last executing test programs: 2m36.357898319s ago: executing program 32 (id=970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 2m33.071496597s ago: executing program 1 (id=1080): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x200, 0x4) sendmmsg$inet6(r0, &(0x7f0000006600)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @local, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="8d06e8", 0x3}], 0x1}}], 0x1, 0x80d0) listen(r0, 0x80) 2m32.994899146s ago: executing program 1 (id=1084): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) 2m32.925284666s ago: executing program 1 (id=1089): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe28, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a0108000000f4c5000000010000000900030073797a32000000001400048008000240fffffffe08000140000000040900010073797a30"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) 2m32.829089116s ago: executing program 1 (id=1097): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8b101b, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 2m32.783274446s ago: executing program 1 (id=1101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring) 2m32.504129745s ago: executing program 1 (id=1108): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m32.494755854s ago: executing program 33 (id=1108): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m26.59163244s ago: executing program 6 (id=3148): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 1m26.51945127s ago: executing program 6 (id=3152): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000002c0)={r1, 0xa9ac}, &(0x7f0000000300)=0x8) sendto$inet6(r0, &(0x7f0000000c00)="f8e4fded8315", 0x6, 0x40c0, &(0x7f0000000c80)={0xa, 0x4e23, 0x5, @loopback, 0x98be}, 0x1c) 1m25.634146027s ago: executing program 6 (id=3191): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 1m25.553736727s ago: executing program 6 (id=3195): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x82) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x20000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1m25.506616836s ago: executing program 6 (id=3198): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1m25.376125596s ago: executing program 6 (id=3203): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a0100000000000000000001000000090001008f797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007665746830"], 0xfc}, 0x1, 0x0, 0x0, 0x4040040}, 0x880) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) 1m25.372966976s ago: executing program 34 (id=3203): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a0100000000000000000001000000090001008f797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007665746830"], 0xfc}, 0x1, 0x0, 0x0, 0x4040040}, 0x880) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) 54.00285556s ago: executing program 2 (id=4098): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c0003"], 0xf8}, 0x1, 0x0, 0x0, 0xc000}, 0x40) 53.901106779s ago: executing program 2 (id=4101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x6) 53.777649029s ago: executing program 2 (id=4113): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000380)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 53.696141528s ago: executing program 2 (id=4105): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) open(&(0x7f0000000300)='.\x00', 0x418601, 0x0) 53.468243188s ago: executing program 2 (id=4112): mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x10, &(0x7f0000000040)={[{@jqfmt_vfsv1}]}, 0x0, 0x750, &(0x7f0000000f40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) 52.788685755s ago: executing program 2 (id=4128): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x1, 0x0, 0xffffffdc, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x38ae, 0x0, 0x0, 0x7fffffff}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x8004) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 52.770056805s ago: executing program 35 (id=4128): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x1, 0x0, 0xffffffdc, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x38ae, 0x0, 0x0, 0x7fffffff}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x8004) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 52.398135014s ago: executing program 5 (id=4144): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa91, &(0x7f0000000100), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x60, 0x6000, @fd_index=0x6, 0x2b2, 0x0, 0x0, 0x18, 0x1, {0x2}}) io_uring_enter(r0, 0xec4, 0x0, 0x0, 0x0, 0x0) 52.177796323s ago: executing program 5 (id=4150): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 52.171040563s ago: executing program 7 (id=4151): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10003, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x200000000200}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400010076657468305f746f5f6873720000000008000240000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001006361696630"], 0xfc}, 0x1, 0x0, 0x0, 0x804}, 0x40000) 52.059458982s ago: executing program 7 (id=4152): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x0, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) 51.919166122s ago: executing program 5 (id=4153): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="001000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 51.918651962s ago: executing program 7 (id=4154): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x4100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 51.862438922s ago: executing program 5 (id=4156): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') 51.724361541s ago: executing program 7 (id=4157): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) open(&(0x7f0000000300)='.\x00', 0x418601, 0x0) 51.723545851s ago: executing program 5 (id=4158): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r2}) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, r1) 51.54418788s ago: executing program 7 (id=4159): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') syz_usb_connect(0x6, 0x36, &(0x7f00000005c0)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 51.44545872s ago: executing program 5 (id=4160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) fstatfs(r2, &(0x7f0000000480)=""/156) 51.43142271s ago: executing program 36 (id=4160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) fstatfs(r2, &(0x7f0000000480)=""/156) 51.203714099s ago: executing program 7 (id=4162): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00603000000000", @ANYRES32=0x0, @ANYRES32=0xee01], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 51.168941599s ago: executing program 37 (id=4162): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00603000000000", @ANYRES32=0x0, @ANYRES32=0xee01], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 723.056412ms ago: executing program 4 (id=5966): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) getsockname$packet(r0, 0x0, &(0x7f0000000200)) 696.135452ms ago: executing program 3 (id=5968): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r0}, 0x18) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x38, r1, 0x10ada85e65c25359, 0x8000, 0x8000000, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x11}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}]}, 0x38}}, 0x0) 641.485052ms ago: executing program 4 (id=5969): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) 567.947401ms ago: executing program 0 (id=5970): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) mmap(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0xcc4c6000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2000, 0x0) 546.459721ms ago: executing program 3 (id=5971): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x410000000, 0x1, 0x2}, &(0x7f0000000000)={0x1c, 0x7, 0x6, 0x0, 0x7, 0x400000}, 0x0, 0x0, 0x0) 526.404611ms ago: executing program 4 (id=5972): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) 479.650831ms ago: executing program 9 (id=5974): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu~\'\'\t|\t') 457.334011ms ago: executing program 4 (id=5975): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f00000006c0)={&(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10, 0x0}, 0x0) 439.773791ms ago: executing program 8 (id=5976): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f0000000180), 0x0}, 0x20) 400.589421ms ago: executing program 4 (id=5977): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}}, 0x0) 398.723761ms ago: executing program 0 (id=5987): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x0, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x4010) 362.041761ms ago: executing program 9 (id=5978): socket$inet6(0xa, 0x80002, 0x88) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 357.324901ms ago: executing program 4 (id=5979): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) 318.528481ms ago: executing program 8 (id=5980): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 231.76519ms ago: executing program 8 (id=5981): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 218.50709ms ago: executing program 0 (id=5982): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) 218.10813ms ago: executing program 8 (id=5983): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') fchdir(r0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 183.70407ms ago: executing program 3 (id=5984): socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) geteuid() 166.87192ms ago: executing program 8 (id=5985): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHNUbAPBnNknf//+mUIp6IYFeWKndNIkvFYTWS9FiQe/rmkxDyaZbspvSxELbC3vjjRRBxIL4Abz3svgF/BQFLRQpQS+8icxmtt0mu9m8bE3q/H4w7TkzszlzduY5+5ydXTaAwhrJ/ilFvBwRXycRh9u2DUa+cWRlv6XHNyazJYnl5U/+SCLJ17X2T/L/D+aVlyLily8jTpbWtltfWJypVKvpXF4fbcxeHa0vLJ66PFuZTqfTK+MTE2femhh/9523+9bX1y/89d3H9z8489XxpW9/enjkbhLn4lC+rb0f23CrvTISI/lzMhTnVu041ofGdpNkpw+ALRnI43wosjHgcAzkUQ/8992MiGWgoBLxDwXVygNac/s+zYNfGI/eX5kAre3/4Mp7I7GvOTc6sJQ8MzPK5rvDfWg/a+Pn3+/dzZbo8T7EzT60B9By63ZEnB4cXDv+Jfn4t3Wnm28er291G0V7/YGddD/Lf97olP+UnuQ/0SH/Odghdreid/yXHvahma6y/O+9jvnvk6FreCCv/a+Z8w0lly5X09MR8f+IOBFDe7P6evdzziw9WO62rT3/y5as/VYumB/Hw8G9zz5mqtKobKfP7R7djnjlaf6bxJrxf18z1119/rPn48IG2ziW3nu127be/W/X/wx4+ceI1zqe/6d3tJL170+ONq+H0dZVsdafd4792q39zfW//7Lzf2D9/g8n7fdr65tv44d9f6fdtnXs/+e9r/89yafN8p583fVKozE3FrEn+Wjt+vGnj23VW/tn/T9xfP3xr9P1vz8iPttg/+8cvdN1191w/qc2df43X3jw4Rffd2t/Y+Pfm83SiXzNRsa/jR7gdp47AAAAAAAA2G1KEXEoklL5SblUKpdXPt9xNA6UqrV64+Sl2vyVqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XTnAQAAAAAAAAAAAAAAAAAAYJc42OX7/5nfBnb66IDnzk9+Q3H1jP9+/NITsCt5/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAA9NWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mZ7/b1qrXZ1bDzmr4820npjtL6weHG2Nn+lcfHybGU6vZgO/Su9AgAAAAAAAAAAAAAAAAAAgBdLfWFxplKtpnMKXQtnY1ccxpYLSa+zfDa/GLbUxODOd1DhORR2eGACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDb/BAAA///dgjNA") 166.45699ms ago: executing program 0 (id=5986): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) syz_io_uring_setup(0x362a, &(0x7f0000000040)={0x0, 0xb0da, 0x2, 0x2, 0x2f7}, &(0x7f0000000140), &(0x7f0000000180)) 149.81715ms ago: executing program 9 (id=5988): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x10) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 126.08206ms ago: executing program 0 (id=5989): r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) unshare(0x22020400) 125.58906ms ago: executing program 3 (id=5990): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xd8a88b3807bbf5cf, 0x0, 0x2000000, {0x0, 0x0, 0x7, 0x0, 0x40400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x0) 53.3459ms ago: executing program 9 (id=5991): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) io_pgetevents(0x0, 0x10, 0x0, 0x0, 0x0, 0x0) 52.67441ms ago: executing program 0 (id=5992): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1933, 0x4) sendto$inet(r0, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/209, 0xd1}, 0x2000) 12.176749ms ago: executing program 3 (id=5993): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0xfff], 0x0, 0x0, 0x1, 0x1}}, 0x40) 11.8743ms ago: executing program 9 (id=5994): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r1], 0x20}}, 0x0) 9.30577ms ago: executing program 8 (id=6003): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'vlan1\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'erspan0\x00'}}, 0x1e) 4.850279ms ago: executing program 9 (id=5995): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 0s ago: executing program 3 (id=5996): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x1114, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): mented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.529675][T13248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.540802][T13259] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.548003][T13259] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.555304][T13259] bridge_slave_0: entered allmulticast mode [ 162.561869][T13259] bridge_slave_0: entered promiscuous mode [ 162.572217][T13259] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.579402][T13259] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.586707][T13259] bridge_slave_1: entered allmulticast mode [ 162.593158][T13259] bridge_slave_1: entered promiscuous mode [ 162.625231][T13248] hsr_slave_0: entered promiscuous mode [ 162.631297][T13248] hsr_slave_1: entered promiscuous mode [ 162.637158][T13248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.645271][T13248] Cannot create hsr debugfs directory [ 162.652079][T13259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.670692][T13259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.700930][T13259] team0: Port device team_slave_0 added [ 162.710738][T13259] team0: Port device team_slave_1 added [ 162.736861][T13259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.743852][T13259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.769804][T13259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.790505][T13259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.797645][T13259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.823617][T13259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.848360][T13177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.892012][T13259] hsr_slave_0: entered promiscuous mode [ 162.900566][T13259] hsr_slave_1: entered promiscuous mode [ 162.906558][T13259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.914111][T13259] Cannot create hsr debugfs directory [ 162.939172][T13177] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.952340][T13248] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 162.975766][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.982876][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.992091][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.999199][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.020156][T13248] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 163.031357][T13248] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 163.049788][T13248] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 163.152433][T13248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.160971][T13177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.176682][T13248] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.190053][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.197139][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.214194][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.221348][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.243690][ T4786] bridge_slave_1: left allmulticast mode [ 163.249516][ T4786] bridge_slave_1: left promiscuous mode [ 163.255296][ T4786] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.263117][ T4786] bridge_slave_0: left allmulticast mode [ 163.268882][ T4786] bridge_slave_0: left promiscuous mode [ 163.274624][ T4786] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.355709][ T4786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.365192][ T4786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.374221][ T4786] bond0 (unregistering): Released all slaves [ 163.382534][ T4786] bond1 (unregistering): (slave veth3): Releasing backup interface [ 163.391415][ T4786] bond1 (unregistering): Released all slaves [ 163.413110][T13248] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 163.423626][T13248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.459986][ T4786] hsr_slave_0: left promiscuous mode [ 163.468179][ T4786] hsr_slave_1: left promiscuous mode [ 163.474014][ T4786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.481836][ T4786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.516229][ T4786] team0 (unregistering): Port device team_slave_1 removed [ 163.526479][ T4786] team0 (unregistering): Port device team_slave_0 removed [ 163.583260][T13177] veth0_vlan: entered promiscuous mode [ 163.591624][T13177] veth1_vlan: entered promiscuous mode [ 163.599626][T13248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.617448][T13177] veth0_macvtap: entered promiscuous mode [ 163.625169][T13177] veth1_macvtap: entered promiscuous mode [ 163.638661][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.649136][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.660202][T13177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.670631][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.681096][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.691641][T13177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.700937][T13177] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.709827][T13177] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.718621][T13177] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.727502][T13177] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.752158][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 163.752170][ T29] audit: type=1400 audit(2000000129.850:3971): avc: denied { mounton } for pid=13177 comm="syz-executor" path="/root/syzkaller.u5FB0Z/syz-tmp" dev="sda1" ino=1963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 163.766201][T13259] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 163.792554][ T29] audit: type=1400 audit(2000000129.890:3972): avc: denied { mount } for pid=13177 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 163.814874][ T29] audit: type=1400 audit(2000000129.890:3973): avc: denied { mount } for pid=13177 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 163.836950][ T29] audit: type=1400 audit(2000000129.890:3974): avc: denied { mounton } for pid=13177 comm="syz-executor" path="/root/syzkaller.u5FB0Z/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 163.863867][ T29] audit: type=1400 audit(2000000129.890:3975): avc: denied { mounton } for pid=13177 comm="syz-executor" path="/root/syzkaller.u5FB0Z/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=39069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 163.892871][ T29] audit: type=1400 audit(2000000130.000:3976): avc: denied { mounton } for pid=13177 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 163.895889][T13259] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 163.915994][ T29] audit: type=1400 audit(2000000130.000:3977): avc: denied { mount } for pid=13177 comm="syz-executor" name="/" dev="gadgetfs" ino=3928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 163.950492][T13259] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 163.961051][T13259] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 164.000386][ T29] audit: type=1400 audit(2000000130.100:3978): avc: denied { create } for pid=13314 comm="syz.8.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 164.053987][T13259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.064142][ T29] audit: type=1400 audit(2000000130.100:3979): avc: denied { setopt } for pid=13314 comm="syz.8.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 164.073372][T13324] loop8: detected capacity change from 0 to 512 [ 164.083798][ T29] audit: type=1400 audit(2000000130.100:3980): avc: denied { bind } for pid=13314 comm="syz.8.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 164.091652][T13324] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.116650][T13324] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 164.130882][T13259] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.148990][T13324] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 164.157077][T13324] System zones: 1-12 [ 164.157644][T13248] veth0_vlan: entered promiscuous mode [ 164.176222][ T6926] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.183334][ T6926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.191746][T13324] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.4165: corrupted in-inode xattr: e_value size too large [ 164.213117][T13248] veth1_vlan: entered promiscuous mode [ 164.221546][T13324] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.4165: couldn't read orphan inode 15 (err -117) [ 164.240600][T13324] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.241925][ T6926] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.259819][ T6926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.282642][T13248] veth0_macvtap: entered promiscuous mode [ 164.290445][T13248] veth1_macvtap: entered promiscuous mode [ 164.317197][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.327866][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.337811][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.348325][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.359019][T13248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.361220][T13177] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.367261][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.385688][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.395535][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.405972][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.416611][T13248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.436239][T13248] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.445060][T13248] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.453833][T13248] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.462645][T13248] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.484480][T13318] tunl0 speed is unknown, defaulting to 1000 [ 164.567582][T13259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.609533][T13347] loop8: detected capacity change from 0 to 8192 [ 164.640573][T13318] chnl_net:caif_netlink_parms(): no params data found [ 164.655644][T13347] loop8: p1 p2 p3 [ 164.665429][T13347] loop8: p1 start 51379968 is beyond EOD, truncated [ 164.685695][T13347] loop8: p3 size 100663552 extends beyond EOD, truncated [ 164.690257][T13259] veth0_vlan: entered promiscuous mode [ 164.702266][T13362] tunl0 speed is unknown, defaulting to 1000 [ 164.705882][T13259] veth1_vlan: entered promiscuous mode [ 164.757285][T13318] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.764476][T13318] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.772432][T13318] bridge_slave_0: entered allmulticast mode [ 164.782115][T13318] bridge_slave_0: entered promiscuous mode [ 164.809113][T13318] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.816373][T13318] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.834469][T13318] bridge_slave_1: entered allmulticast mode [ 164.841040][T13318] bridge_slave_1: entered promiscuous mode [ 164.896134][T13318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.913756][T13259] veth0_macvtap: entered promiscuous mode [ 164.921964][T13318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.934905][T13259] veth1_macvtap: entered promiscuous mode [ 164.976706][T13318] team0: Port device team_slave_0 added [ 164.995769][T13318] team0: Port device team_slave_1 added [ 165.008593][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.019140][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.029056][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.039683][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.049580][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.060659][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.083220][T13259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.124105][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.134664][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.144599][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.155091][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.164976][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.175480][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.219832][T13375] loop0: detected capacity change from 0 to 512 [ 165.223580][T13259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.244046][T13375] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 165.274594][T13318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.281593][T13318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.307703][T13318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.327835][T13318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.328275][T13375] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.4177: bad orphan inode 16 [ 165.334826][T13318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.370796][T13318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.381909][T13375] ext4_test_bit(bit=15, block=4) = 0 [ 165.387354][T13375] EXT4-fs (loop0): 1 orphan inode deleted [ 165.392486][T13259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.401998][T13259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.410721][T13259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.419558][T13259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.433182][T13375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.473292][T13375] EXT4-fs error (device loop0): __ext4_new_inode:1071: comm syz.0.4177: reserved inode found cleared - inode=9 [ 165.525323][T13373] Set syz1 is full, maxelem 65536 reached [ 165.532179][ T6109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.578660][T13318] hsr_slave_0: entered promiscuous mode [ 165.585578][T13318] hsr_slave_1: entered promiscuous mode [ 165.591510][T13318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.599399][T13318] Cannot create hsr debugfs directory [ 165.827488][T13409] loop0: detected capacity change from 0 to 512 [ 165.838614][T13409] EXT4-fs: Ignoring removed i_version option [ 165.845747][T13409] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 165.859045][T13409] EXT4-fs (loop0): failed to open journal device unknown-block(128,0) -6 [ 165.885887][T13409] syzkaller1: entered promiscuous mode [ 165.891408][T13409] syzkaller1: entered allmulticast mode [ 165.905406][T13406] loop8: detected capacity change from 0 to 8192 [ 165.932804][T13318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 165.971563][T13318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 165.987839][T13419] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 166.001487][T13318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.020922][T13419] vhci_hcd: invalid port number 23 [ 166.022602][T13318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.108434][T13428] loop0: detected capacity change from 0 to 164 [ 166.134921][T13318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.142099][T13428] bio_check_eod: 47 callbacks suppressed [ 166.142117][T13428] syz.0.4199: attempt to access beyond end of device [ 166.142117][T13428] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 166.177462][T13318] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.184644][T13428] syz.0.4199: attempt to access beyond end of device [ 166.184644][T13428] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 166.218368][ T4793] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.225473][ T4793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.246799][ T4793] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.253972][ T4793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.350691][T13446] loop3: detected capacity change from 0 to 512 [ 166.383434][T13318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.428340][T13446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.479798][T13464] netlink: 'syz.0.4210': attribute type 3 has an invalid length. [ 166.522908][T13259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.544999][T13474] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 166.575587][T13318] veth0_vlan: entered promiscuous mode [ 166.588102][T13318] veth1_vlan: entered promiscuous mode [ 166.621035][T13318] veth0_macvtap: entered promiscuous mode [ 166.657814][T13318] veth1_macvtap: entered promiscuous mode [ 166.671662][T13318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.682216][T13318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.692304][T13318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.702854][T13318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.712748][T13318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.723222][T13318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.733147][T13318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.743590][T13318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.754693][T13318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.767632][T13318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.778211][T13318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.788136][T13318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.798636][T13318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.798706][T13318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.798723][T13318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.798734][T13318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.798749][T13318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.799658][T13318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.802635][T13318] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.802733][T13318] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.802765][T13318] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.802795][T13318] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.807162][T13491] ip6gretap1: entered allmulticast mode [ 166.850498][T13495] dvmrp0: entered allmulticast mode [ 166.937313][T13497] pimreg: entered allmulticast mode [ 167.424524][T13547] loop8: detected capacity change from 0 to 128 [ 167.631966][T13562] loop9: detected capacity change from 0 to 512 [ 167.670756][T13562] EXT4-fs (loop9): too many log groups per flexible block group [ 167.678630][T13562] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 167.700630][T13562] EXT4-fs (loop9): mount failed [ 167.730035][T13572] dummy0: entered promiscuous mode [ 167.748874][T13572] dummy0: left promiscuous mode [ 167.775131][T13576] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 167.856807][T13585] loop0: detected capacity change from 0 to 512 [ 167.863442][T13585] EXT4-fs: Ignoring removed bh option [ 167.873490][T13582] smc: net device bond0 applied user defined pnetid SYZ0 [ 167.879753][T13585] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 167.883741][T13582] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 167.899023][T13585] EXT4-fs (loop0): 1 truncate cleaned up [ 167.901504][T13582] smc: net device bond0 erased user defined pnetid SYZ0 [ 167.906526][T13585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.911833][T13582] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 167.989978][ T6109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.058688][T13602] __nla_validate_parse: 6 callbacks suppressed [ 168.058705][T13602] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4266'. [ 168.076954][T13602] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4266'. [ 168.093397][T13602] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4266'. [ 168.107821][T13602] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4266'. [ 168.147207][T13602] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4266'. [ 168.164252][T13602] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4266'. [ 168.271212][T13617] loop9: detected capacity change from 0 to 256 [ 168.296416][T13617] msdos: Bad value for 'time_offset' [ 168.312122][T13617] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4279'. [ 168.321493][T13617] (unnamed net_device) (uninitialized): option ad_select: invalid value (110) [ 168.360721][T13627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4272'. [ 168.638261][T13619] Set syz1 is full, maxelem 65536 reached [ 168.735067][T13647] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4282'. [ 168.753804][T13650] dummy0: entered promiscuous mode [ 168.760666][T13650] dummy0: left promiscuous mode [ 168.872092][T13658] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4286'. [ 168.890101][T13661] loop9: detected capacity change from 0 to 1024 [ 168.897172][T13661] EXT4-fs: Ignoring removed nobh option [ 168.902981][T13661] EXT4-fs: Ignoring removed bh option [ 168.914553][T13663] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 168.928901][T13661] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.007472][T13248] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.124279][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 169.124295][ T29] audit: type=1326 audit(2000000135.220:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13691 comm="syz.9.4302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21695bcda9 code=0x7ffc0000 [ 169.197729][ T29] audit: type=1400 audit(2000000135.230:4155): avc: denied { mounton } for pid=13687 comm="syz.8.4300" path="/proc/82/task" dev="proc" ino=39914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 169.220491][ T29] audit: type=1326 audit(2000000135.230:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13691 comm="syz.9.4302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f21695bcda9 code=0x7ffc0000 [ 169.244274][ T29] audit: type=1326 audit(2000000135.230:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13691 comm="syz.9.4302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21695bcda9 code=0x7ffc0000 [ 169.267879][ T29] audit: type=1326 audit(2000000135.230:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13691 comm="syz.9.4302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21695bcda9 code=0x7ffc0000 [ 169.291599][ T29] audit: type=1400 audit(2000000135.280:4159): avc: denied { create } for pid=13695 comm="syz.9.4304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.311932][ T29] audit: type=1400 audit(2000000135.280:4160): avc: denied { bind } for pid=13695 comm="syz.9.4304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.332119][ T29] audit: type=1400 audit(2000000135.280:4161): avc: denied { write } for pid=13695 comm="syz.9.4304" path="socket:[39931]" dev="sockfs" ino=39931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.444673][T13708] netlink: 'syz.3.4309': attribute type 13 has an invalid length. [ 169.455112][T13708] gretap0: refused to change device tx_queue_len [ 169.462050][T13708] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 169.588314][ T29] audit: type=1326 audit(2000000135.690:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.0.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8077cda9 code=0x7ffc0000 [ 169.612087][ T29] audit: type=1326 audit(2000000135.690:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.0.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8077cda9 code=0x7ffc0000 [ 169.800017][T13733] sd 0:0:1:0: device reset [ 170.031259][T13731] Set syz1 is full, maxelem 65536 reached [ 170.037859][T13746] wireguard0: entered promiscuous mode [ 170.043443][T13746] wireguard0: entered allmulticast mode [ 170.331983][T13786] loop4: detected capacity change from 0 to 512 [ 170.377220][T13786] EXT4-fs (loop4): too many log groups per flexible block group [ 170.384985][T13786] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 170.401375][T13786] EXT4-fs (loop4): mount failed [ 170.524682][T13812] wireguard0: entered promiscuous mode [ 170.530278][T13812] wireguard0: entered allmulticast mode [ 170.541304][T13815] loop8: detected capacity change from 0 to 512 [ 170.566845][T13815] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.589382][T13815] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.609589][T13823] loop4: detected capacity change from 0 to 512 [ 170.622653][T13823] EXT4-fs: Ignoring removed orlov option [ 170.639355][T13823] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.652724][T13823] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 170.687480][T13823] EXT4-fs (loop4): orphan cleanup on readonly fs [ 170.709158][T13177] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.723268][T13832] loop9: detected capacity change from 0 to 256 [ 170.724403][T13823] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4357: bg 0: block 248: padding at end of block bitmap is not set [ 170.793475][T13823] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.4357: Failed to acquire dquot type 1 [ 170.846995][T13840] tunl0 speed is unknown, defaulting to 1000 [ 170.858155][T13823] EXT4-fs (loop4): 1 truncate cleaned up [ 170.878252][T13823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.935855][T13318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.986700][T13853] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 171.037702][T13866] xt_hashlimit: max too large, truncated to 1048576 [ 171.908632][T13911] geneve0: entered allmulticast mode [ 171.937948][T13920] tunl0 speed is unknown, defaulting to 1000 [ 171.978278][T13924] netlink: 'syz.8.4398': attribute type 5 has an invalid length. [ 171.988988][T13926] 9pnet: p9_errstr2errno: server reported unknown error @΂(QNd [ 172.133768][T13939] loop4: detected capacity change from 0 to 256 [ 172.147008][T13943] loop0: detected capacity change from 0 to 512 [ 172.148004][T13939] msdos: Bad value for 'time_offset' [ 172.164009][T13920] lo: entered promiscuous mode [ 172.169442][T13943] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 172.179897][T13920] tunl0: entered promiscuous mode [ 172.186914][T13920] gre0: entered promiscuous mode [ 172.193631][T13920] gretap0: entered promiscuous mode [ 172.193712][T13943] EXT4-fs (loop0): 1 truncate cleaned up [ 172.202749][T13920] erspan0: entered promiscuous mode [ 172.210838][T13943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.212018][T13920] ip_vti0: entered promiscuous mode [ 172.229710][T13920] ip6_vti0: entered promiscuous mode [ 172.236730][T13920] sit0: entered promiscuous mode [ 172.242794][T13920] ip6tnl0: entered promiscuous mode [ 172.250621][T13920] ip6gre0: entered promiscuous mode [ 172.251321][ T6109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.257021][T13920] syz_tun: entered promiscuous mode [ 172.271061][T13920] ip6gretap0: entered promiscuous mode [ 172.280186][T13920] bridge0: entered promiscuous mode [ 172.286485][T13920] vcan0: entered promiscuous mode [ 172.291758][T13920] bond0: entered promiscuous mode [ 172.296927][T13920] bond_slave_0: entered promiscuous mode [ 172.302606][T13920] bond_slave_1: entered promiscuous mode [ 172.310684][T13920] team0: entered promiscuous mode [ 172.315761][T13920] team_slave_0: entered promiscuous mode [ 172.321650][T13920] team_slave_1: entered promiscuous mode [ 172.329139][T13920] dummy0: entered promiscuous mode [ 172.335538][T13920] nlmon0: entered promiscuous mode [ 172.341847][T13920] caif0: entered promiscuous mode [ 172.346953][T13920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.362410][T13939] (unnamed net_device) (uninitialized): option ad_select: invalid value (110) [ 172.372989][T13950] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 172.536509][T13963] loop9: detected capacity change from 0 to 1024 [ 172.549015][T13963] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 172.560000][T13963] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 172.575685][T13963] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 172.602074][T13963] EXT4-fs (loop9): invalid journal inode [ 172.630137][T13969] program syz.8.4418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.639627][T13963] EXT4-fs (loop9): can't get journal size [ 172.650303][T13963] EXT4-fs error (device loop9): ext4_protect_reserved_inode:182: inode #3: comm syz.9.4415: blocks 2-2 from inode overlap system zone [ 172.667240][T13963] EXT4-fs (loop9): failed to initialize system zone (-117) [ 172.689818][T13963] EXT4-fs (loop9): mount failed [ 172.867394][T13997] vhci_hcd: invalid port number 0 [ 172.892051][T14007] loop8: detected capacity change from 0 to 128 [ 172.900914][T14007] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.916688][T14007] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 172.970163][T13177] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.999249][T13991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.008343][T13991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.161022][T14032] __nla_validate_parse: 10 callbacks suppressed [ 173.161070][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4447'. [ 173.361801][T14068] wireguard0: entered promiscuous mode [ 173.367433][T14068] wireguard0: entered allmulticast mode [ 173.523889][T14086] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4470'. [ 173.533094][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4470'. [ 173.559378][T14088] netlink: 'syz.8.4472': attribute type 3 has an invalid length. [ 173.572434][T14090] loop3: detected capacity change from 0 to 128 [ 173.615510][ T6926] kworker/u8:10: attempt to access beyond end of device [ 173.615510][ T6926] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 173.639700][T14096] sd 0:0:1:0: device reset [ 173.722475][T14110] loop3: detected capacity change from 0 to 128 [ 173.734514][T14113] loop9: detected capacity change from 0 to 128 [ 173.787812][T14113] syz.9.4484: attempt to access beyond end of device [ 173.787812][T14113] loop9: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 173.833481][ T11] kworker/u8:0: attempt to access beyond end of device [ 173.833481][ T11] loop9: rw=1, sector=233, nr_sectors = 808 limit=128 [ 173.961012][T14139] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4496'. [ 173.972838][T14139] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4496'. [ 174.021927][T14139] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4496'. [ 174.039060][T14139] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4496'. [ 174.063897][T14139] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4496'. [ 174.098252][T14139] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4496'. [ 174.168634][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 174.168661][ T29] audit: type=1400 audit(2000000140.276:4334): avc: denied { create } for pid=14165 comm="syz.3.4508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 174.245977][ T29] audit: type=1400 audit(2000000140.276:4335): avc: denied { create } for pid=14165 comm="syz.3.4508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 174.265556][ T29] audit: type=1400 audit(2000000140.276:4336): avc: denied { write } for pid=14165 comm="syz.3.4508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 174.285760][ T29] audit: type=1400 audit(2000000140.276:4337): avc: denied { nlmsg_write } for pid=14165 comm="syz.3.4508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 174.306632][ T29] audit: type=1400 audit(2000000140.336:4338): avc: denied { read write } for pid=6109 comm="syz-executor" name="loop0" dev="devtmpfs" ino=591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.329895][ T29] audit: type=1400 audit(2000000140.336:4339): avc: denied { open } for pid=6109 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.353315][ T29] audit: type=1400 audit(2000000140.336:4340): avc: denied { ioctl } for pid=6109 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=591 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.378646][ T29] audit: type=1400 audit(2000000140.376:4341): avc: denied { execmem } for pid=14174 comm="syz.8.4512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 174.487792][ T29] audit: type=1400 audit(2000000140.556:4342): avc: denied { name_bind } for pid=14171 comm="syz.3.4511" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 174.509659][ T29] audit: type=1400 audit(2000000140.586:4343): avc: denied { create } for pid=14178 comm="syz.9.4513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 174.597642][T14181] hub 6-0:1.0: USB hub found [ 174.608837][T14181] hub 6-0:1.0: 8 ports detected [ 174.710644][T14192] wireguard0: entered promiscuous mode [ 174.716171][T14192] wireguard0: entered allmulticast mode [ 174.951234][T14212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.971845][T14212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.124257][T14239] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.219643][T14250] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.228540][T14250] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.237371][T14250] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.246170][T14250] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.270596][T14250] vxlan0: entered promiscuous mode [ 175.275915][T14250] vxlan0: entered allmulticast mode [ 175.285965][T14250] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.294894][T14250] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.303780][T14250] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.312736][T14250] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.326502][T14254] 9pnet: p9_errstr2errno: server reported unknown error @΂(QNd [ 175.409267][T14261] netlink: 'syz.9.4552': attribute type 3 has an invalid length. [ 175.420427][T14261] netlink: 'syz.9.4552': attribute type 3 has an invalid length. [ 175.625022][T14276] infiniband syz!: set active [ 175.629857][T14276] infiniband syz!: added team_slave_0 [ 175.638600][T14290] tunl0 speed is unknown, defaulting to 1000 [ 175.658332][T14296] SELinux: syz.4.4569 (14296) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 175.676845][T14276] RDS/IB: syz!: added [ 175.680863][T14276] smc: adding ib device syz! with port count 1 [ 175.694707][T14276] smc: ib device syz! port 1 has pnetid [ 175.900224][T14313] program syz.0.4575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.925140][T14313] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 176.277540][T14330] 9pnet: p9_errstr2errno: server reported unknown error [ 176.309050][T14332] loop3: detected capacity change from 0 to 128 [ 176.328132][T14332] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.340810][T14332] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.393788][T13259] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.434929][T14338] 9pnet: p9_errstr2errno: server reported unknown error @΂(QNd [ 176.578779][T14348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4590'. [ 176.656797][T14353] loop3: detected capacity change from 0 to 128 [ 176.713821][T14353] syz.3.4592: attempt to access beyond end of device [ 176.713821][T14353] loop3: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 176.741603][ T4786] kworker/u8:8: attempt to access beyond end of device [ 176.741603][ T4786] loop3: rw=1, sector=233, nr_sectors = 808 limit=128 [ 176.832631][T14370] sd 0:0:1:0: device reset [ 176.969496][T14391] bridge0: entered promiscuous mode [ 176.975094][T14391] macvlan2: entered promiscuous mode [ 176.982005][T14391] bridge0: port 3(macvlan2) entered blocking state [ 176.988718][T14391] bridge0: port 3(macvlan2) entered disabled state [ 176.998693][T14391] macvlan2: entered allmulticast mode [ 177.004228][T14391] bridge0: entered allmulticast mode [ 177.010347][T14391] macvlan2: left allmulticast mode [ 177.015535][T14391] bridge0: left allmulticast mode [ 177.023273][T14391] bridge0: left promiscuous mode [ 177.061579][T14396] rdma_op ffff8881183b2980 conn xmit_rdma 0000000000000000 [ 177.373669][T14446] xt_hashlimit: max too large, truncated to 1048576 [ 177.491821][T14460] wireguard0: entered promiscuous mode [ 177.497378][T14460] wireguard0: entered allmulticast mode [ 177.594003][T14464] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 177.607601][T14464] bond1: (slave vti0): Error -95 calling set_mac_address [ 177.684068][T14477] loop9: detected capacity change from 0 to 8192 [ 177.843103][T14490] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 177.850751][T14490] FAT-fs (loop9): Filesystem has been set read-only [ 177.886362][T14491] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 177.897162][T14486] loop8: detected capacity change from 0 to 8192 [ 178.413874][T14541] loop8: detected capacity change from 0 to 512 [ 178.420495][T14541] ext4: Unknown parameter 'fsuuid' [ 178.433228][T14541] loop8: detected capacity change from 0 to 512 [ 178.503141][T14553] loop0: detected capacity change from 0 to 128 [ 178.548256][T14559] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 178.548256][T14559] program syz.9.4688 not setting count and/or reply_len properly [ 178.578337][T14553] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.601435][T14553] ext4 filesystem being mounted at /683/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.665682][ T6109] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.955941][T14601] loop9: detected capacity change from 0 to 512 [ 178.985678][T14601] EXT4-fs: Ignoring removed orlov option [ 179.002790][T14601] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 179.015726][T14601] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 179.023951][T14601] EXT4-fs (loop9): orphan cleanup on readonly fs [ 179.032966][T14601] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4706: bg 0: block 248: padding at end of block bitmap is not set [ 179.050631][T14601] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.4706: Failed to acquire dquot type 1 [ 179.062843][T14601] EXT4-fs (loop9): 1 truncate cleaned up [ 179.076551][T14601] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.103509][T14608] __nla_validate_parse: 5 callbacks suppressed [ 179.103546][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4708'. [ 179.122580][T13248] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.234637][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 179.234666][ T29] audit: type=1400 audit(2000000145.346:4542): avc: denied { relabelfrom } for pid=14615 comm="syz.8.4712" name="" dev="pipefs" ino=42590 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 179.267072][T14620] SELinux: Context system_u:object_r:auditd_initrc_exec_t:s0 is not valid (left unmapped). [ 179.286802][T14623] loop3: detected capacity change from 0 to 512 [ 179.293350][T14623] EXT4-fs: Ignoring removed nobh option [ 179.299031][T14623] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.314409][ T29] audit: type=1400 audit(2000000145.386:4543): avc: denied { relabelto } for pid=14615 comm="syz.8.4712" name="" dev="pipefs" ino=42590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:auditd_initrc_exec_t:s0" [ 179.379856][T14623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.450451][ T29] audit: type=1400 audit(2000000145.556:4544): avc: denied { write } for pid=14634 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 179.485023][T14637] netlink: 'syz.8.4722': attribute type 3 has an invalid length. [ 179.558691][ T29] audit: type=1400 audit(2000000145.666:4545): avc: denied { bind } for pid=14641 comm="syz.9.4724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 179.598544][ T29] audit: type=1400 audit(2000000145.696:4546): avc: denied { write } for pid=14643 comm="syz.9.4725" name="rt_acct" dev="proc" ino=4026532790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 179.621716][ T29] audit: type=1400 audit(2000000145.696:4547): avc: denied { write } for pid=14643 comm="syz.9.4725" path="socket:[43703]" dev="sockfs" ino=43703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 179.699976][T13259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.713034][ T29] audit: type=1326 audit(2000000145.806:4548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14652 comm="syz.0.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8077cda9 code=0x7ffc0000 [ 179.736704][ T29] audit: type=1326 audit(2000000145.806:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14652 comm="syz.0.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8077cda9 code=0x7ffc0000 [ 179.760275][ T29] audit: type=1326 audit(2000000145.806:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14652 comm="syz.0.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb8077cda9 code=0x7ffc0000 [ 179.784089][ T29] audit: type=1326 audit(2000000145.806:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14652 comm="syz.0.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8077cda9 code=0x7ffc0000 [ 179.956173][T14670] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4747'. [ 180.025727][T14676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.049468][T14676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.062502][T14680] macvlan2: entered promiscuous mode [ 180.069233][T14680] bridge0: port 3(macvlan2) entered blocking state [ 180.075990][T14680] bridge0: port 3(macvlan2) entered disabled state [ 180.082911][T14680] macvlan2: entered allmulticast mode [ 180.088346][T14680] bridge0: entered allmulticast mode [ 180.094679][T14680] macvlan2: left allmulticast mode [ 180.100014][T14680] bridge0: left allmulticast mode [ 180.125776][T14684] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 180.256009][T14703] bond2: entered promiscuous mode [ 180.261080][T14703] bond2: entered allmulticast mode [ 180.266510][T14703] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.276299][T14703] bond2 (unregistering): Released all slaves [ 180.434057][T14714] team0: Port device vlan2 added [ 180.613119][T14716] bridge0: entered promiscuous mode [ 180.632137][T14720] loop9: detected capacity change from 0 to 128 [ 180.638551][T14716] macvlan2: entered promiscuous mode [ 180.646187][T14720] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.661674][T14716] bridge0: port 3(macvlan2) entered blocking state [ 180.668335][T14716] bridge0: port 3(macvlan2) entered disabled state [ 180.679049][T14720] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 180.733405][T14716] macvlan2: entered allmulticast mode [ 180.738863][T14716] bridge0: entered allmulticast mode [ 180.773187][T14716] macvlan2: left allmulticast mode [ 180.778381][T14716] bridge0: left allmulticast mode [ 180.797030][T14720] EXT4-fs error (device loop9): dx_make_map:1328: inode #2: block 63: comm syz.9.4760: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 180.823884][T14731] loop0: detected capacity change from 0 to 512 [ 180.827618][T14716] bridge0: left promiscuous mode [ 180.832607][T14721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.836656][T14720] EXT4-fs error (device loop9) in do_split:2055: Corrupt filesystem [ 180.852035][T14721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.870038][T14731] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 180.883913][T13248] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.926174][T14731] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.4764: corrupted in-inode xattr: e_name out of bounds [ 180.991309][T14731] EXT4-fs (loop0): Remounting filesystem read-only [ 181.018568][T14731] EXT4-fs (loop0): 1 truncate cleaned up [ 181.038578][T14731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.054503][T14731] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 181.061511][T14731] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.213927][T14760] syzkaller0: entered promiscuous mode [ 181.283865][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4784'. [ 181.292968][T14774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4784'. [ 181.353792][T14784] loop8: detected capacity change from 0 to 512 [ 181.361257][T14784] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.396955][T14784] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.416700][T14784] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #2: comm syz.8.4789: corrupted inode contents [ 181.428745][T14784] EXT4-fs error (device loop8): ext4_dirty_inode:6042: inode #2: comm syz.8.4789: mark_inode_dirty error [ 181.449014][T14784] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #2: comm syz.8.4789: corrupted inode contents [ 181.482084][T13177] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.682289][T14807] loop8: detected capacity change from 0 to 512 [ 181.701274][T14807] EXT4-fs: Ignoring removed orlov option [ 181.717739][T14807] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 181.739760][T14807] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 181.748032][T14807] EXT4-fs (loop8): orphan cleanup on readonly fs [ 181.773359][T14807] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4798: bg 0: block 248: padding at end of block bitmap is not set [ 181.788914][T14807] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.4798: Failed to acquire dquot type 1 [ 181.789315][T14812] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 181.803412][T14807] EXT4-fs (loop8): 1 truncate cleaned up [ 181.819219][T14807] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.857585][T13177] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.095254][T14825] loop9: detected capacity change from 0 to 1024 [ 182.117142][T14825] EXT4-fs: Ignoring removed mblk_io_submit option [ 182.218707][T14825] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.282863][T13248] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.468494][T14840] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 182.498413][T14842] loop3: detected capacity change from 0 to 512 [ 182.527006][T14842] EXT4-fs: Ignoring removed orlov option [ 182.534841][T14848] loop4: detected capacity change from 0 to 256 [ 182.541233][T14842] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 182.550238][T14848] FAT-fs (loop4): bogus number of FAT sectors [ 182.555359][T14842] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 182.556472][T14848] FAT-fs (loop4): Can't find a valid FAT filesystem [ 182.566794][T14842] EXT4-fs (loop3): orphan cleanup on readonly fs [ 182.579186][T14842] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4812: bg 0: block 248: padding at end of block bitmap is not set [ 182.596838][T14842] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.4812: Failed to acquire dquot type 1 [ 182.613260][T14842] EXT4-fs (loop3): 1 truncate cleaned up [ 182.617615][T14855] netlink: 'syz.9.4819': attribute type 10 has an invalid length. [ 182.629690][T14842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.642489][T14855] syz_tun: entered promiscuous mode [ 182.658325][T14855] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 182.670507][T13259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.676784][T14855] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4819'. [ 182.743001][T14867] loop4: detected capacity change from 0 to 512 [ 182.750352][T14867] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 182.764803][T14867] EXT4-fs (loop4): 1 truncate cleaned up [ 182.770982][T14867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.790100][T14873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4825'. [ 182.799840][T14874] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 182.834260][T14867] loop4: detected capacity change from 512 to 64 [ 182.847606][T14867] syz.4.4824: attempt to access beyond end of device [ 182.847606][T14867] loop4: rw=2049, sector=76, nr_sectors = 2 limit=64 [ 182.860956][T14867] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 38) [ 182.872300][T14867] Buffer I/O error on device loop4, logical block 38 [ 182.880991][T14880] pim6reg: entered allmulticast mode [ 182.888185][T14880] pim6reg: left allmulticast mode [ 182.897049][T13318] EXT4-fs warning (device loop4): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 182.910875][T13318] EXT4-fs warning (device loop4): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 182.924624][T13318] EXT4-fs warning (device loop4): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 182.938209][T13318] EXT4-fs warning (device loop4): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 182.951904][T13318] EXT4-fs warning (device loop4): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 182.965916][T13318] EXT4-fs warning (device loop4): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 182.979546][T13318] EXT4-fs warning (device loop4): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 182.993425][T13318] EXT4-fs warning (device loop4): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 183.009384][T13318] EXT4-fs warning (device loop4): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 183.206275][T13318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.224395][ T6926] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.266516][ T6926] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.308431][T14889] loop0: detected capacity change from 0 to 512 [ 183.318385][T14890] loop3: detected capacity change from 0 to 256 [ 183.325353][T14889] EXT4-fs: Ignoring removed orlov option [ 183.331889][ T6926] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.335974][T14890] FAT-fs (loop3): bogus number of FAT sectors [ 183.348347][T14890] FAT-fs (loop3): Can't find a valid FAT filesystem [ 183.351807][T14889] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 183.364527][T14889] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 183.373226][T14889] EXT4-fs (loop0): orphan cleanup on readonly fs [ 183.382655][T14889] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4832: bg 0: block 248: padding at end of block bitmap is not set [ 183.399095][T14889] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.4832: Failed to acquire dquot type 1 [ 183.413666][ T6926] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.422695][T14889] EXT4-fs (loop0): 1 truncate cleaned up [ 183.430883][T14889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.478475][T14891] tunl0 speed is unknown, defaulting to 1000 [ 183.489105][T14909] netlink: 'syz.3.4837': attribute type 6 has an invalid length. [ 183.505810][ T6926] bridge_slave_1: left allmulticast mode [ 183.511562][ T6926] bridge_slave_1: left promiscuous mode [ 183.517274][ T6926] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.536182][ T6109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.546926][ T6926] bridge_slave_0: left allmulticast mode [ 183.552579][ T6926] bridge_slave_0: left promiscuous mode [ 183.558402][ T6926] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.679939][ T6926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.685036][T14932] 9pnet: p9_errstr2errno: server reported unknown error @΂(QNd [ 183.698320][ T6926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.703597][T14927] loop0: detected capacity change from 0 to 8192 [ 183.707056][T14930] loop9: detected capacity change from 0 to 2048 [ 183.720653][ T6926] bond0 (unregistering): Released all slaves [ 183.728884][T14914] netlink: 'syz.3.4840': attribute type 5 has an invalid length. [ 183.791449][T14930] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.857859][ T6926] hsr_slave_0: left promiscuous mode [ 183.863254][ T6926] hsr_slave_1: left promiscuous mode [ 183.863619][ T6926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.876007][ T6926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.893991][ T6926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.894033][ T6926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.904810][ T6926] veth1_macvtap: left promiscuous mode [ 183.904884][ T6926] veth0_macvtap: left promiscuous mode [ 183.904967][ T6926] veth1_vlan: left promiscuous mode [ 183.905010][ T6926] veth0_vlan: left promiscuous mode [ 183.999315][T13248] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.001856][ T6926] team0 (unregistering): Port device team_slave_1 removed [ 184.007543][ T6926] team0 (unregistering): Port device team_slave_0 removed [ 184.105827][T14949] SELinux: syz.0.4852 (14949) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 184.225242][T14891] chnl_net:caif_netlink_parms(): no params data found [ 184.298550][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 184.298566][ T29] audit: type=1400 audit(2000000150.406:4715): avc: denied { block_suspend } for pid=14971 comm="syz.8.4860" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 184.329589][T14970] geneve2: entered promiscuous mode [ 184.334903][T14970] geneve2: entered allmulticast mode [ 184.348601][T14891] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.355975][T14891] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.363305][T14891] bridge_slave_0: entered allmulticast mode [ 184.370611][T14891] bridge_slave_0: entered promiscuous mode [ 184.386704][T14891] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.393864][T14891] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.407627][T14891] bridge_slave_1: entered allmulticast mode [ 184.414523][T14891] bridge_slave_1: entered promiscuous mode [ 184.442568][ T29] audit: type=1400 audit(2000000150.546:4716): avc: denied { ioctl } for pid=14980 comm="syz.8.4863" path="socket:[44370]" dev="sockfs" ino=44370 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 184.478552][ T29] audit: type=1400 audit(2000000150.586:4717): avc: denied { create } for pid=14982 comm="syz.0.4864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.501749][T14891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.513834][T14983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4864'. [ 184.515059][ T29] audit: type=1400 audit(2000000150.616:4718): avc: denied { write } for pid=14982 comm="syz.0.4864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.542999][ T29] audit: type=1400 audit(2000000150.616:4719): avc: denied { nlmsg_write } for pid=14982 comm="syz.0.4864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.574466][T14891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.593589][T14987] netlink: 'syz.0.4866': attribute type 3 has an invalid length. [ 184.607750][T14987] netlink: 'syz.0.4866': attribute type 3 has an invalid length. [ 184.633646][ T29] audit: type=1400 audit(2000000150.736:4720): avc: denied { name_bind } for pid=14990 comm="syz.8.4868" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 184.655043][ T29] audit: type=1400 audit(2000000150.736:4721): avc: denied { node_bind } for pid=14990 comm="syz.8.4868" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 184.675565][ T29] audit: type=1400 audit(2000000150.736:4722): avc: denied { create } for pid=14988 comm="syz.9.4867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 184.705391][T14891] team0: Port device team_slave_0 added [ 184.717225][T14891] team0: Port device team_slave_1 added [ 184.732908][ T29] audit: type=1400 audit(2000000150.766:4723): avc: denied { write } for pid=14988 comm="syz.9.4867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 184.753137][ T29] audit: type=1400 audit(2000000150.816:4724): avc: denied { ioctl } for pid=14993 comm="syz.3.4869" path="socket:[44404]" dev="sockfs" ino=44404 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 184.793839][T14891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.800915][T14891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.826977][T14891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.857034][T15002] wireguard0: entered promiscuous mode [ 184.862605][T15002] wireguard0: entered allmulticast mode [ 184.872888][T14891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.879956][T14891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.905900][T14891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.009196][T14891] hsr_slave_0: entered promiscuous mode [ 185.017583][T14891] hsr_slave_1: entered promiscuous mode [ 185.027933][T14891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.047367][T14891] Cannot create hsr debugfs directory [ 185.089839][T15022] loop0: detected capacity change from 0 to 1024 [ 185.104714][T15022] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.141263][T15022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.178376][ T6109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.195105][T15033] loop9: detected capacity change from 0 to 128 [ 185.201490][T15029] loop3: detected capacity change from 0 to 512 [ 185.235730][T15033] ext4 filesystem being mounted at /142/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 185.277635][T15038] rdma_op ffff88810b37f980 conn xmit_rdma 0000000000000000 [ 185.300354][T15029] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.348321][T15046] bond1: entered promiscuous mode [ 185.353401][T15046] bond1: entered allmulticast mode [ 185.358938][T15046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.372264][T15046] bond1 (unregistering): Released all slaves [ 185.383535][T15055] program syz.8.4894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.444813][T15059] loop3: detected capacity change from 0 to 2048 [ 185.480777][T14891] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 185.502854][T14891] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 185.513371][T14891] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 185.522375][T14891] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 185.532774][T15071] ip6tnl1: entered promiscuous mode [ 185.538084][T15071] ip6tnl1: entered allmulticast mode [ 185.551410][T15069] hub 6-0:1.0: USB hub found [ 185.556260][T15069] hub 6-0:1.0: 8 ports detected [ 185.580597][T14891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.591635][T14891] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.601233][ T4786] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.608352][ T4786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.621448][ T4786] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.628610][ T4786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.658444][T14891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.694047][T15080] netlink: 'syz.8.4905': attribute type 1 has an invalid length. [ 185.701957][T15080] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4905'. [ 185.751242][T14891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.912203][T14891] veth0_vlan: entered promiscuous mode [ 185.923038][T14891] veth1_vlan: entered promiscuous mode [ 185.941116][T14891] veth0_macvtap: entered promiscuous mode [ 185.948797][T14891] veth1_macvtap: entered promiscuous mode [ 185.963246][T14891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.969971][T15128] loop3: detected capacity change from 0 to 1024 [ 185.973822][T14891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.989987][T14891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.000509][T14891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.010387][T14891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.021006][T14891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.030847][T14891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.041297][T14891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.052525][T14891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.062955][T14891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.073547][T14891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.083586][T14891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.094157][T14891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.103976][T14891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.114494][T14891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.124398][T14891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.134873][T14891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.146001][T14891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.162773][T14891] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.171679][T14891] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.180486][T14891] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.189268][T14891] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.330324][T15149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.345764][T15151] geneve2: entered promiscuous mode [ 186.351003][T15151] geneve2: entered allmulticast mode [ 186.356662][T15149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.458824][T15168] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 186.467663][T15168] SELinux: failed to load policy [ 186.606677][T15183] loop0: detected capacity change from 0 to 512 [ 186.614203][T15181] tunl0 speed is unknown, defaulting to 1000 [ 186.649216][T15183] ext4 filesystem being mounted at /740/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.699627][T15187] 9pnet: p9_errstr2errno: server reported unknown error [ 186.924892][T15215] 9pnet: p9_errstr2errno: server reported unknown error [ 187.044248][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888129959200: rx timeout, send abort [ 187.052907][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888129959200: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 187.056663][T15219] loop3: detected capacity change from 0 to 8192 [ 187.134476][T15219] loop3: p1 p2 p3 p4 [ 187.138700][T15219] loop3: p1 start 51379968 is beyond EOD, truncated [ 187.168325][T15219] loop3: p3 size 100663552 extends beyond EOD, truncated [ 187.197859][T15219] loop3: p4 size 81920 extends beyond EOD, truncated [ 187.230218][T15229] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4967'. [ 187.294900][T15235] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 187.304113][T15224] loop4: detected capacity change from 0 to 8192 [ 187.323951][T15238] tipc: Started in network mode [ 187.328936][T15238] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 187.345164][T15240] loop9: detected capacity change from 0 to 512 [ 187.355847][T15238] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 187.364284][T15238] tipc: Enabled bearer , priority 10 [ 187.386295][T15240] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4972: bg 0: block 248: padding at end of block bitmap is not set [ 187.406267][T15240] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.4972: Failed to acquire dquot type 1 [ 187.419532][T15240] EXT4-fs (loop9): 1 truncate cleaned up [ 187.427348][T15240] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.466530][T15246] wireguard0: entered promiscuous mode [ 187.472048][T15246] wireguard0: entered allmulticast mode [ 187.489105][T15250] loop3: detected capacity change from 0 to 8192 [ 187.496116][T15250] vfat: Unknown parameter '0177777777777777777777718446744073709551615' [ 187.522191][T15254] loop8: detected capacity change from 0 to 2048 [ 187.587315][T15263] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4981'. [ 187.858510][T15288] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4991'. [ 187.949317][T15297] SELinux: syz.8.4995 (15297) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 187.956618][T15284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.971527][T15284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.020188][T15299] loop8: detected capacity change from 0 to 8192 [ 188.484179][ T3372] tipc: Node number set to 1 [ 188.519674][T15302] wireguard0: entered promiscuous mode [ 188.525247][T15302] wireguard0: entered allmulticast mode [ 188.638956][T15327] atomic_op ffff888115cb9d28 conn xmit_atomic 0000000000000000 [ 188.705757][T15341] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15341 comm=syz.3.5026 [ 188.718392][T15341] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15341 comm=syz.3.5026 [ 188.757501][T15344] Cannot find set identified by id 0 to match [ 188.767218][T15345] sd 0:0:1:0: device reset [ 188.824473][T15353] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5032'. [ 188.852354][T15331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.870427][T15331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.980822][T15374] tunl0 speed is unknown, defaulting to 1000 [ 189.008408][T15378] loop8: detected capacity change from 0 to 512 [ 189.031925][T15380] loop3: detected capacity change from 0 to 1024 [ 189.047009][T15378] ext4 filesystem being mounted at /233/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.062548][T15380] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 189.079525][T15380] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 189.088111][T15380] EXT4-fs (loop3): orphan cleanup on readonly fs [ 189.096518][T15380] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 189.106232][T15380] EXT4-fs (loop3): Remounting filesystem read-only [ 189.112966][T15380] EXT4-fs (loop3): 1 orphan inode deleted [ 189.117811][T15388] loop8: detected capacity change from 0 to 512 [ 189.120708][T15380] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 189.136737][T15388] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.312673][T15410] loop8: detected capacity change from 0 to 1024 [ 189.320362][T15410] EXT4-fs: Ignoring removed orlov option [ 189.326124][T15410] EXT4-fs: Ignoring removed orlov option [ 189.461351][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 189.461365][ T29] audit: type=1400 audit(2000000155.566:4901): avc: denied { mount } for pid=15433 comm="syz.8.5057" name="/" dev="ramfs" ino=45924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 189.559148][ T29] audit: type=1326 audit(2000000155.666:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.9.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21695bcda9 code=0x7ffc0000 [ 189.582770][ T29] audit: type=1326 audit(2000000155.666:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.9.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21695bcda9 code=0x7ffc0000 [ 189.610322][ T29] audit: type=1326 audit(2000000155.666:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.9.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21695bcda9 code=0x7ffc0000 [ 189.634051][ T29] audit: type=1326 audit(2000000155.666:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.9.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21695bcda9 code=0x7ffc0000 [ 189.657676][ T29] audit: type=1326 audit(2000000155.666:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.9.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21695bcda9 code=0x7ffc0000 [ 189.681204][ T29] audit: type=1326 audit(2000000155.666:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.9.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21695bcda9 code=0x7ffc0000 [ 189.704862][ T29] audit: type=1326 audit(2000000155.666:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.9.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21695bcda9 code=0x7ffc0000 [ 189.728624][ T29] audit: type=1326 audit(2000000155.676:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.9.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21695bcda9 code=0x7ffc0000 [ 189.752136][ T29] audit: type=1326 audit(2000000155.676:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.9.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21695bcda9 code=0x7ffc0000 [ 189.849113][T15467] batadv1: entered promiscuous mode [ 189.858293][T15467] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 189.960754][T15474] hub 6-0:1.0: USB hub found [ 189.966810][T15474] hub 6-0:1.0: 8 ports detected [ 190.025536][T15486] vhci_hcd: invalid port number 129 [ 190.030851][T15486] vhci_hcd: default hub control req: 6003 v000e i0081 l0 [ 190.077417][T15490] tunl0 speed is unknown, defaulting to 1000 [ 190.725031][T15527] geneve2: entered promiscuous mode [ 190.730278][T15527] geneve2: entered allmulticast mode [ 190.759782][T15536] xt_hashlimit: max too large, truncated to 1048576 [ 190.867201][T15543] netlink: 'syz.9.5107': attribute type 21 has an invalid length. [ 190.986219][T15551] loop4: detected capacity change from 0 to 512 [ 190.993071][T15551] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 191.032112][T15551] EXT4-fs (loop4): 1 truncate cleaned up [ 191.038182][T15551] EXT4-fs mount: 18 callbacks suppressed [ 191.038197][T15551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.272008][T14891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.601516][T15595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.654960][T15595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.726154][T15607] loop9: detected capacity change from 0 to 2048 [ 191.732953][T15607] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.739858][T15608] Process accounting resumed [ 191.816842][T15607] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.863257][T15607] Process accounting resumed [ 191.882572][ T11] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 234: padding at end of block bitmap is not set [ 191.919757][ T11] EXT4-fs (loop9): Remounting filesystem read-only [ 191.936771][T15627] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 191.979966][T13248] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.008186][T15633] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 192.072562][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5150'. [ 192.245071][T15657] loop9: detected capacity change from 0 to 8192 [ 192.294562][T15657] loop9: p1 p2 p3 p4[EZD] [ 192.299041][T15657] loop9: p1 size 16128 extends beyond EOD, truncated [ 192.311126][T15668] tunl0 speed is unknown, defaulting to 1000 [ 192.324429][T15657] loop9: p3 start 458783 is beyond EOD, truncated [ 192.330922][T15657] loop9: p4 size 65536 extends beyond EOD, truncated [ 192.416181][T15669] loop4: detected capacity change from 0 to 1024 [ 192.435938][T15669] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 192.473642][T15669] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 192.482453][T15683] loop8: detected capacity change from 0 to 1024 [ 192.493764][T15683] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 192.504438][T15669] EXT4-fs (loop4): orphan cleanup on readonly fs [ 192.534619][T15669] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 192.545024][T15683] JBD2: no valid journal superblock found [ 192.548965][T15686] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 192.550969][T15683] EXT4-fs (loop8): Could not load journal inode [ 192.558771][T15669] EXT4-fs (loop4): Remounting filesystem read-only [ 192.574630][T15669] EXT4-fs (loop4): 1 orphan inode deleted [ 192.597844][T15669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 192.610430][T15669] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 192.617306][T15669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.668647][T15692] loop8: detected capacity change from 0 to 8192 [ 192.690772][T15700] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 192.714458][T15692] loop8: p1 p2 p3 p4 [ 192.720810][T15692] loop8: p1 start 51379968 is beyond EOD, truncated [ 192.736678][T15692] loop8: p3 size 100663552 extends beyond EOD, truncated [ 192.781140][T15692] loop8: p4 size 81920 extends beyond EOD, truncated [ 192.872306][T15722] tunl0 speed is unknown, defaulting to 1000 [ 192.924086][T15723] tunl0 speed is unknown, defaulting to 1000 [ 192.995762][T15730] smc: net device bond0 applied user defined pnetid SYZ0 [ 193.008594][T15732] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 193.017395][T15730] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 193.054414][T15730] smc: net device bond0 erased user defined pnetid SYZ0 [ 193.061432][T15730] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 193.232440][T15755] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 193.289142][T15758] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 193.295786][T15758] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 193.303356][T15758] vhci_hcd vhci_hcd.0: Device attached [ 193.455506][T15777] tunl0 speed is unknown, defaulting to 1000 [ 193.456376][T15779] IPv6: NLM_F_CREATE should be specified when creating new route [ 193.471661][T15779] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5210'. [ 193.497170][ T3376] vhci_hcd: vhci_device speed not set [ 193.558677][ T3376] usb 19-1: new full-speed USB device number 2 using vhci_hcd [ 193.573965][T15759] vhci_hcd: connection closed [ 193.574470][ T4786] vhci_hcd: stop threads [ 193.583465][ T4786] vhci_hcd: release socket [ 193.587945][ T4786] vhci_hcd: disconnect device [ 193.680071][T15786] loop3: detected capacity change from 0 to 512 [ 193.707977][T15786] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 193.716110][T15786] System zones: 0-2, 18-18, 34-35 [ 193.722368][T15786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.742426][T15786] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.781591][T15792] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5215'. [ 193.820967][T13259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.879108][T15792] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5215'. [ 193.894874][T15798] $H: renamed from bond0 (while UP) [ 193.942464][T15800] tunl0 speed is unknown, defaulting to 1000 [ 194.017222][T15808] geneve2: entered promiscuous mode [ 194.022597][T15808] geneve2: entered allmulticast mode [ 194.131087][T15815] loop9: detected capacity change from 0 to 512 [ 194.157162][T15815] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.190763][T15815] Process accounting resumed [ 194.285009][T13248] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.883739][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 194.883757][ T29] audit: type=1326 audit(2000000160.986:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15833 comm="syz.9.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21695bcda9 code=0x7ffc0000 [ 194.927328][ T29] audit: type=1326 audit(2000000160.986:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15833 comm="syz.9.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21695bcda9 code=0x7ffc0000 [ 194.950864][ T29] audit: type=1326 audit(2000000161.026:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15833 comm="syz.9.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f21695bcda9 code=0x7ffc0000 [ 194.974421][ T29] audit: type=1326 audit(2000000161.026:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15833 comm="syz.9.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21695bcda9 code=0x7ffc0000 [ 194.998141][ T29] audit: type=1326 audit(2000000161.026:5072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15833 comm="syz.9.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21695bcda9 code=0x7ffc0000 [ 195.201861][T15846] wireguard0: entered promiscuous mode [ 195.207687][T15846] wireguard0: entered allmulticast mode [ 195.221535][T15852] wireguard1: entered promiscuous mode [ 195.227079][T15852] wireguard1: entered allmulticast mode [ 195.404548][ T29] audit: type=1326 audit(2000000161.516:5073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15874 comm="syz.4.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd44cda9 code=0x7ffc0000 [ 195.428187][ T29] audit: type=1326 audit(2000000161.516:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15874 comm="syz.4.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd44cda9 code=0x7ffc0000 [ 195.454764][ T29] audit: type=1326 audit(2000000161.536:5075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15874 comm="syz.4.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffabd44cda9 code=0x7ffc0000 [ 195.479151][ T29] audit: type=1326 audit(2000000161.536:5076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15874 comm="syz.4.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd44cda9 code=0x7ffc0000 [ 195.503218][ T29] audit: type=1326 audit(2000000161.536:5077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15874 comm="syz.4.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd44cda9 code=0x7ffc0000 [ 195.623142][T15890] tunl0 speed is unknown, defaulting to 1000 [ 195.836154][T15911] geneve2: entered promiscuous mode [ 195.841477][T15911] geneve2: entered allmulticast mode [ 195.943202][T15923] sch_tbf: peakrate 12500000 is lower than or equals to rate 3221225472 ! [ 195.972024][T15927] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI [ 196.155195][T15945] loop4: detected capacity change from 0 to 512 [ 196.162202][T15945] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 196.178648][T15943] hub 6-0:1.0: USB hub found [ 196.183450][T15943] hub 6-0:1.0: 8 ports detected [ 196.193116][T15945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.218651][T15945] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.5286: corrupted inode contents [ 196.231284][T15945] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.5286: mark_inode_dirty error [ 196.243587][T15945] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.5286: corrupted inode contents [ 196.276588][T14891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.497376][T15981] loop3: detected capacity change from 0 to 1024 [ 196.517854][T15981] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.545199][T15987] netlink: 'syz.0.5302': attribute type 13 has an invalid length. [ 196.547393][T15981] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0002] [ 196.553216][T15987] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5302'. [ 196.563693][T15981] System zones: 0-1, 3-12 [ 196.570808][T15987] syz_tun: refused to change device tx_queue_len [ 196.581243][T15987] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 196.591647][T15981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.632723][T13259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.790403][T16018] netlink: 'syz.3.5317': attribute type 13 has an invalid length. [ 196.798306][T16018] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5317'. [ 196.810673][T16018] syz_tun: refused to change device tx_queue_len [ 196.817196][T16018] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 197.072273][T16046] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5327'. [ 197.158445][T16059] IPv6: Can't replace route, no match found [ 197.209940][T16065] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 197.334679][T16091] loop9: detected capacity change from 0 to 2048 [ 197.347978][T16091] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.524068][T13248] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.539012][T16100] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 197.609502][T16108] netlink: 'syz.9.5356': attribute type 1 has an invalid length. [ 197.617371][T16108] netlink: 'syz.9.5356': attribute type 2 has an invalid length. [ 197.634269][T16108] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5356'. [ 197.728346][T16121] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5363'. [ 197.738131][T16121] netlink: 'syz.0.5363': attribute type 10 has an invalid length. [ 197.801676][T16125] dvmrp0: entered allmulticast mode [ 197.819832][T16125] dvmrp0: left allmulticast mode [ 197.921031][T16138] loop9: detected capacity change from 0 to 512 [ 197.939352][T16138] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 198.075605][T16157] loop3: detected capacity change from 0 to 512 [ 198.082615][T16157] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 198.093257][T16157] EXT4-fs (loop3): invalid journal inode [ 198.099153][T16157] EXT4-fs (loop3): can't get journal size [ 198.105801][T16157] EXT4-fs (loop3): 1 truncate cleaned up [ 198.111796][T16157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.144229][T13259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.510950][T16179] hub 6-0:1.0: USB hub found [ 198.515808][T16179] hub 6-0:1.0: 8 ports detected [ 198.587049][ T3376] usb 19-1: enqueue for inactive port 0 [ 198.593793][ T3376] usb 19-1: enqueue for inactive port 0 [ 198.624196][T16192] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 198.630736][T16192] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 198.638237][T16192] vhci_hcd vhci_hcd.0: Device attached [ 198.674698][ T3376] vhci_hcd: vhci_device speed not set [ 198.763548][T13248] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.824232][ T4899] vhci_hcd: vhci_device speed not set [ 198.884474][ T4899] usb 9-1: new full-speed USB device number 3 using vhci_hcd [ 198.893322][T16193] vhci_hcd: connection closed [ 198.893520][ T47] vhci_hcd: stop threads [ 198.902628][ T47] vhci_hcd: release socket [ 198.907129][ T47] vhci_hcd: disconnect device [ 198.965524][T16211] Falling back ldisc for ttyS3. [ 199.286366][T16267] Cannot find add_set index 4 as target [ 199.369166][T16273] loop8: detected capacity change from 0 to 2048 [ 199.398015][T16273] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.484118][T13177] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.515952][T16282] loop4: detected capacity change from 0 to 1024 [ 199.539541][T16282] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.5435: Failed to acquire dquot type 0 [ 199.567400][T16282] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 199.588805][T16282] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #13: comm syz.4.5435: corrupted inode contents [ 199.619386][T16282] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #13: comm syz.4.5435: mark_inode_dirty error [ 199.658982][T16282] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #13: comm syz.4.5435: corrupted inode contents [ 199.677895][T16282] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.5435: mark_inode_dirty error [ 199.699233][T16282] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #13: comm syz.4.5435: corrupted inode contents [ 199.714039][T16282] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 199.725016][T16282] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #13: comm syz.4.5435: corrupted inode contents [ 199.742835][T16282] EXT4-fs error (device loop4): ext4_truncate:4240: inode #13: comm syz.4.5435: mark_inode_dirty error [ 199.757077][T16282] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 199.766416][T16282] EXT4-fs (loop4): 1 truncate cleaned up [ 199.772583][T16282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.799286][T14891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.810403][T16297] bond2: entered promiscuous mode [ 199.815574][T16297] bond2: entered allmulticast mode [ 199.821077][T16297] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.831833][T16297] bond2 (unregistering): Released all slaves [ 199.848882][T16299] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5442'. [ 199.879706][T16310] random: crng reseeded on system resumption [ 199.885829][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 199.885867][ T29] audit: type=1400 audit(2000000165.986:5229): avc: denied { append } for pid=16309 comm="syz.0.5445" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 199.915298][ T29] audit: type=1400 audit(2000000165.986:5230): avc: denied { open } for pid=16309 comm="syz.0.5445" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 199.998629][T16314] loop9: detected capacity change from 0 to 512 [ 200.022789][T16314] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 200.059884][T16314] EXT4-fs (loop9): 1 truncate cleaned up [ 200.067156][T16319] netlink: 'syz.0.5449': attribute type 1 has an invalid length. [ 200.074975][T16319] netlink: 'syz.0.5449': attribute type 2 has an invalid length. [ 200.083443][T16314] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.085741][ T29] audit: type=1326 audit(2000000166.196:5231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16322 comm="syz.8.5450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a435cda9 code=0x7ffc0000 [ 200.118457][T16319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5449'. [ 200.186148][T13248] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.186478][ T29] audit: type=1326 audit(2000000166.206:5232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16322 comm="syz.8.5450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f59a435cda9 code=0x7ffc0000 [ 200.219159][ T29] audit: type=1326 audit(2000000166.206:5233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16322 comm="syz.8.5450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a435cda9 code=0x7ffc0000 [ 200.242826][ T29] audit: type=1326 audit(2000000166.206:5234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16322 comm="syz.8.5450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a435cda9 code=0x7ffc0000 [ 200.351873][T16339] SET target dimension over the limit! [ 200.377499][ T29] audit: type=1326 audit(2000000166.486:5235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16341 comm="syz.9.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21695bcda9 code=0x7ffc0000 [ 200.401319][ T29] audit: type=1326 audit(2000000166.486:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16341 comm="syz.9.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21695bcda9 code=0x7ffc0000 [ 200.429386][ T29] audit: type=1326 audit(2000000166.486:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16341 comm="syz.9.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21695bcda9 code=0x7ffc0000 [ 200.452952][ T29] audit: type=1326 audit(2000000166.486:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16341 comm="syz.9.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21695bcda9 code=0x7ffc0000 [ 200.635189][T16369] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5473'. [ 200.766109][T16375] netlink: 'syz.8.5476': attribute type 39 has an invalid length. [ 200.931940][T16391] loop4: detected capacity change from 0 to 512 [ 200.938586][T16391] EXT4-fs: Ignoring removed i_version option [ 200.944804][T16391] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.952057][T16391] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 200.963656][T16391] EXT4-fs (loop4): 1 truncate cleaned up [ 200.972441][T16391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.987434][T16394] vxcan0: tx drop: invalid sa for name 0x0000000000000005 [ 201.009382][T14891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.082794][T16408] SELinux: ebitmap: empty map [ 201.088553][T16408] SELinux: failed to load policy [ 201.120765][T16406] loop8: detected capacity change from 0 to 2048 [ 201.168773][T16419] netlink: 'syz.0.5497': attribute type 10 has an invalid length. [ 201.179111][T16419] veth1_macvtap: left promiscuous mode [ 201.182310][T16406] Alternate GPT is invalid, using primary GPT. [ 201.187125][T16419] batman_adv: batadv0: Adding interface: macsec0 [ 201.191122][T16406] loop8: p2 p3 p7 [ 201.197231][T16419] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.197271][T16419] batman_adv: batadv0: Not using interface macsec0 (retrying later): interface not active [ 201.342390][T16436] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5504'. [ 201.351355][T16436] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5504'. [ 201.400681][T16446] Process accounting resumed [ 201.618882][T16461] hub 6-0:1.0: USB hub found [ 201.629081][T16461] hub 6-0:1.0: 8 ports detected [ 201.964351][T16473] sd 0:0:1:0: device reset [ 202.188995][T16510] loop8: detected capacity change from 0 to 256 [ 202.258795][T16510] FAT-fs (loop8): Directory bread(block 64) failed [ 202.274198][T16510] FAT-fs (loop8): Directory bread(block 65) failed [ 202.289320][T16510] FAT-fs (loop8): Directory bread(block 66) failed [ 202.327080][T16510] FAT-fs (loop8): Directory bread(block 67) failed [ 202.333672][T16510] FAT-fs (loop8): Directory bread(block 68) failed [ 202.409197][T16510] FAT-fs (loop8): Directory bread(block 69) failed [ 202.450306][T16510] FAT-fs (loop8): Directory bread(block 70) failed [ 202.474305][T16510] FAT-fs (loop8): Directory bread(block 71) failed [ 202.481524][T16510] FAT-fs (loop8): Directory bread(block 72) failed [ 202.492853][T16533] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 202.510353][T16510] FAT-fs (loop8): Directory bread(block 73) failed [ 202.543175][T16536] loop4: detected capacity change from 0 to 512 [ 202.566988][T16536] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #17: comm syz.4.5550: iget: bogus i_mode (0) [ 202.582652][T16536] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.5550: couldn't read orphan inode 17 (err -117) [ 202.596723][T16536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.612306][T16539] netlink: 180900 bytes leftover after parsing attributes in process `syz.9.5551'. [ 202.633971][T16536] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.5550: bg 0: block 7: invalid block bitmap [ 202.636093][T16543] 9pnet: p9_errstr2errno: server reported unknown error @Nd [ 202.646432][T16539] netlink: zone id is out of range [ 202.659121][T16539] netlink: zone id is out of range [ 202.664821][T16539] netlink: zone id is out of range [ 202.669995][T16539] netlink: zone id is out of range [ 202.675519][T16539] netlink: zone id is out of range [ 202.680798][T16539] netlink: zone id is out of range [ 202.686108][T16539] netlink: zone id is out of range [ 202.691817][T16539] netlink: zone id is out of range [ 202.697024][T16539] netlink: zone id is out of range [ 202.702153][T16539] netlink: zone id is out of range [ 202.748371][T14891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.791909][T16549] random: crng reseeded on system resumption [ 202.798284][T16552] loop9: detected capacity change from 0 to 512 [ 202.805005][T16552] EXT4-fs: Ignoring removed i_version option [ 202.811103][T16552] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.835269][T16552] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 202.879138][T16552] EXT4-fs (loop9): 1 truncate cleaned up [ 202.886738][T16552] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.917518][T13248] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.951470][T16566] xt_hashlimit: max too large, truncated to 1048576 [ 203.187874][T16603] random: crng reseeded on system resumption [ 203.287702][T16610] netlink: 'syz.3.5584': attribute type 4 has an invalid length. [ 203.323604][T16612] loop8: detected capacity change from 0 to 512 [ 203.351292][T16612] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.365160][T16612] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.403271][T13177] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.460972][T16630] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.5590'. [ 203.476068][ T6926] nci: nci_rx_work: unknown MT 0x4 [ 203.668629][T16668] netlink: 192 bytes leftover after parsing attributes in process `syz.4.5599'. [ 203.681819][T16671] SELinux: ebitmap: empty map [ 203.686856][T16671] SELinux: failed to load policy [ 203.944614][ T4899] usb 9-1: enqueue for inactive port 0 [ 203.950121][ T4899] usb 9-1: enqueue for inactive port 0 [ 204.024435][ T4899] vhci_hcd: vhci_device speed not set [ 204.456179][T16699] SELinux: ebitmap: empty map [ 204.475317][T16699] SELinux: failed to load policy [ 204.708607][T16729] tunl0 speed is unknown, defaulting to 1000 [ 204.930235][T16737] loop8: detected capacity change from 0 to 512 [ 204.951403][T16737] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5635: bg 0: block 35: padding at end of block bitmap is not set [ 204.967262][T16737] EXT4-fs (loop8): Remounting filesystem read-only [ 204.974058][T16737] EXT4-fs (loop8): 1 truncate cleaned up [ 204.980407][T16737] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.992821][T16737] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 204.999716][T16737] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.043692][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 205.043726][ T29] audit: type=1400 audit(2000000171.146:5375): avc: denied { write } for pid=16743 comm="syz.3.5637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 205.080936][T16753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.089694][T16753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.151602][T16761] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5646'. [ 205.178287][ T29] audit: type=1404 audit(2000000171.286:5376): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 205.195383][ T29] audit: type=1404 audit(2000000171.296:5377): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 205.231183][ T29] audit: type=1400 audit(2000000171.326:5378): avc: denied { read write } for pid=14891 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.255658][ T29] audit: type=1400 audit(2000000171.326:5379): avc: denied { open } for pid=14891 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.280097][ T29] audit: type=1400 audit(2000000171.326:5380): avc: denied { ioctl } for pid=14891 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.369306][ T29] audit: type=1400 audit(2000000171.336:5381): avc: denied { prog_load } for pid=16765 comm="syz.8.5649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 205.388668][ T29] audit: type=1400 audit(2000000171.336:5382): avc: denied { bpf } for pid=16765 comm="syz.8.5649" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 205.409372][ T29] audit: type=1400 audit(2000000171.336:5383): avc: denied { perfmon } for pid=16765 comm="syz.8.5649" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 205.430509][ T29] audit: type=1400 audit(2000000171.336:5384): avc: denied { prog_run } for pid=16765 comm="syz.8.5649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 205.467491][T16778] loop8: detected capacity change from 0 to 512 [ 205.477918][T16778] EXT4-fs error (device loop8): ext4_orphan_get:1389: inode #17: comm syz.8.5652: iget: bogus i_mode (0) [ 205.499505][T16778] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.5652: couldn't read orphan inode 17 (err -117) [ 205.522477][T16778] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.538583][T16778] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.5652: bg 0: block 7: invalid block bitmap [ 205.569411][T13177] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.740499][T16803] loop8: detected capacity change from 0 to 512 [ 205.754634][T16803] EXT4-fs: Ignoring removed i_version option [ 205.760753][T16803] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.772765][T16803] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 205.787473][T16803] EXT4-fs (loop8): 1 truncate cleaned up [ 205.793588][T16803] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.827018][T13177] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.847604][T16809] loop8: detected capacity change from 0 to 512 [ 205.854166][T16809] EXT4-fs: Ignoring removed i_version option [ 205.860234][T16809] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.866978][T16809] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 205.895008][T16809] EXT4-fs (loop8): 1 truncate cleaned up [ 205.901026][T16809] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.965963][T13177] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.175787][T16838] futex_wake_op: syz.8.5677 tries to shift op by -1; fix this program [ 206.452907][T16867] netem: change failed [ 206.772081][T16924] loop4: detected capacity change from 0 to 512 [ 206.785058][T16924] EXT4-fs (loop4): too many log groups per flexible block group [ 206.792781][T16924] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 206.799736][T16924] EXT4-fs (loop4): mount failed [ 207.540668][T16977] loop8: detected capacity change from 0 to 128 [ 207.547317][T16977] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 207.559534][T16977] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x80417272 (sector = 1) [ 207.570047][T16977] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 207.596568][ T47] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x80417272 (sector = 1) [ 207.817361][T17007] loop9: detected capacity change from 0 to 1024 [ 207.824214][T17007] EXT4-fs: Ignoring removed mblk_io_submit option [ 207.848649][T17007] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.910110][T13248] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.953758][T17023] serio: Serial port ptm0 [ 208.072914][T17038] loop8: detected capacity change from 0 to 8192 [ 208.155547][T17047] netlink: 100 bytes leftover after parsing attributes in process `syz.9.5772'. [ 208.205887][T17049] futex_wake_op: syz.0.5773 tries to shift op by -1; fix this program [ 208.269246][T17065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5780'. [ 208.290840][ T4899] kernel write not supported for file /303/attr/sockcreate (pid: 4899 comm: kworker/1:5) [ 208.343555][T17082] SELinux: policydb version 536871104 does not match my version range 15-34 [ 208.352967][ T4793] nci: nci_rx_work: unknown MT 0x4 [ 208.354455][T17082] SELinux: failed to load policy [ 208.449484][T17094] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5792'. [ 208.458619][T17094] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5792'. [ 208.467689][T17094] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5792'. [ 209.007438][T17150] loop9: detected capacity change from 0 to 1024 [ 209.014692][T17150] EXT4-fs: Ignoring removed nobh option [ 209.020293][T17150] EXT4-fs: Ignoring removed nobh option [ 209.037221][T17150] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.062493][T13248] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.268145][T17181] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 209.445445][T17214] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5848'. [ 209.483574][T17217] netlink: 268 bytes leftover after parsing attributes in process `syz.9.5852'. [ 209.495835][T17223] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 209.557033][T17229] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000005 [ 209.572681][T17233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5858'. [ 209.635696][T17247] netlink: 268 bytes leftover after parsing attributes in process `syz.8.5865'. [ 209.715601][T17251] net_ratelimit: 540 callbacks suppressed [ 209.715615][T17251] ebtables: ebtables: counters copy to user failed while replacing table [ 210.055130][T17306] netlink: 'syz.4.5891': attribute type 15 has an invalid length. [ 210.098698][ T29] kauditd_printk_skb: 659 callbacks suppressed [ 210.098714][ T29] audit: type=1326 audit(2000000432.207:6044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17308 comm="syz.4.5893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd44cda9 code=0x7ffc0000 [ 210.182632][ T29] audit: type=1326 audit(2000000432.237:6045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17308 comm="syz.4.5893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd44cda9 code=0x7ffc0000 [ 210.206306][ T29] audit: type=1326 audit(2000000432.237:6046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17308 comm="syz.4.5893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffabd44cda9 code=0x7ffc0000 [ 210.229895][ T29] audit: type=1326 audit(2000000432.237:6047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17308 comm="syz.4.5893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd44cda9 code=0x7ffc0000 [ 210.253487][ T29] audit: type=1326 audit(2000000432.237:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17308 comm="syz.4.5893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd44cda9 code=0x7ffc0000 [ 210.277152][ T29] audit: type=1326 audit(2000000432.237:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17308 comm="syz.4.5893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffabd44cda9 code=0x7ffc0000 [ 210.300655][ T29] audit: type=1326 audit(2000000432.237:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17308 comm="syz.4.5893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd44cda9 code=0x7ffc0000 [ 210.324282][ T29] audit: type=1326 audit(2000000432.237:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17308 comm="syz.4.5893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffabd44cda9 code=0x7ffc0000 [ 210.351199][ T29] audit: type=1326 audit(2000000432.237:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17308 comm="syz.4.5893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd44cda9 code=0x7ffc0000 [ 210.374854][ T29] audit: type=1326 audit(2000000432.237:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17308 comm="syz.4.5893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffabd44cda9 code=0x7ffc0000 [ 210.465661][T17337] netlink: 'syz.9.5906': attribute type 13 has an invalid length. [ 210.497737][T17337] gretap0: refused to change device tx_queue_len [ 210.509596][T17337] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 210.532707][T17347] tunl0 speed is unknown, defaulting to 1000 [ 210.560765][T17349] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 210.579852][T17349] vhci_hcd: invalid port number 38 [ 210.585058][T17349] vhci_hcd: invalid port number 38 [ 210.687791][T17366] sctp: [Deprecated]: syz.9.5920 (pid 17366) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.687791][T17366] Use struct sctp_sack_info instead [ 210.736547][T17374] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5924'. [ 210.746007][T17374] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5924'. [ 210.767509][T17370] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5923'. [ 210.776557][T17374] bridge_slave_1: left allmulticast mode [ 210.782227][T17374] bridge_slave_1: left promiscuous mode [ 210.787930][T17374] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.796736][T17374] bridge_slave_0: left allmulticast mode [ 210.802397][T17374] bridge_slave_0: left promiscuous mode [ 210.808142][T17374] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.914036][T17389] tunl0 speed is unknown, defaulting to 1000 [ 210.934756][T17395] vlan3: entered allmulticast mode [ 210.939958][T17395] vlan1: entered allmulticast mode [ 210.945130][T17395] veth0_vlan: entered allmulticast mode [ 210.962288][T17395] bridge0: port 3(vlan3) entered blocking state [ 210.968644][T17395] bridge0: port 3(vlan3) entered disabled state [ 210.978033][T17395] vlan3: entered promiscuous mode [ 210.983099][T17395] vlan1: entered promiscuous mode [ 210.988719][T17395] bridge0: port 3(vlan3) entered blocking state [ 210.995118][T17395] bridge0: port 3(vlan3) entered forwarding state [ 211.352484][T17425] tunl0 speed is unknown, defaulting to 1000 [ 212.020481][T17463] loop9: detected capacity change from 0 to 512 [ 212.042296][T17463] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 212.053882][T17463] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 212.064044][T17463] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.5973: Corrupt directory, running e2fsck is recommended [ 212.081459][T17463] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 212.097939][T17477] loop8: detected capacity change from 0 to 512 [ 212.111828][T17463] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.5973: corrupted in-inode xattr: invalid ea_ino [ 212.129628][T17463] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.5973: couldn't read orphan inode 15 (err -117) [ 212.142229][T17463] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.162339][T17463] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 212.173924][T17463] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 212.184171][T17463] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.5973: Corrupt directory, running e2fsck is recommended [ 212.198378][T17463] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 212.210023][T17463] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 212.220122][T17463] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.5973: Corrupt directory, running e2fsck is recommended [ 212.239279][T17463] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 212.250911][T17463] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 212.261034][T17463] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.5973: Corrupt directory, running e2fsck is recommended [ 212.268421][T17477] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.275714][T17463] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 212.308230][T17477] ext4 filesystem being mounted at /425/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.327338][T13248] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.381210][T13177] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.656220][T17519] loop8: detected capacity change from 0 to 1024 [ 212.676021][T17519] EXT4-fs: Ignoring removed orlov option [ 212.681883][T17519] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.724713][T17519] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.778581][T13177] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.815598][T17542] ================================================================== [ 212.823721][T17542] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 212.831637][T17542] [ 212.833969][T17542] write to 0xffff888136715808 of 8 bytes by task 17543 on cpu 0: [ 212.841709][T17542] cpu_map_kthread_run+0x4a1/0x11e0 [ 212.846944][T17542] kthread+0x4ae/0x520 [ 212.851031][T17542] ret_from_fork+0x4b/0x60 [ 212.855470][T17542] ret_from_fork_asm+0x1a/0x30 [ 212.860249][T17542] [ 212.862579][T17542] read to 0xffff888136715808 of 8 bytes by task 17542 on cpu 1: [ 212.870214][T17542] bq_flush_to_queue+0x125/0x360 [ 212.875162][T17542] cpu_map_enqueue+0x19e/0x1b0 [ 212.879942][T17542] xdp_do_redirect_frame+0x2a4/0x6b0 [ 212.885254][T17542] bpf_test_run_xdp_live+0x8c6/0x1040 [ 212.890659][T17542] bpf_prog_test_run_xdp+0x51d/0x8b0 [ 212.895974][T17542] bpf_prog_test_run+0x20f/0x3a0 [ 212.900931][T17542] __sys_bpf+0x400/0x7a0 [ 212.905205][T17542] __x64_sys_bpf+0x43/0x50 [ 212.909636][T17542] x64_sys_call+0x2914/0x2dc0 [ 212.914344][T17542] do_syscall_64+0xc9/0x1c0 [ 212.918866][T17542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.924773][T17542] [ 212.927105][T17542] value changed: 0xffff888126bac070 -> 0x0000000000000000 [ 212.934232][T17542] [ 212.936559][T17542] Reported by Kernel Concurrency Sanitizer on: [ 212.942729][T17542] CPU: 1 UID: 0 PID: 17542 Comm: syz.9.5995 Not tainted 6.13.0-syzkaller-10003-ga86bf2283d2c #0 [ 212.953224][T17542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 212.963306][T17542] ==================================================================