][ T5429] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.356390][ T5429] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.384138][ T5429] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.402438][ T6474] chnl_net:caif_netlink_parms(): no params data found [ 82.424792][ T5429] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.487940][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.497885][ T6474] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.505023][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.512303][ T6474] bridge_slave_0: entered allmulticast mode [ 82.518899][ T6474] bridge_slave_0: entered promiscuous mode [ 82.525577][ T6474] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.532672][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.539859][ T6474] bridge_slave_1: entered allmulticast mode [ 82.547486][ T6474] bridge_slave_1: entered promiscuous mode [ 82.569242][ T6474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.586227][ T6474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.595577][ T6504] netem: change failed [ 82.614212][ T6474] team0: Port device team_slave_0 added [ 82.668756][ T5429] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.678088][ T5429] bond_slave_0: left promiscuous mode [ 82.685168][ T5429] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.694002][ T5429] bond_slave_1: left promiscuous mode [ 82.700006][ T5429] $Hÿ (unregistering): Released all slaves [ 82.718713][ T6474] team0: Port device team_slave_1 added [ 82.739932][ T6506] netlink: 'syz.0.607': attribute type 10 has an invalid length. [ 82.754179][ T6506] : (slave dummy0): Releasing backup interface [ 82.765223][ T6506] team0: Port device dummy0 added [ 82.771358][ T6474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.775943][ T6506] netlink: 'syz.0.607': attribute type 10 has an invalid length. [ 82.778339][ T6474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.812060][ T6474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.826621][ T6506] team0: Port device dummy0 removed [ 82.834779][ T6506] : (slave dummy0): Enslaving as an active interface with an up link [ 82.845681][ T6474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.852743][ T6474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.878716][ T6474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.893540][ T5429] hsr_slave_0: left promiscuous mode [ 82.907704][ T5429] hsr_slave_1: left promiscuous mode [ 82.913432][ T5429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.920916][ T5429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.929217][ T5429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.936649][ T5429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.947724][ T6510] netfs: Couldn't get user pages (rc=-14) [ 82.954237][ T6508] loop0: detected capacity change from 0 to 8192 [ 82.961688][ T5429] veth1_macvtap: left promiscuous mode [ 82.967281][ T5429] veth0_macvtap: left promiscuous mode [ 83.139282][ T5429] team0 (unregistering): Port device team_slave_0 removed [ 83.303943][ T6517] loop1: detected capacity change from 0 to 512 [ 83.582486][ T6517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.595673][ T6517] ext4 filesystem being mounted at /139/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.598273][ T6474] hsr_slave_0: entered promiscuous mode [ 83.611076][ T6517] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.611: corrupted inode contents [ 83.612692][ T6474] hsr_slave_1: entered promiscuous mode [ 83.629149][ T6517] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #4: comm syz.1.611: mark_inode_dirty error [ 83.641088][ T6474] debugfs: 'hsr0' already exists in 'hsr' [ 83.646813][ T6474] Cannot create hsr debugfs directory [ 83.669857][ T6517] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.611: corrupted inode contents [ 83.682070][ T6517] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.611: mark_inode_dirty error [ 83.694020][ T6517] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.611: Failed to acquire dquot type 1 [ 83.695569][ T6411] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.706784][ T6521] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.611: corrupted inode contents [ 83.724330][ T6521] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #4: comm syz.1.611: mark_inode_dirty error [ 83.726003][ T6411] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.744624][ T6411] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.751615][ T6521] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #4: comm syz.1.611: corrupted inode contents [ 83.765707][ T6521] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.611: mark_inode_dirty error [ 83.776980][ T6521] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.611: Failed to acquire dquot type 1 [ 83.788896][ T6411] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.812187][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.887084][ T6532] bridge1: entered allmulticast mode [ 83.928694][ T6411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.930967][ T6538] loop0: detected capacity change from 0 to 1024 [ 83.944344][ T6411] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.951980][ T6538] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 83.965018][ T5429] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.972097][ T5429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.981762][ T6538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.998168][ T5459] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.005230][ T5459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.100318][ T6547] syzkaller0: entered promiscuous mode [ 84.105865][ T6547] syzkaller0: entered allmulticast mode [ 84.179064][ T6411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.187457][ T6474] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.206477][ T6474] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.238353][ T6474] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.367264][ T6474] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.394140][ T6557] loop1: detected capacity change from 0 to 8192 [ 84.421760][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.455411][ T6557] loop1: p1 p3 p4 [ 84.459928][ T6557] loop1: p3 start 331777 is beyond EOD, truncated [ 84.466512][ T6557] loop1: p4 size 262144 extends beyond EOD, truncated [ 84.472780][ T6571] loop0: detected capacity change from 0 to 512 [ 84.481737][ T6474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.485555][ T6571] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.502132][ T6474] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.511912][ T6571] EXT4-fs (loop0): 1 truncate cleaned up [ 84.518014][ T6571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.535549][ T5423] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.542740][ T5423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.563055][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.573299][ T5423] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.580374][ T5423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.620151][ T6411] veth0_vlan: entered promiscuous mode [ 84.631758][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.622'. [ 84.642722][ T6411] veth1_vlan: entered promiscuous mode [ 84.656353][ T6411] veth0_macvtap: entered promiscuous mode [ 84.664028][ T6411] veth1_macvtap: entered promiscuous mode [ 84.674695][ T6411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.683617][ T6411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.707874][ T6474] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.718382][ T6474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.726300][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.622'. [ 84.746622][ T5019] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.759592][ T5019] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.777739][ T6474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.777830][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.622'. [ 84.809268][ T5019] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.827326][ T5019] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.849906][ T6595] loop1: detected capacity change from 0 to 256 [ 85.312063][ T6474] veth0_vlan: entered promiscuous mode [ 85.393211][ T6474] veth1_vlan: entered promiscuous mode [ 85.632351][ T6474] veth0_macvtap: entered promiscuous mode [ 85.670045][ T6474] veth1_macvtap: entered promiscuous mode [ 85.713187][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.755275][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.795785][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.836298][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.883625][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.938247][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.963596][ T6621] tipc: Started in network mode [ 85.968540][ T6621] tipc: Node identity 72daf237bfb5, cluster identity 4711 [ 85.975707][ T6621] tipc: Enabled bearer , priority 0 [ 86.052801][ T6623] syzkaller0: entered promiscuous mode [ 86.058379][ T6623] syzkaller0: entered allmulticast mode [ 86.116077][ T6621] tipc: Resetting bearer [ 86.152200][ T6619] tipc: Resetting bearer [ 86.185583][ T6619] tipc: Disabling bearer [ 86.195931][ T29] kauditd_printk_skb: 410 callbacks suppressed [ 86.195943][ T29] audit: type=1400 audit(1754772623.298:4684): avc: denied { execute_no_trans } for pid=6625 comm="syz.5.632" path="/49/file1" dev="tmpfs" ino=290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.278641][ T6631] netlink: 'syz.5.633': attribute type 4 has an invalid length. [ 86.299848][ T6626] loop0: detected capacity change from 0 to 8192 [ 86.327129][ T6631] netlink: 'syz.5.633': attribute type 4 has an invalid length. [ 86.367485][ T6640] netlink: 24 bytes leftover after parsing attributes in process `syz.5.637'. [ 86.370527][ T29] audit: type=1400 audit(1754772623.468:4685): avc: denied { create } for pid=6636 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.409648][ T29] audit: type=1400 audit(1754772623.508:4686): avc: denied { setopt } for pid=6634 comm="syz.0.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.438920][ T6640] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6640 comm=syz.5.637 [ 86.516800][ T29] audit: type=1400 audit(1754772623.598:4687): avc: denied { write } for pid=6645 comm="syz.5.640" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.854483][ T29] audit: type=1400 audit(1754772623.948:4688): avc: denied { read } for pid=6663 comm="syz.0.645" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 86.877422][ T29] audit: type=1400 audit(1754772623.948:4689): avc: denied { open } for pid=6663 comm="syz.0.645" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 86.900816][ T29] audit: type=1400 audit(1754772623.948:4690): avc: denied { write } for pid=6663 comm="syz.0.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.068806][ T29] audit: type=1326 audit(1754772624.168:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.0.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886755ebe9 code=0x7ffc0000 [ 87.092342][ T29] audit: type=1326 audit(1754772624.168:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.0.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f886755d550 code=0x7ffc0000 [ 87.115723][ T29] audit: type=1326 audit(1754772624.168:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.0.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8867560417 code=0x7ffc0000 [ 87.434136][ T6683] loop5: detected capacity change from 0 to 1024 [ 87.448848][ T6683] EXT4-fs: Ignoring removed orlov option [ 87.488039][ T6683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.535381][ T5597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.555296][ T6689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.654'. [ 87.573855][ T6689] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6689 comm=syz.0.654 [ 87.706906][ T6701] loop1: detected capacity change from 0 to 512 [ 87.719640][ T6701] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 87.731690][ T6701] EXT4-fs (loop1): 1 truncate cleaned up [ 87.737740][ T6701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.764141][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.803654][ T6708] syzkaller0: entered allmulticast mode [ 87.810994][ T6708] syzkaller0 (unregistering): left allmulticast mode [ 87.848375][ T6710] loop1: detected capacity change from 0 to 512 [ 87.858891][ T6710] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 87.867221][ T6710] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 87.875721][ T6710] EXT4-fs (loop1): orphan cleanup on readonly fs [ 87.883622][ T6710] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #13: comm syz.1.663: iget: bad i_size value: 12154761577498 [ 87.897053][ T6710] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.663: couldn't read orphan inode 13 (err -117) [ 87.911732][ T6710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 87.968132][ T6710] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.663: dx entry: limit 65535 != root limit 120 [ 87.980530][ T6710] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.663: Corrupt directory, running e2fsck is recommended [ 88.006078][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.429677][ T6734] loop5: detected capacity change from 0 to 512 [ 88.447673][ T6734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.468027][ T6734] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.481101][ T6734] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.673: corrupted inode contents [ 88.494222][ T6734] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.673: mark_inode_dirty error [ 88.506071][ T6734] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.673: corrupted inode contents [ 88.520892][ T6734] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.673: corrupted inode contents [ 88.533495][ T6734] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.673: mark_inode_dirty error [ 88.546705][ T6734] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.673: corrupted inode contents [ 88.559215][ T6734] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.673: mark_inode_dirty error [ 88.571385][ T6734] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.673: corrupted inode contents [ 88.583378][ T6734] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.673: mark_inode_dirty error [ 88.617449][ T5597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.688722][ T6749] loop1: detected capacity change from 0 to 2048 [ 88.707718][ T6749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.003991][ T6756] loop4: detected capacity change from 0 to 8192 [ 89.375854][ T6779] loop5: detected capacity change from 0 to 256 [ 89.395127][ T6779] msdos: Bad value for 'time_offset' [ 89.468476][ T6780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.715898][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.905235][ T6784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.690'. [ 89.951617][ T6784] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6784 comm=syz.1.690 [ 90.022193][ T3364] kernel write not supported for file /validatetrans (pid: 3364 comm: kworker/0:3) [ 90.548754][ T6814] bond_slave_0: entered promiscuous mode [ 90.554581][ T6814] bond_slave_1: entered promiscuous mode [ 90.560369][ T6814] macvtap1: entered allmulticast mode [ 90.565823][ T6814] bond0: entered allmulticast mode [ 90.571021][ T6814] bond_slave_0: entered allmulticast mode [ 90.576793][ T6814] bond_slave_1: entered allmulticast mode [ 90.781064][ T6814] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 90.818178][ T6814] bond0: left allmulticast mode [ 90.823115][ T6814] bond_slave_0: left allmulticast mode [ 90.828607][ T6814] bond_slave_1: left allmulticast mode [ 90.834132][ T6814] bond_slave_0: left promiscuous mode [ 90.839527][ T6814] bond_slave_1: left promiscuous mode [ 91.076165][ T6839] netlink: 60 bytes leftover after parsing attributes in process `syz.0.706'. [ 91.208565][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 91.208579][ T29] audit: type=1400 audit(1754772628.308:4857): avc: denied { write } for pid=6854 comm="syz.0.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.329234][ T29] audit: type=1400 audit(1754772628.428:4858): avc: denied { mounton } for pid=6865 comm="syz.0.708" path="/145/file0" dev="tmpfs" ino=797 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.403560][ T29] audit: type=1326 audit(1754772628.508:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c59c5ebe9 code=0x7ffc0000 [ 91.427094][ T29] audit: type=1326 audit(1754772628.508:4860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c59c5ebe9 code=0x7ffc0000 [ 91.455650][ T6872] usb usb1: check_ctrlrecip: process 6872 (+}[@) requesting ep 01 but needs 81 [ 91.464953][ T6872] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 91.478840][ T6874] loop0: detected capacity change from 0 to 512 [ 91.500959][ T29] audit: type=1326 audit(1754772628.558:4861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f9c59c5ebe9 code=0x7ffc0000 [ 91.524389][ T29] audit: type=1326 audit(1754772628.558:4862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c59c5ebe9 code=0x7ffc0000 [ 91.547695][ T29] audit: type=1326 audit(1754772628.558:4863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c59c5ebe9 code=0x7ffc0000 [ 91.571061][ T29] audit: type=1326 audit(1754772628.558:4864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c59c5ebe9 code=0x7ffc0000 [ 91.594361][ T29] audit: type=1326 audit(1754772628.558:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c59c5ebe9 code=0x7ffc0000 [ 91.617687][ T29] audit: type=1326 audit(1754772628.558:4866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c59c5ebe9 code=0x7ffc0000 [ 91.674421][ T6874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.692718][ T6874] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.741082][ T6874] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 91.749553][ T6874] tipc: Enabled bearer , priority 10 [ 91.881159][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.963188][ T6884] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 91.963188][ T6884] program syz.1.715 not setting count and/or reply_len properly [ 92.002653][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.5.714'. [ 92.017400][ T6888] bridge: RTM_NEWNEIGH with invalid ether address [ 92.137487][ T6896] netlink: 'syz.0.719': attribute type 10 has an invalid length. [ 92.162922][ T6896] : (slave dummy0): Releasing backup interface [ 92.182513][ T6896] team0: Port device dummy0 added [ 92.198401][ T6896] netlink: 'syz.0.719': attribute type 10 has an invalid length. [ 92.214835][ T6896] team0: Port device dummy0 removed [ 92.226671][ T6896] : (slave dummy0): Enslaving as an active interface with an up link [ 92.352746][ T6908] loop5: detected capacity change from 0 to 1024 [ 92.378527][ T6910] loop1: detected capacity change from 0 to 128 [ 92.385050][ T6908] EXT4-fs: Ignoring removed orlov option [ 92.395109][ T6908] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.404231][ T6910] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.424361][ T6908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.437495][ T6910] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.480182][ T5597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.498831][ T6917] loop0: detected capacity change from 0 to 2048 [ 92.562650][ T6917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.661052][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.882420][ T10] tipc: Node number set to 3807346200 [ 92.938655][ T6935] netlink: 24 bytes leftover after parsing attributes in process `syz.5.733'. [ 93.031778][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.733'. [ 93.875552][ T6961] netlink: 'syz.4.741': attribute type 83 has an invalid length. [ 94.059659][ T6965] gretap1: entered promiscuous mode [ 94.262049][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'. [ 94.294144][ T6970] loop0: detected capacity change from 0 to 8192 [ 94.371281][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 94.427081][ T6976] netlink: 'syz.5.747': attribute type 4 has an invalid length. [ 94.439092][ T3301] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 94.447118][ T3301] FAT-fs (loop0): Filesystem has been set read-only [ 94.486926][ T6978] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 94.500666][ T6978] bridge_slave_1: left allmulticast mode [ 94.506385][ T6978] bridge_slave_1: left promiscuous mode [ 94.512058][ T6978] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.539187][ T6978] bridge_slave_0: left allmulticast mode [ 94.544978][ T6978] bridge_slave_0: left promiscuous mode [ 94.550684][ T6978] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.560940][ T6980] netlink: 32 bytes leftover after parsing attributes in process `syz.5.750'. [ 94.634710][ T6982] $Hÿ: renamed from bond0 (while UP) [ 94.642772][ T6982] $Hÿ: entered promiscuous mode [ 94.647823][ T6982] bond_slave_0: entered promiscuous mode [ 94.653635][ T6982] bond_slave_1: entered promiscuous mode [ 94.725663][ T6989] usb usb1: check_ctrlrecip: process 6989 (+}[@) requesting ep 01 but needs 81 [ 94.739440][ T6989] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 94.752532][ T6993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.756'. [ 94.769607][ T6996] tmpfs: Bad value for 'mpol' [ 94.786629][ T6993] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6993 comm=syz.2.756 [ 94.845128][ T5423] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.877574][ T5423] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.984372][ T5423] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.092392][ T5423] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.208936][ T5423] bridge_slave_0: left promiscuous mode [ 95.214790][ T5423] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.370307][ T7046] loop5: detected capacity change from 0 to 1024 [ 95.377617][ T7046] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 95.403012][ T5423]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.414588][ T5423]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.430875][ T7046] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.444756][ T5423]  (unregistering): (slave bridge_slave_1): Releasing backup interface [ 95.454830][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.492537][ T5423]  (unregistering): (slave dummy0): Releasing backup interface [ 95.511257][ T5423]  (unregistering): Released all slaves [ 95.572192][ T5423] tipc: Disabling bearer [ 95.577421][ T5423] tipc: Left network mode [ 95.589094][ T5423] hsr_slave_0: left promiscuous mode [ 95.596027][ T5423] hsr_slave_1: left promiscuous mode [ 95.607971][ T5423] veth1_macvtap: left promiscuous mode [ 95.616317][ T5423] veth0_macvtap: left promiscuous mode [ 95.767274][ T5423] team0 (unregistering): Port device team_slave_1 removed [ 95.802215][ T5423] team0 (unregistering): Port device team_slave_0 removed [ 95.876880][ T7056] netlink: 3 bytes leftover after parsing attributes in process `syz.1.771'. [ 95.907608][ T7058] netlink: 240 bytes leftover after parsing attributes in process `syz.2.772'. [ 95.988291][ T7056] 0ªX¹¦À: renamed from caif0 [ 96.048277][ T7056] 0ªX¹¦À: entered allmulticast mode [ 96.053590][ T7056] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 96.131869][ T7010] chnl_net:caif_netlink_parms(): no params data found [ 96.139691][ T5597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.221070][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 96.221087][ T29] audit: type=1400 audit(1754772633.318:5123): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 96.287109][ T29] audit: type=1400 audit(1754772633.378:5124): avc: denied { create } for pid=7073 comm="syz.4.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.306644][ T29] audit: type=1400 audit(1754772633.378:5125): avc: denied { setopt } for pid=7073 comm="syz.4.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.306666][ T29] audit: type=1400 audit(1754772633.378:5126): avc: denied { bind } for pid=7073 comm="syz.4.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.306710][ T29] audit: type=1400 audit(1754772633.378:5127): avc: denied { name_bind } for pid=7073 comm="syz.4.778" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 96.306738][ T29] audit: type=1400 audit(1754772633.378:5128): avc: denied { node_bind } for pid=7073 comm="syz.4.778" saddr=127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 96.349566][ T29] audit: type=1400 audit(1754772633.448:5129): avc: denied { write } for pid=7073 comm="syz.4.778" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.349596][ T29] audit: type=1400 audit(1754772633.448:5130): avc: denied { connect } for pid=7073 comm="syz.4.778" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.349621][ T29] audit: type=1400 audit(1754772633.448:5131): avc: denied { name_connect } for pid=7073 comm="syz.4.778" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 96.349707][ T29] audit: type=1400 audit(1754772633.448:5132): avc: denied { connect } for pid=7073 comm="syz.4.778" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.631858][ T7010] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.631899][ T7010] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.632056][ T7010] bridge_slave_0: entered allmulticast mode [ 96.632773][ T7010] bridge_slave_0: entered promiscuous mode [ 96.633856][ T7010] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.633912][ T7010] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.634109][ T7010] bridge_slave_1: entered allmulticast mode [ 96.634692][ T7010] bridge_slave_1: entered promiscuous mode [ 96.677940][ T7010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.679867][ T7010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.727289][ T7010] team0: Port device team_slave_0 added [ 96.728730][ T7010] team0: Port device team_slave_1 added [ 96.841983][ T7010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.848998][ T7010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.874912][ T7010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.886197][ T7010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.893255][ T7010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.919206][ T7010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.949656][ T7010] hsr_slave_0: entered promiscuous mode [ 96.958083][ T7010] hsr_slave_1: entered promiscuous mode [ 96.963954][ T7010] debugfs: 'hsr0' already exists in 'hsr' [ 96.969793][ T7010] Cannot create hsr debugfs directory [ 97.180900][ T7096] loop2: detected capacity change from 0 to 1024 [ 97.244395][ T7096] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 97.299478][ T7010] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 97.309257][ T7010] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 97.321751][ T7103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.783'. [ 97.332724][ T7096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.362493][ T7010] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 97.412969][ T7010] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 97.478738][ T7010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.501720][ T7010] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.521578][ T5019] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.528639][ T5019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.583043][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.590141][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.607484][ T7106] netlink: 224 bytes leftover after parsing attributes in process `syz.4.785'. [ 97.691673][ T7010] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.702133][ T7010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.799367][ T7010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.911478][ T7140] netlink: 'syz.5.789': attribute type 1 has an invalid length. [ 98.057362][ T7145] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 98.117071][ T7146] veth5: entered promiscuous mode [ 98.146333][ T7146] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 98.207480][ T7010] veth0_vlan: entered promiscuous mode [ 98.224352][ T6474] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.239613][ T7010] veth1_vlan: entered promiscuous mode [ 98.286449][ T7010] veth0_macvtap: entered promiscuous mode [ 98.307132][ T7010] veth1_macvtap: entered promiscuous mode [ 98.338027][ T7010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.461729][ T7010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.482781][ T56] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.495004][ T56] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.519969][ T56] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.536681][ T56] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.760621][ T7178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7178 comm=syz.2.800 [ 98.827866][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.802'. [ 99.093043][ T7194] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 99.099667][ T7194] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 99.107155][ T7194] vhci_hcd vhci_hcd.0: Device attached [ 99.141661][ T7201] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 99.148291][ T7201] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 99.155831][ T7201] vhci_hcd vhci_hcd.0: Device attached [ 99.180218][ T7194] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(5) [ 99.186748][ T7194] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 99.194371][ T7194] vhci_hcd vhci_hcd.0: Device attached [ 99.227117][ T7194] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 99.233663][ T7194] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 99.241490][ T7194] vhci_hcd vhci_hcd.0: Device attached [ 99.252538][ T7205] vhci_hcd: connection closed [ 99.252652][ T7202] vhci_hcd: connection closed [ 99.252680][ T5453] vhci_hcd: stop threads [ 99.257398][ T7195] vhci_hcd: connection closed [ 99.262068][ T5453] vhci_hcd: release socket [ 99.262082][ T5453] vhci_hcd: disconnect device [ 99.264236][ T7210] vhci_hcd: connection closed [ 99.280348][ T5453] vhci_hcd: stop threads [ 99.289290][ T5453] vhci_hcd: release socket [ 99.293761][ T5453] vhci_hcd: disconnect device [ 99.299533][ T5453] vhci_hcd: stop threads [ 99.303910][ T5453] vhci_hcd: release socket [ 99.308388][ T5453] vhci_hcd: disconnect device [ 99.314168][ T3384] vhci_hcd: vhci_device speed not set [ 99.319824][ T5453] vhci_hcd: stop threads [ 99.324128][ T5453] vhci_hcd: release socket [ 99.328552][ T5453] vhci_hcd: disconnect device [ 99.366513][ T7217] netlink: 'syz.4.814': attribute type 21 has an invalid length. [ 99.374462][ T7217] netlink: 132 bytes leftover after parsing attributes in process `syz.4.814'. [ 99.406455][ T7221] ªªªªªª: renamed from vlan0 (while UP) [ 99.527934][ T7230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.820'. [ 99.546980][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.820'. [ 99.707456][ T7244] vlan0: entered promiscuous mode [ 99.712701][ T7244] vlan0: entered allmulticast mode [ 99.717858][ T7244] hsr_slave_1: entered allmulticast mode [ 100.700094][ T7289] sch_fq: defrate 4294967295 ignored. [ 101.203187][ T7334] netdevsim netdevsim6: Direct firmware load for ./file0/file1 failed with error -2 [ 101.237912][ T29] kauditd_printk_skb: 492 callbacks suppressed [ 101.237936][ T29] audit: type=1400 audit(1754772638.338:5625): avc: denied { prog_load } for pid=7335 comm="syz.6.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 101.278989][ T29] audit: type=1400 audit(1754772638.368:5626): avc: denied { create } for pid=7335 comm="syz.6.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 101.299445][ T29] audit: type=1400 audit(1754772638.368:5627): avc: denied { read write } for pid=7335 comm="syz.6.865" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 101.322657][ T29] audit: type=1400 audit(1754772638.378:5628): avc: denied { read write } for pid=7010 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.349006][ T29] audit: type=1400 audit(1754772638.438:5629): avc: denied { map_create } for pid=7338 comm="syz.6.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 101.368253][ T29] audit: type=1400 audit(1754772638.438:5630): avc: denied { prog_load } for pid=7338 comm="syz.6.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 101.382404][ T7342] netlink: 16 bytes leftover after parsing attributes in process `syz.6.867'. [ 101.389520][ T29] audit: type=1400 audit(1754772638.458:5631): avc: denied { read write } for pid=7010 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.420386][ T29] audit: type=1400 audit(1754772638.478:5632): avc: denied { open } for pid=7341 comm="syz.6.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 101.439515][ T29] audit: type=1400 audit(1754772638.488:5633): avc: denied { prog_load } for pid=7341 comm="syz.6.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 101.442908][ T7344] geneve2: entered promiscuous mode [ 101.458539][ T29] audit: type=1400 audit(1754772638.488:5634): avc: denied { map_create } for pid=7341 comm="syz.6.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 101.483145][ T7344] geneve2: entered allmulticast mode [ 101.490776][ T5453] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.520314][ T5453] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.533265][ T5453] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.543592][ T5453] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.585494][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.6.871'. [ 103.237430][ T7438] netlink: 'syz.1.906': attribute type 1 has an invalid length. [ 103.264429][ T7438] 8021q: adding VLAN 0 to HW filter on device bond3 [ 103.343672][ T7438] bond2: (slave bond3): making interface the new active one [ 103.351556][ T7438] bond2: (slave bond3): Enslaving as an active interface with an up link [ 103.406595][ T7438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.906'. [ 103.417763][ T7438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.577659][ T7449] geneve2: entered promiscuous mode [ 103.691212][ T7459] netlink: 'syz.4.914': attribute type 6 has an invalid length. [ 103.714273][ T7463] netlink: 'syz.1.916': attribute type 13 has an invalid length. [ 103.879410][ T5453] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.908139][ T5453] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.928230][ T5453] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.941086][ T5453] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.996813][ T7474] erspan0: entered promiscuous mode [ 104.004837][ T7474] vlan3: entered promiscuous mode [ 104.275704][ T7506] ±ÿ: renamed from team_slave_1 (while UP) [ 104.534183][ T7521] bridge1: entered allmulticast mode [ 104.643636][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.948'. [ 104.692832][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.950'. [ 104.718268][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.950'. [ 104.907369][ T7550] netlink: 'syz.6.954': attribute type 27 has an invalid length. [ 104.953869][ T7550] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.961218][ T7550] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.006421][ T7550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.018192][ T7550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.057629][ T7550] geneve2: left promiscuous mode [ 105.062729][ T7550] geneve2: left allmulticast mode [ 105.069475][ T5019] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.078703][ T5019] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 105.090140][ T5019] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.099805][ T5019] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 105.136582][ T5019] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.145539][ T5019] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 105.174637][ T5019] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.183598][ T5019] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 105.883831][ T7599] netlink: 'syz.5.976': attribute type 4 has an invalid length. [ 105.892942][ T7599] netlink: 'syz.5.976': attribute type 4 has an invalid length. [ 105.968047][ T7603] netlink: 'syz.1.974': attribute type 3 has an invalid length. [ 105.986566][ T7603] netlink: 'syz.1.974': attribute type 3 has an invalid length. [ 106.006628][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.974'. [ 106.280638][ T29] kauditd_printk_skb: 838 callbacks suppressed [ 106.280657][ T29] audit: type=1400 audit(1754772643.388:6473): avc: denied { create } for pid=7606 comm="syz.5.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 106.318037][ T29] audit: type=1400 audit(1754772643.388:6474): avc: denied { create } for pid=7606 comm="syz.5.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 106.338490][ T29] audit: type=1400 audit(1754772643.408:6475): avc: denied { write } for pid=7604 comm="syz.4.978" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=0 [ 106.362495][ T29] audit: type=1400 audit(1754772643.408:6476): avc: denied { mounton } for pid=7604 comm="syz.4.978" path="/syzcgroup/net/syz4/cgroup.procs" dev="cgroup" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=0 [ 106.386981][ T29] audit: type=1400 audit(1754772643.408:6477): avc: denied { create } for pid=7606 comm="syz.5.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 106.407329][ T29] audit: type=1400 audit(1754772643.408:6478): avc: denied { create } for pid=7606 comm="syz.5.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 106.427785][ T29] audit: type=1400 audit(1754772643.408:6479): avc: denied { create } for pid=7604 comm="syz.4.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 106.447526][ T29] audit: type=1400 audit(1754772643.448:6480): avc: denied { read write } for pid=7604 comm="syz.4.978" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 106.471445][ T29] audit: type=1400 audit(1754772643.488:6481): avc: denied { read write } for pid=6411 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 106.517496][ T29] audit: type=1400 audit(1754772643.618:6482): avc: denied { read write } for pid=6474 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 106.554487][ T7611] netlink: 'syz.4.980': attribute type 1 has an invalid length. [ 106.572226][ T7611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.599652][ T7610] bond1: (slave ip6erspan0): making interface the new active one [ 106.641339][ T7610] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 106.913758][ T7631] netlink: 'syz.1.989': attribute type 27 has an invalid length. [ 106.919328][ T7633] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 106.930132][ T7631] team0: left promiscuous mode [ 106.935024][ T7631] team_slave_0: left promiscuous mode [ 106.940577][ T7631] team_slave_1: left promiscuous mode [ 106.946352][ T7631] 0ªX¹¦À: left allmulticast mode [ 106.951869][ T7631] wg2: left promiscuous mode [ 106.956476][ T7631] wg2: left allmulticast mode [ 106.971494][ T7637] netdevsim netdevsim6: Direct firmware load for ./file0/file1 failed with error -2 [ 106.994325][ T7636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.003394][ T7636] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.013227][ T7636] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 107.032986][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.993'. [ 107.769652][ T7672] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1003'. [ 108.065693][ T7683] syzkaller0: entered promiscuous mode [ 108.071309][ T7683] syzkaller0: entered allmulticast mode [ 108.686998][ T7706] validate_nla: 1 callbacks suppressed [ 108.687011][ T7706] netlink: 'syz.2.1018': attribute type 1 has an invalid length. [ 108.715149][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1017'. [ 108.731902][ T7706] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 108.743239][ T7706] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 108.755353][ T7708] hsr_slave_0: left promiscuous mode [ 108.770052][ T7708] hsr_slave_1: left promiscuous mode [ 108.796282][ T7710] gretap1: entered promiscuous mode [ 108.813891][ T7710] bond0: (slave gretap1): making interface the new active one [ 108.829276][ T7710] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 108.855776][ T7706] macvlan2: entered promiscuous mode [ 108.861112][ T7706] macvlan2: entered allmulticast mode [ 108.867804][ T7706] bond0: entered promiscuous mode [ 108.884350][ T7706] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 108.909865][ T7706] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 108.935264][ T7706] bond0: left promiscuous mode [ 109.018805][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1029'. [ 109.045455][ T7731] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1028'. [ 109.058579][ T7736] team0 (unregistering): Port device team_slave_0 removed [ 109.067036][ T7736] team0 (unregistering): Port device team_slave_1 removed [ 109.080254][ T7731] 0ªX¹¦À: renamed from caif0 [ 109.090240][ T7731] 0ªX¹¦À: entered allmulticast mode [ 109.095456][ T7731] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 109.157087][ T7749] binfmt_misc: register: failed to install interpreter file ./file2 [ 109.176869][ T7755] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1038'. [ 109.193282][ T7754] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1037'. [ 109.203008][ T7757] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1039'. [ 109.375511][ T7772] netlink: 'syz.5.1045': attribute type 10 has an invalid length. [ 109.387455][ T7772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.399303][ T7772] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 109.524300][ T7787] veth0_to_team: entered promiscuous mode [ 109.568626][ T7793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1054'. [ 109.592960][ T7793] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7793 comm=syz.2.1054 [ 110.074735][ T7808] syzkaller0: entered promiscuous mode [ 110.080276][ T7808] syzkaller0: entered allmulticast mode [ 110.381940][ T36] IPVS: starting estimator thread 0... [ 110.477095][ T7841] netlink: 'syz.2.1075': attribute type 10 has an invalid length. [ 110.485083][ T7827] IPVS: using max 2784 ests per chain, 139200 per kthread [ 110.493306][ T7841] bridge0: port 3(team0) entered blocking state [ 110.499637][ T7841] bridge0: port 3(team0) entered disabled state [ 110.506729][ T7841] team0: entered allmulticast mode [ 110.511909][ T7841] team_slave_0: entered allmulticast mode [ 110.517722][ T7841] team_slave_1: entered allmulticast mode [ 110.524827][ T7841] team0: entered promiscuous mode [ 110.529881][ T7841] team_slave_0: entered promiscuous mode [ 110.535583][ T7841] team_slave_1: entered promiscuous mode [ 110.541694][ T7841] bridge0: port 3(team0) entered blocking state [ 110.548041][ T7841] bridge0: port 3(team0) entered forwarding state [ 111.293613][ T29] kauditd_printk_skb: 1383 callbacks suppressed [ 111.293631][ T29] audit: type=1400 audit(1754772648.398:7866): avc: denied { read write } for pid=6411 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.345086][ T29] audit: type=1400 audit(1754772648.408:7867): avc: denied { read write } for pid=7010 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.369369][ T29] audit: type=1326 audit(1754772648.428:7868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c59c55ba7 code=0x7ffc0000 [ 111.392730][ T29] audit: type=1326 audit(1754772648.428:7869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c59bfadd9 code=0x7ffc0000 [ 111.416072][ T29] audit: type=1326 audit(1754772648.428:7870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c59c5ebe9 code=0x7ffc0000 [ 111.439501][ T29] audit: type=1326 audit(1754772648.428:7871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c59c5ebe9 code=0x7ffc0000 [ 111.463177][ T29] audit: type=1400 audit(1754772648.428:7872): avc: denied { map_create } for pid=7866 comm="syz.1.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 111.482603][ T29] audit: type=1326 audit(1754772648.428:7873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c59c5ebe9 code=0x7ffc0000 [ 111.506160][ T29] audit: type=1326 audit(1754772648.428:7874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c59c5ebe9 code=0x7ffc0000 [ 111.510402][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1093'. [ 111.529799][ T29] audit: type=1326 audit(1754772648.428:7875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c59c5ebe9 code=0x7ffc0000 [ 111.740346][ T7880] Falling back ldisc for ttyS3. [ 112.435509][ T7926] netlink: 'syz.6.1113': attribute type 27 has an invalid length. [ 112.527958][ T7932] netlink: 'syz.5.1115': attribute type 1 has an invalid length. [ 112.541196][ T7932] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.552804][ T7932] __nla_validate_parse: 1 callbacks suppressed [ 112.552816][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1115'. [ 112.569828][ T7932] bond2 (unregistering): Released all slaves [ 112.793662][ T7955] netlink: 'syz.1.1123': attribute type 1 has an invalid length. [ 112.814949][ T7955] bond4: (slave geneve2): making interface the new active one [ 112.823642][ T7955] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 112.832345][ T5429] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 112.841897][ T5429] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 112.848319][ T7955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1123'. [ 112.850396][ T5429] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 112.868914][ T5429] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 113.357796][ T7979] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1134'. [ 113.375376][ T7979] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7979 comm=syz.6.1134 [ 113.506267][ T7983] team0 (unregistering): Port device team_slave_0 removed [ 113.516249][ T7983] team0 (unregistering): Port device team_slave_1 removed [ 113.649477][ T7989] netlink: 'syz.5.1138': attribute type 21 has an invalid length. [ 113.657395][ T7989] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1138'. [ 113.668661][ T7989] netlink: 'syz.5.1138': attribute type 4 has an invalid length. [ 113.676506][ T7989] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1138'. [ 113.737987][ T7994] macvtap0: refused to change device tx_queue_len [ 113.857354][ T8006] syzkaller0: entered promiscuous mode [ 113.862932][ T8006] syzkaller0: entered allmulticast mode [ 114.105814][ T8038] netlink: 'syz.2.1160': attribute type 10 has an invalid length. [ 114.116350][ T8038] dummy0: entered promiscuous mode [ 114.121919][ T8038] dummy0: entered allmulticast mode [ 114.127450][ T8038] team0: Port device dummy0 added [ 114.135645][ T8038] netlink: 'syz.2.1160': attribute type 10 has an invalid length. [ 114.145075][ T8038] dummy0: left promiscuous mode [ 114.149966][ T8038] dummy0: left allmulticast mode [ 114.155404][ T8038] team0: Port device dummy0 removed [ 114.162168][ T8038] dummy0: entered promiscuous mode [ 114.167582][ T8038] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 114.586221][ T8044] ªªªªªª: renamed from vlan0 (while UP) [ 114.866615][ T8060] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 114.866615][ T8060] The task syz.4.1165 (8060) triggered the difference, watch for misbehavior. [ 114.918376][ T8064] netlink: 'syz.5.1169': attribute type 4 has an invalid length. [ 114.934130][ T8064] netlink: 'syz.5.1169': attribute type 4 has an invalid length. [ 114.985044][ T8070] ªªªªªª: renamed from vlan0 [ 115.085969][ T5429] ================================================================== [ 115.094078][ T5429] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 115.102591][ T5429] [ 115.104908][ T5429] write to 0xffff888113640908 of 44 bytes by task 8079 on cpu 0: [ 115.112632][ T5429] tty_set_termios+0xc0/0x8c0 [ 115.117327][ T5429] set_termios+0x496/0x4e0 [ 115.121749][ T5429] tty_mode_ioctl+0x379/0x5c0 [ 115.126435][ T5429] n_tty_ioctl_helper+0x91/0x210 [ 115.131394][ T5429] n_tty_ioctl+0x101/0x200 [ 115.135811][ T5429] tty_ioctl+0x845/0xb80 [ 115.140054][ T5429] __se_sys_ioctl+0xce/0x140 [ 115.144651][ T5429] __x64_sys_ioctl+0x43/0x50 [ 115.149252][ T5429] x64_sys_call+0x1816/0x2ff0 [ 115.153934][ T5429] do_syscall_64+0xd2/0x200 [ 115.158441][ T5429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.164335][ T5429] [ 115.166658][ T5429] read to 0xffff888113640921 of 1 bytes by task 5429 on cpu 1: [ 115.174216][ T5429] n_tty_receive_char_flow_ctrl+0x23/0x1a0 [ 115.180025][ T5429] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 115.185569][ T5429] tty_port_default_lookahead_buf+0x91/0xc0 [ 115.191475][ T5429] flush_to_ldisc+0x285/0x340 [ 115.196188][ T5429] process_scheduled_works+0x4ce/0x9d0 [ 115.201667][ T5429] worker_thread+0x582/0x770 [ 115.206266][ T5429] kthread+0x486/0x510 [ 115.210333][ T5429] ret_from_fork+0xda/0x150 [ 115.214845][ T5429] ret_from_fork_asm+0x1a/0x30 [ 115.219606][ T5429] [ 115.221921][ T5429] value changed: 0x11 -> 0x00 [ 115.226610][ T5429] [ 115.228922][ T5429] Reported by Kernel Concurrency Sanitizer on: [ 115.235064][ T5429] CPU: 1 UID: 0 PID: 5429 Comm: kworker/u8:37 Tainted: G W 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) [ 115.248951][ T5429] Tainted: [W]=WARN [ 115.252758][ T5429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.262818][ T5429] Workqueue: events_unbound flush_to_ldisc [ 115.268653][ T5429] ==================================================================