last executing test programs: 3m27.478680714s ago: executing program 32 (id=581): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xa6, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 3m6.636845995s ago: executing program 33 (id=1226): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x1, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0xfffffffe, 0x0, 0x7e3a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m56.2845999s ago: executing program 34 (id=1575): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000300)=ANY=[@ANYBLOB="3057000001"]) 2m22.852478184s ago: executing program 35 (id=2578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 2m18.721549118s ago: executing program 36 (id=2685): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) 2m18.159599725s ago: executing program 37 (id=2700): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8000c62) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 2m9.065933903s ago: executing program 38 (id=2955): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 2m2.583366907s ago: executing program 39 (id=3103): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 1m32.103819444s ago: executing program 6 (id=4092): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x0, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x0, 0x81, 0x0, 0x2, 0xa7fb, 0x7e150a0b, 0xffff, 0x5, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x1007, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x38d5, 0x0, 0x0, 0x100000, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e982638, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0x4, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xd2d1, 0x0, 0x1, 0x4000b2e, 0x52f7, 0x0, 0x0, 0xfffffffe, 0x0, 0xff, 0x1000, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x26, 0x800, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x80c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x3, 0x8, 0x4, 0x14, 0x1e, 0x0, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1000, 0x100, 0x7f0, 0x0, 0x0, 0x40000, 0x0, 0x9, 0x0, 0x1, 0xff, 0xfffffffe, 0x840, 0x0, 0x0, 0x0, 0x0, 0x153, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40, 0xffffffff, 0x400, 0xfffffff0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0x101, 0x0, 0x0, 0xffffffff}, 0x9, 0xf, 0x2000000}}]}}]}, 0x45c}}, 0x0) 1m31.939320895s ago: executing program 6 (id=4099): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000100)=[0xee00]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) setregid(0x0, r0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5e) 1m31.819975687s ago: executing program 6 (id=4110): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m31.763249628s ago: executing program 6 (id=4102): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x2}}]}, 0x1, 0x786, &(0x7f0000001900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x5a2, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) write$hidraw(r0, &(0x7f00000002c0)="85", 0x1) 1m31.365165253s ago: executing program 6 (id=4109): unshare(0x22000600) r0 = io_uring_setup(0x7d1, &(0x7f0000000580)={0x0, 0x2bc8, 0x8, 0xfffffffe, 0x183}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) unshare(0x2000400) close_range(r0, 0xffffffffffffffff, 0x0) 1m31.122647756s ago: executing program 6 (id=4114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000008850000004300000095"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="b1", 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m31.100301676s ago: executing program 40 (id=4114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000008850000004300000095"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="b1", 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 59.907757792s ago: executing program 4 (id=5153): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0xf00) 59.883336632s ago: executing program 4 (id=5155): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rseq(&(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={0x0, 0x0, 0x51c28aff, 0x6, 0x80000000}, 0x1}, 0x20, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000001880)={0x0, 0x210000, 0x1800, 0x1, 0x2}, 0x20) truncate(&(0x7f0000000380)='./file1\x00', 0x3) mount$9p_rdma(&(0x7f0000000080), 0x0, &(0x7f0000000100), 0x84000, &(0x7f0000000500)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0x400}}, {@timeout={'timeout', 0x3d, 0x8}}, {@common=@dfltuid}], [{@obj_type={'obj_type', 0x3d, 'ethtool\x00'}}, {@measure}, {@subj_type={'subj_type', 0x3d, '$('}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.](]-+\xaa\\9'}}, {@seclabel}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@subj_user={'subj_user', 0x3d, '}{'}}, {@fsname={'fsname', 0x3d, 'syzkaller\x00'}}]}}) 59.846278352s ago: executing program 4 (id=5158): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)={[{@jqfmt_vfsv0}, {}, {@mb_optimize_scan}, {@bsdgroups}, {@orlov}, {@grpjquota, 0x2e}, {@jqfmt_vfsv0}, {@debug}, {@nomblk_io_submit}, {@orlov}], [], 0x2c}, 0x0, 0x4c0, &(0x7f0000000600)="$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") 59.731126694s ago: executing program 4 (id=5162): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000000), 0x1, 0x4bb, &(0x7f0000000580)="$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") mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) mkdir(&(0x7f00000000c0)='./control\x00', 0x10) 59.501763867s ago: executing program 4 (id=5168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00') r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') 59.203696981s ago: executing program 4 (id=5175): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r2) 59.185747681s ago: executing program 41 (id=5175): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r2) 55.42593416s ago: executing program 3 (id=5283): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x3, 0x0, 0x0) 54.559689561s ago: executing program 3 (id=5315): r0 = socket$tipc(0x1e, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x41) 54.528008992s ago: executing program 3 (id=5317): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x3, 0x0, 'queue0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) 54.469101243s ago: executing program 3 (id=5320): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000000), 0x1, 0x4bb, &(0x7f0000000580)="$eJzs3cuLXFUaAPCvqtLP9EweMwxJBiaBDGQepKsfDOmemcUMDMzMIjBMwI1CbLsrbUx1V9NVHdNNFh3dZeFCFAVx4d6/wI1ZGQVxrXtxIRGNLagglNxbVUm/KpaxUyV9fz+o9Dn33NR3Thff4da59/YNILNOJf/kIkYi4oOIONSobt3hVOPHxt3rs8krF/X6hc9z6X5JvbVr6/8djIj1iBiMiP//O+Kp3M641dW1KzPlcmm5WS/WFpaK1dW1s5cXZuZL86XF8alz09NTY5MT03s21psvPHPz/Fv/7X/z6+fv3H7xnbeTbo002zaPYy81ht4XRzZtOxARf38UwXqg0BzPUK87wkNJPr9fRcTpNP8PRSH9NIEsqNfr9e/qA+2a1+vAvpVPj4Fz+dGIaJTz/6qPNo7hfx3D+XKlWvvzpcrK4lzjWPlw9OUvXS6XxprfFQ5HXy6pj6fl+/WJbfXJiPQY+KXCUFofna2U57o71QHbHNyW/18V8vnRpBJ/6nXXgG7wlR+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kN2yX/IpP+dP5+86q373+eurq5cqVw9O5fMCQsrs6OzleWl0flKZT69Z2fhh96vXKksjf8lVq4Va6VqrVhdXbu4UFlZrF1M7+u/WOrryqiAThw5eeujXESs/3UofSX6m21yFfa3ej0Xvb4HGeiNQq8nIKBnLP1BdvmOD+zyJ3q3GGzXsLT3fQG6I9/rDgA9c+a483+QVdb/Ibus/0N2OcYHrP9D9lj/h+wa2fn8r/T5P7/Y9OyusYj4ZUR8WOgbaD3rC9gP8p/mmsf/Zw79fmR7a3/um/QUQX9EPPvahVeuzdRqy+PJ9i/uba+92tw+0Yv+A51q5WkrjwGA7Nq4e3229epm3M/+2bgIYWf8A821ycH0HOXwRm7LtQq5Pbp2Yf1GRBzbLX6u+bzzxpmP4Y3CjvhHmz9zjbdI+3sgfW56d+If3xT/d5vin/jJvxXIhlvJ/DO2W/7l05yOe/m3df4Z2aNrJ9rPf/l781+hzfx3ssMYT7/+3Cdt49+IOLFr/Fa8wTTW9vhJ3850GP/OE4/9pl1b/Y3G++wWvyUpFWsLS8Xq6trZ9O/IzZcWx6fOTU9PjU1OTBfTNepia6V6p78de//2g8Y/3CZ+u/H/o9mnP3Y4/m9/+97jpx4Q/w+nd//8j7aJnxj6EU/o/3Li4yfbtSXx59qMP78z/rvD0WqNmOwwfvXl/wx0uCsA0AXV1bUrM+VyaVlBQeEhCgM/j27seaHXMxPwqN1P+l73BAAAAAAAAAAAAOhUNy4n7vUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2g+8DAAD//3bC1tg=") mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) mkdir(&(0x7f00000000c0)='./control\x00', 0x10) 54.118137727s ago: executing program 3 (id=5331): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003"], 0x10e0}}, 0x0) 53.86351608s ago: executing program 3 (id=5338): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, '\"'}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x2, 0x4, 0x2}}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 53.835232471s ago: executing program 42 (id=5338): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, '\"'}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x2, 0x4, 0x2}}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 15.452342879s ago: executing program 7 (id=6577): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010c28bd7000f1dbdf250100"], 0x14}}, 0x8800) 15.427139419s ago: executing program 7 (id=6578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 15.35904314s ago: executing program 7 (id=6580): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x762f, &(0x7f0000000140)={0x0, 0x114dd, 0x10, 0xffffffff, 0x320}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x1000, 0x1}) io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 15.311468561s ago: executing program 7 (id=6582): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0) 15.268894342s ago: executing program 7 (id=6586): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 14.60307616s ago: executing program 7 (id=6599): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, 0x0, 0x0, 0xa006, 0x9) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRESOCT, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYBLOB], 0x8, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 14.572861221s ago: executing program 43 (id=6599): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, 0x0, 0x0, 0xa006, 0x9) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRESOCT, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYBLOB], 0x8, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 10.979435617s ago: executing program 1 (id=6673): connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x42000000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 10.610983752s ago: executing program 1 (id=6684): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 10.570749473s ago: executing program 1 (id=6686): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) shutdown(r2, 0x2) 10.469051644s ago: executing program 1 (id=6688): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202) 10.417952215s ago: executing program 1 (id=6689): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x18) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r1, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000012c0)="23a0be3ec0d9edaccda531874ecf98434f3d10665f6e0346136984c1f2f15d", 0x1f}, {&(0x7f0000001300)="11ca5641cbf9577fa297e890dc4746449416908fa7066d54ca4ed8fb87a71d621ef53449e793c55ba58eab20a5044fd1ec07cc77e4e3bf3b8da2812b8943441c0c565de0c5dbc8c8", 0x48}, {&(0x7f0000001380)="190be02b544a87c33aa4aaaaabfccb6154043a8b5a2ea95211900186170c7a4f2651d264466253c5f9851a58793efcaf45a2c0f7546bf143b9bff46892f86a3e98e625eabbd1043b1e15036c9cf221d620f792d835bcad5a583cdd666c527279ce68530f3e71f6c170d033e0eec71d019b7058f398e887abb014e1930ffe52fe9b32fb847022f7298ba564e6fabd049f56aefe1e966ab30d411e62a5394c8bc6146b171d44ce5dc32018a6b0e15828d2e6853b3b2fec4d21c718e79ee351a06755a9", 0xc2}, {&(0x7f0000002600)="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", 0x4b4}], 0x4}}], 0x6, 0x200040d1) 10.259732256s ago: executing program 1 (id=6692): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 10.259621896s ago: executing program 44 (id=6692): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 2.030131784s ago: executing program 8 (id=6974): r0 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) mq_timedreceive(r0, &(0x7f00000042c0)=""/4093, 0xffd, 0x400000ca, 0x0) 1.355180052s ago: executing program 0 (id=7003): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f0000002580)={'#! ', '', [{0x20, '\x00'}]}, 0x6) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.332961623s ago: executing program 0 (id=7004): utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000800181100b5", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46226be000031e49e110d6a17948581d158ba86c9d2896c6d3bca2d000000f10015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x9c, 0x20048064, 0x0, 0x0) 1.296404123s ago: executing program 0 (id=7006): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, 0x0, 0x8002, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000001200), 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) 1.174776505s ago: executing program 8 (id=7011): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c88fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21009c90"], 0xd2) 1.047636976s ago: executing program 8 (id=7015): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f0000002580)={'#! ', '', [{0x20, '\x00'}]}, 0x6) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 992.366467ms ago: executing program 8 (id=7019): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'geneve1\x00', 0x600}) 927.625538ms ago: executing program 2 (id=7020): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 927.405828ms ago: executing program 8 (id=7021): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000180)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r1, &(0x7f00000010c0)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xff}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0x2, 0xffeb}, {0xe, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 927.039268ms ago: executing program 2 (id=7023): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) close(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0xd75) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r3, &(0x7f0000000200)}, 0x20) 902.664978ms ago: executing program 2 (id=7024): pipe(0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 747.31854ms ago: executing program 2 (id=7035): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000638477fbac141716e000030a07070403fe80000000000002845013f2325f1a390105", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0xbe}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1c3e41, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="27dc20df79e1"}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 685.011701ms ago: executing program 5 (id=7027): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f00000003c0)=ANY=[], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r2, &(0x7f0000000140)='./control\x00', 0x200) 659.808632ms ago: executing program 9 (id=7029): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 569.418043ms ago: executing program 5 (id=7030): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x2f, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) 568.870643ms ago: executing program 2 (id=7031): bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) 535.722103ms ago: executing program 9 (id=7032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa4ebbe25218875b3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff2bfe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec970000e03c00e18000000000000000000000000000aaff020000000000000000000000000001061b"], 0xffe) 535.255143ms ago: executing program 5 (id=7033): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@nodioread_nolock}, {@nodiscard}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 473.958904ms ago: executing program 2 (id=7034): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000580)="92", 0x1}], 0x1) 473.607514ms ago: executing program 0 (id=7036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, r2, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) 414.813934ms ago: executing program 0 (id=7037): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x18, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e00500000000000084", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 287.704636ms ago: executing program 9 (id=7038): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) unshare(0x2c020400) r0 = msgget$private(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 287.447216ms ago: executing program 9 (id=7039): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 277.632956ms ago: executing program 5 (id=7040): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x0) 256.830727ms ago: executing program 5 (id=7041): socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0xe6, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000007140100", @ANYRES32=r1], 0x30}}, 0x94) 204.286137ms ago: executing program 5 (id=7042): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1224, &(0x7f0000002340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x500, 0x1) 203.736397ms ago: executing program 0 (id=7043): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) 73.713049ms ago: executing program 9 (id=7044): r0 = epoll_create(0x3ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000280)={0x2000000}) 7.50003ms ago: executing program 8 (id=7045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1100, 0x5dd8, 0x0, 0x2, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x1000, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x16, 0x66, 0x0, 0x8b, 0x33, 0x0, @rand_addr=0x64010102, @broadcast}, "3297"}}, 0x24) 0s ago: executing program 9 (id=7046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): ll=202 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 208.409945][ T29] audit: type=1326 audit(214.348:5498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17581 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 208.432953][ T29] audit: type=1326 audit(214.348:5499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17581 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 208.455894][ T29] audit: type=1326 audit(214.348:5500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17581 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 208.478915][ T29] audit: type=1326 audit(214.348:5501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17581 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 208.501883][ T29] audit: type=1326 audit(214.348:5502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17581 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 208.524819][ T29] audit: type=1326 audit(214.348:5503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17581 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 208.629915][T17600] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5313'. [ 208.639033][T17600] netlink: 'syz.5.5313': attribute type 5 has an invalid length. [ 208.646993][T17600] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5313'. [ 208.738733][T17607] loop5: detected capacity change from 0 to 2048 [ 208.756100][T17607] EXT4-fs: Ignoring removed bh option [ 208.767180][T17611] sg_write: data in/out 197376/1 bytes for SCSI command 0x2c-- guessing data in; [ 208.767180][T17611] program syz.1.5319 not setting count and/or reply_len properly [ 208.798747][T17618] loop3: detected capacity change from 0 to 512 [ 208.809371][T17607] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.834949][T17623] netlink: 'syz.8.5323': attribute type 1 has an invalid length. [ 208.845321][T17618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.919016][T17618] loop3: detected capacity change from 512 to 64 [ 208.927804][T17618] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Out of memory [ 208.943414][T17618] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Out of memory [ 208.968459][T17618] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #19: comm syz.3.5320: mark_inode_dirty error [ 209.002073][T17618] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -12) [ 209.065422][T10746] EXT4-fs error (device loop3): ext4_lookup:1786: inode #2: comm syz-executor: 'ÿ.' linked to parent dir [ 209.079981][T10746] EXT4-fs error (device loop3): ext4_lookup:1786: inode #2: comm syz-executor: 'ÿ.' linked to parent dir [ 209.125516][T16203] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.262486][T17657] sg_write: data in/out 197376/1 bytes for SCSI command 0x2c-- guessing data in; [ 209.262486][T17657] program syz.8.5336 not setting count and/or reply_len properly [ 209.284102][ T31] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 209.300794][ T31] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 209.310424][T17660] loop8: detected capacity change from 0 to 512 [ 209.313366][ T31] EXT4-fs (loop5): This should not happen!! Data will be lost [ 209.313366][ T31] [ 209.319897][T17660] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.329203][ T31] EXT4-fs (loop5): Total free blocks count 0 [ 209.336563][T17660] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 209.341525][ T31] EXT4-fs (loop5): Free/Dirty block details [ 209.341542][ T31] EXT4-fs (loop5): free_blocks=2415919104 [ 209.341559][ T31] EXT4-fs (loop5): dirty_blocks=8224 [ 209.341573][ T31] EXT4-fs (loop5): Block reservation details [ 209.341593][ T31] EXT4-fs (loop5): i_reserved_data_blocks=514 [ 209.349059][ T31] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 209.359571][T17660] EXT4-fs (loop8): 1 truncate cleaned up [ 209.399632][T17660] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.426589][T17660] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 209.467575][T17188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.561936][T17680] loop8: detected capacity change from 0 to 128 [ 209.632665][T17664] chnl_net:caif_netlink_parms(): no params data found [ 209.645896][T17688] loop8: detected capacity change from 0 to 1024 [ 209.664986][T17688] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.681350][T17688] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.5344: Allocating blocks 497-513 which overlap fs metadata [ 209.697087][T17664] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.700694][T17688] EXT4-fs (loop8): pa ffff888106d78620: logic 16, phys. 145, len 23 [ 209.704243][T17664] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.712190][T17688] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 209.731045][T17688] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 209.743402][T17688] EXT4-fs (loop8): This should not happen!! Data will be lost [ 209.743402][T17688] [ 209.744162][T17664] bridge_slave_0: entered allmulticast mode [ 209.753084][T17688] EXT4-fs (loop8): Total free blocks count 0 [ 209.753103][T17688] EXT4-fs (loop8): Free/Dirty block details [ 209.753135][T17688] EXT4-fs (loop8): free_blocks=16 [ 209.753150][T17688] EXT4-fs (loop8): dirty_blocks=0 [ 209.753165][T17688] EXT4-fs (loop8): Block reservation details [ 209.759893][T17664] bridge_slave_0: entered promiscuous mode [ 209.765075][T17688] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 209.772196][T17664] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.806535][T17664] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.813787][T17664] bridge_slave_1: entered allmulticast mode [ 209.820398][T17664] bridge_slave_1: entered promiscuous mode [ 209.834985][T17699] geneve0: entered allmulticast mode [ 209.867433][T17664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.888085][T17664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.916374][T17709] loop5: detected capacity change from 0 to 128 [ 209.929834][T17664] team0: Port device team_slave_0 added [ 209.942683][T17664] team0: Port device team_slave_1 added [ 209.962632][T17664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.969658][T17664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.995782][T17664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.007927][T17664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.014948][T17664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.041079][T17664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.077470][T17664] hsr_slave_0: entered promiscuous mode [ 210.091732][T17664] hsr_slave_1: entered promiscuous mode [ 210.097806][T17664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.106489][T17664] Cannot create hsr debugfs directory [ 210.183026][T17664] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.249225][T17664] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.310094][T17664] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.373853][T17664] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.500463][T17664] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 210.513191][T17664] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 210.530210][T17664] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 210.539880][T17664] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 210.570445][T17743] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.577726][T17743] IPv6: NLM_F_CREATE should be set when creating new route [ 210.607914][T17745] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 210.639083][T17664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.661160][T17664] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.674081][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.681216][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.702445][ T6060] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.709562][ T6060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.739227][T17753] loop5: detected capacity change from 0 to 512 [ 210.754177][T17753] EXT4-fs: Ignoring removed mblk_io_submit option [ 210.817614][T17664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.851945][T17753] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 210.870072][T17753] EXT4-fs (loop5): 1 truncate cleaned up [ 210.878316][T17753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.994315][T11675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.000042][T17664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.291696][T17806] loop2: detected capacity change from 0 to 512 [ 211.310571][T17806] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.332467][T17806] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 211.341497][T17664] veth0_vlan: entered promiscuous mode [ 211.351712][T17664] veth1_vlan: entered promiscuous mode [ 211.367810][T17806] EXT4-fs (loop2): 1 truncate cleaned up [ 211.373847][T17806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.415730][T17664] veth0_macvtap: entered promiscuous mode [ 211.447834][T17664] veth1_macvtap: entered promiscuous mode [ 211.473397][T17664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.487475][T17664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.498120][T17664] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.506940][T17664] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.515755][T17664] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.524580][T17664] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.535330][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.583686][T17819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5392'. [ 211.593467][T17819] netlink: 808 bytes leftover after parsing attributes in process `syz.2.5392'. [ 211.735875][T17836] loop2: detected capacity change from 0 to 512 [ 211.743101][T17836] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 211.744481][T17838] loop5: detected capacity change from 0 to 512 [ 211.760736][T17836] EXT4-fs (loop2): 1 truncate cleaned up [ 211.768816][T17836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.826250][T17838] EXT4-fs (loop5): shut down requested (1) [ 212.058662][T17845] futex_wake_op: syz.2.5404 tries to shift op by -1; fix this program [ 212.068598][T17845] smc: net device bond0 applied user defined pnetid SYZ2 [ 212.079069][T17846] loop1: detected capacity change from 0 to 512 [ 212.087031][T17846] EXT4-fs: Ignoring removed mblk_io_submit option [ 212.102388][T17851] loop2: detected capacity change from 0 to 128 [ 212.109263][T17846] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 212.133978][T17854] netlink: 'syz.8.5408': attribute type 1 has an invalid length. [ 212.143967][T17846] EXT4-fs (loop1): 1 truncate cleaned up [ 212.501200][T17887] loop7: detected capacity change from 0 to 512 [ 212.509092][T17887] EXT4-fs: Ignoring removed mblk_io_submit option [ 212.516348][T17887] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 212.543542][T17887] EXT4-fs (loop7): 1 truncate cleaned up [ 212.633411][T17891] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 212.702457][T17901] loop8: detected capacity change from 0 to 512 [ 212.723427][T17901] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 212.746474][T17901] EXT4-fs (loop8): 1 truncate cleaned up [ 212.879483][T17918] loop8: detected capacity change from 0 to 128 [ 212.928630][ T31] tipc: Subscription rejected, illegal request [ 212.969827][T17924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5438'. [ 212.978929][T17924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5438'. [ 212.979475][T17918] syz.8.5434: attempt to access beyond end of device [ 212.979475][T17918] loop8: rw=0, sector=121, nr_sectors = 120 limit=128 [ 213.061833][T17926] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 213.078710][ T340] kworker/u8:6: attempt to access beyond end of device [ 213.078710][ T340] loop8: rw=1, sector=241, nr_sectors = 800 limit=128 [ 213.123483][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 213.123517][ T29] audit: type=1326 audit(219.358:5629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17928 comm="syz.8.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 213.164393][ T29] audit: type=1326 audit(219.389:5630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17928 comm="syz.8.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 213.187486][ T29] audit: type=1326 audit(219.389:5631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17928 comm="syz.8.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 213.210539][ T29] audit: type=1326 audit(219.389:5632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17928 comm="syz.8.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 213.233546][ T29] audit: type=1326 audit(219.389:5633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17928 comm="syz.8.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 213.256567][ T29] audit: type=1326 audit(219.389:5634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17928 comm="syz.8.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 213.290780][T17935] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 213.419685][T17946] netlink: 'syz.2.5450': attribute type 1 has an invalid length. [ 213.432072][ T29] audit: type=1326 audit(219.536:5635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17936 comm="syz.7.5446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb626eee969 code=0x7ffc0000 [ 213.455125][ T29] audit: type=1326 audit(219.536:5636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17936 comm="syz.7.5446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb626eee969 code=0x7ffc0000 [ 213.481431][ T29] audit: type=1326 audit(219.536:5637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17936 comm="syz.7.5446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb626eee969 code=0x7ffc0000 [ 213.504727][ T29] audit: type=1326 audit(219.536:5638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17936 comm="syz.7.5446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb626eee969 code=0x7ffc0000 [ 213.549627][T17944] SELinux: failed to load policy [ 213.682158][T17961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5458'. [ 213.691287][T17961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5458'. [ 213.942155][T17998] loop7: detected capacity change from 0 to 128 [ 213.948751][T17986] vhci_hcd: invalid port number 96 [ 213.953999][T17986] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 214.043436][T17998] syz.7.5485: attempt to access beyond end of device [ 214.043436][T17998] loop7: rw=0, sector=121, nr_sectors = 120 limit=128 [ 214.106086][ T31] kworker/u8:1: attempt to access beyond end of device [ 214.106086][ T31] loop7: rw=1, sector=241, nr_sectors = 800 limit=128 [ 214.225289][T18030] loop2: detected capacity change from 0 to 1024 [ 214.243839][T18030] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 214.259112][T18030] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 214.271081][T18030] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 214.280747][T18030] EXT4-fs (loop2): orphan cleanup on readonly fs [ 214.289190][T18030] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.5490: Inode bitmap for bg 0 marked uninitialized [ 214.306348][T18030] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 214.334308][T18042] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5496'. [ 214.419102][T18052] netlink: 'syz.7.5502': attribute type 10 has an invalid length. [ 214.427087][T18052] netlink: 2 bytes leftover after parsing attributes in process `syz.7.5502'. [ 214.460452][T18052] team0: entered promiscuous mode [ 214.465595][T18052] team_slave_0: entered promiscuous mode [ 214.471449][T18052] team_slave_1: entered promiscuous mode [ 214.479578][T18052] bridge0: port 3(team0) entered blocking state [ 214.485937][T18052] bridge0: port 3(team0) entered disabled state [ 214.493043][T18052] team0: entered allmulticast mode [ 214.498440][T18052] team_slave_0: entered allmulticast mode [ 214.504213][T18052] team_slave_1: entered allmulticast mode [ 214.511588][T18052] bridge0: port 3(team0) entered blocking state [ 214.517974][T18052] bridge0: port 3(team0) entered forwarding state [ 214.548461][T18062] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5506'. [ 214.842566][T18096] loop7: detected capacity change from 0 to 512 [ 214.849697][T18096] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 214.869357][T18092] Falling back ldisc for ttyS3. [ 214.880698][T18096] EXT4-fs (loop7): 1 truncate cleaned up [ 214.895394][T18096] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.5522: invalid indirect mapped block 3489660928 (level 0) [ 214.917797][T18096] EXT4-fs (loop7): Remounting filesystem read-only [ 215.653903][T18153] netlink: 'syz.5.5546': attribute type 11 has an invalid length. [ 215.661982][T18153] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5546'. [ 215.690893][T18156] block device autoloading is deprecated and will be removed. [ 215.698819][T18156] syz.2.5557: attempt to access beyond end of device [ 215.698819][T18156] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 215.927171][T18181] netlink: 'syz.2.5558': attribute type 11 has an invalid length. [ 215.945889][T18181] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5558'. [ 215.972818][T18185] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5559'. [ 216.005285][T18188] loop8: detected capacity change from 0 to 512 [ 216.014609][T18188] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 216.028131][T18188] EXT4-fs (loop8): 1 truncate cleaned up [ 216.051821][T18188] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.5562: invalid indirect mapped block 3489660928 (level 0) [ 216.073366][T18188] EXT4-fs (loop8): Remounting filesystem read-only [ 216.336760][T18220] netlink: 'syz.2.5576': attribute type 10 has an invalid length. [ 216.344646][T18220] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5576'. [ 216.364944][T18220] team0: entered promiscuous mode [ 216.370225][T18220] team_slave_0: entered promiscuous mode [ 216.376001][T18220] team_slave_1: entered promiscuous mode [ 216.495646][T18232] loop2: detected capacity change from 0 to 512 [ 216.503073][T18232] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 216.516827][T18232] EXT4-fs (loop2): 1 truncate cleaned up [ 216.547814][T18232] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.5581: invalid indirect mapped block 3489660928 (level 0) [ 216.575594][T18232] EXT4-fs (loop2): Remounting filesystem read-only [ 216.623143][T18243] loop8: detected capacity change from 0 to 512 [ 216.643057][T18243] EXT4-fs (loop8): too many log groups per flexible block group [ 216.650902][T18243] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 216.660907][T18243] EXT4-fs (loop8): mount failed [ 216.669262][T18249] loop2: detected capacity change from 0 to 128 [ 216.781743][T18262] loop2: detected capacity change from 0 to 2048 [ 216.788609][T18262] EXT4-fs: Ignoring removed bh option [ 216.799496][T18264] syz.8.5594: attempt to access beyond end of device [ 216.799496][T18264] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 216.846818][T18269] program syz.7.5593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.912200][T18272] netlink: 'syz.5.5596': attribute type 11 has an invalid length. [ 216.920202][T18272] netlink: 448 bytes leftover after parsing attributes in process `syz.5.5596'. [ 217.183018][T18282] Falling back ldisc for ttyS3. [ 217.349541][ T57] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 217.387123][ T57] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 217.399392][ T57] EXT4-fs (loop2): This should not happen!! Data will be lost [ 217.399392][ T57] [ 217.409098][ T57] EXT4-fs (loop2): Total free blocks count 0 [ 217.415218][ T57] EXT4-fs (loop2): Free/Dirty block details [ 217.421187][ T57] EXT4-fs (loop2): free_blocks=2415919104 [ 217.427046][ T57] EXT4-fs (loop2): dirty_blocks=8224 [ 217.432491][ T57] EXT4-fs (loop2): Block reservation details [ 217.438534][ T57] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 217.478098][ T6060] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 217.481039][T18311] loop7: detected capacity change from 0 to 512 [ 217.490734][ T6060] EXT4-fs (loop2): This should not happen!! Data will be lost [ 217.490734][ T6060] [ 217.506862][T18311] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 217.515992][T18311] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 217.526990][T18311] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 217.535090][T18311] System zones: 0-2, 18-18, 34-34 [ 217.545061][T18311] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 217.563253][T18314] ipvlan0: entered promiscuous mode [ 217.569735][T18314] ipvlan0: left promiscuous mode [ 217.569949][T18311] EXT4-fs (loop7): 1 truncate cleaned up [ 217.581153][T18311] EXT4-fs mount: 20 callbacks suppressed [ 217.581228][T18311] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.619293][T17664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.671833][T18320] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 217.699862][T18324] loop7: detected capacity change from 0 to 1024 [ 217.718209][T18324] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.734200][T18324] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 217.750119][T18324] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 51 with max blocks 1 with error 28 [ 217.762477][T18324] EXT4-fs (loop7): This should not happen!! Data will be lost [ 217.762477][T18324] [ 217.772250][T18324] EXT4-fs (loop7): Total free blocks count 0 [ 217.778426][T18324] EXT4-fs (loop7): Free/Dirty block details [ 217.784519][T18324] EXT4-fs (loop7): free_blocks=4293918720 [ 217.790403][T18324] EXT4-fs (loop7): dirty_blocks=16 [ 217.795738][T18324] EXT4-fs (loop7): Block reservation details [ 217.801923][T18324] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 217.807125][T18334] netlink: 'syz.2.5628': attribute type 11 has an invalid length. [ 217.820825][T18333] loop1: detected capacity change from 0 to 2048 [ 217.839427][T18333] EXT4-fs: Ignoring removed bh option [ 217.853444][T18333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.872155][T17664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.354443][ T57] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 218.378255][ T57] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 218.390564][ T57] EXT4-fs (loop1): This should not happen!! Data will be lost [ 218.390564][ T57] [ 218.400250][ T57] EXT4-fs (loop1): Total free blocks count 0 [ 218.406306][ T57] EXT4-fs (loop1): Free/Dirty block details [ 218.412376][ T57] EXT4-fs (loop1): free_blocks=2415919104 [ 218.418120][ T57] EXT4-fs (loop1): dirty_blocks=8224 [ 218.423456][ T57] EXT4-fs (loop1): Block reservation details [ 218.429486][ T57] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 218.455058][ T6060] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 218.472137][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 218.472156][ T29] audit: type=1326 audit(224.977:5759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18361 comm="syz.7.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb626eee969 code=0x7ffc0000 [ 218.502210][ T29] audit: type=1326 audit(224.977:5760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18361 comm="syz.7.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb626eee969 code=0x7ffc0000 [ 218.525506][ T29] audit: type=1326 audit(224.977:5761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18361 comm="syz.7.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fb626eee969 code=0x7ffc0000 [ 218.548428][ T29] audit: type=1326 audit(224.977:5762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18361 comm="syz.7.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb626eee969 code=0x7ffc0000 [ 218.571398][ T29] audit: type=1326 audit(224.977:5763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18361 comm="syz.7.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb626eee969 code=0x7ffc0000 [ 218.618309][T18371] netlink: 'syz.7.5634': attribute type 11 has an invalid length. [ 218.630472][T18371] __nla_validate_parse: 4 callbacks suppressed [ 218.630492][T18371] netlink: 448 bytes leftover after parsing attributes in process `syz.7.5634'. [ 218.645923][T18373] loop5: detected capacity change from 0 to 512 [ 218.681457][T18373] EXT4-fs (loop5): too many log groups per flexible block group [ 218.689320][T18373] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 218.697514][T18369] Falling back ldisc for ttyS3. [ 218.718393][T18373] EXT4-fs (loop5): mount failed [ 218.763013][T18383] loop8: detected capacity change from 0 to 128 [ 218.800595][T18393] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5642'. [ 218.820660][T18383] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 218.848933][ T29] audit: type=1326 audit(225.366:5764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18396 comm="syz.5.5645" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff67ad5e969 code=0x0 [ 218.911327][T17188] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.958744][T18405] netlink: 'syz.1.5648': attribute type 11 has an invalid length. [ 218.967499][T18405] netlink: 448 bytes leftover after parsing attributes in process `syz.1.5648'. [ 218.990438][T18407] loop8: detected capacity change from 0 to 1024 [ 219.019249][ T29] audit: type=1326 audit(225.544:5765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18411 comm="syz.1.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94999e969 code=0x7ffc0000 [ 219.024031][T18407] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.042299][ T29] audit: type=1326 audit(225.544:5766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18411 comm="syz.1.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7ff94999e969 code=0x7ffc0000 [ 219.077299][ T29] audit: type=1326 audit(225.544:5767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18411 comm="syz.1.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94999e969 code=0x7ffc0000 [ 219.103593][T18415] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5651'. [ 219.117151][ T6061] bridge_slave_1: left allmulticast mode [ 219.122985][ T6061] bridge_slave_1: left promiscuous mode [ 219.128728][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.146952][ T6061] bridge_slave_0: left promiscuous mode [ 219.152645][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.189770][T18407] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 219.211334][T18407] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 51 with max blocks 1 with error 28 [ 219.223806][T18407] EXT4-fs (loop8): This should not happen!! Data will be lost [ 219.223806][T18407] [ 219.233511][T18407] EXT4-fs (loop8): Total free blocks count 0 [ 219.239625][T18407] EXT4-fs (loop8): Free/Dirty block details [ 219.245572][T18407] EXT4-fs (loop8): free_blocks=4293918720 [ 219.251396][T18407] EXT4-fs (loop8): dirty_blocks=16 [ 219.256581][T18407] EXT4-fs (loop8): Block reservation details [ 219.262617][T18407] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 219.262692][T18424] loop1: detected capacity change from 0 to 512 [ 219.291298][T18424] EXT4-fs (loop1): too many log groups per flexible block group [ 219.299050][T18424] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 219.299598][T17188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.306245][T18424] EXT4-fs (loop1): mount failed [ 219.318079][ T6061] bond1 (unregistering): (slave geneve2): Releasing active interface [ 219.329334][ T6061] geneve2 (unregistering): left promiscuous mode [ 219.335887][ T6061] geneve2 (unregistering): left allmulticast mode [ 219.356123][ T29] audit: type=1326 audit(225.901:5768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18430 comm="syz.8.5657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 219.412056][T18433] loop1: detected capacity change from 0 to 512 [ 219.419038][T18433] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 219.428199][T18433] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 219.437384][T18433] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 219.445744][T18433] System zones: 0-2, 18-18, 34-34 [ 219.451305][T18433] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 219.466207][ T6061] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.466249][T18433] EXT4-fs (loop1): 1 truncate cleaned up [ 219.480726][ T6061] bond_slave_0: left promiscuous mode [ 219.480976][T18433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.486217][ T6061] bond_slave_0: left allmulticast mode [ 219.506555][ T6061] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.515774][ T6061] bond_slave_1: left promiscuous mode [ 219.521237][ T6061] bond_slave_1: left allmulticast mode [ 219.527632][ T6061] $Hÿ (unregistering): Released all slaves [ 219.534751][T14119] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.536948][ T6061] bond1 (unregistering): Released all slaves [ 219.559259][T18436] loop8: detected capacity change from 0 to 2048 [ 219.586631][T18438] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 219.597930][ T6061] tipc: Disabling bearer [ 219.603292][ T6061] tipc: Left network mode [ 219.610219][T18436] loop8: p1 < > p4 [ 219.612761][T18438] ipvlan0: entered promiscuous mode [ 219.619992][T18436] loop8: p4 size 8388608 extends beyond EOD, truncated [ 219.622034][T18438] ipvlan0: left promiscuous mode [ 219.647608][ T6061] hsr_slave_0: left promiscuous mode [ 219.653406][ T6061] hsr_slave_1: left promiscuous mode [ 219.672506][ T6061] veth1_macvtap: left promiscuous mode [ 219.705667][ T6061] veth0_macvtap: left promiscuous mode [ 219.718024][ T6061] veth1_vlan: left promiscuous mode [ 219.723473][ T6061] veth0_vlan: left promiscuous mode [ 219.888888][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 219.897206][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 219.905063][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 219.913246][ T6061] team0 (unregistering): Port device team_slave_1 removed [ 219.914491][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 219.928475][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 219.936464][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 219.944267][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 219.952128][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 219.960021][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 219.967892][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 219.975723][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 219.983552][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 219.991320][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 219.999125][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 220.007408][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 220.008223][ T6061] team0 (unregistering): Port device team_slave_0 removed [ 220.015211][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 220.015240][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 220.015268][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 220.015296][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 220.015325][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 220.061215][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 220.069076][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 220.076826][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 220.084625][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 220.092455][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 220.100279][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 220.108104][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 220.115881][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 220.123649][ T10] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 220.135999][ T10] hid-generic 0000:0000:20000000.0009: hidraw0: HID v0.01 Device [syz0] on syz1 [ 220.136796][T18459] smc: net device bond0 erased user defined pnetid SYZ2 [ 220.237160][T18482] loop7: detected capacity change from 0 to 2048 [ 220.280794][T18482] loop7: p1 < > p4 [ 220.286545][T18482] loop7: p4 size 8388608 extends beyond EOD, truncated [ 220.303822][T18491] loop5: detected capacity change from 0 to 1024 [ 220.340230][T18491] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.400536][T18491] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 220.423650][T18491] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 51 with max blocks 1 with error 28 [ 220.435997][T18491] EXT4-fs (loop5): This should not happen!! Data will be lost [ 220.435997][T18491] [ 220.445730][T18491] EXT4-fs (loop5): Total free blocks count 0 [ 220.451794][T18491] EXT4-fs (loop5): Free/Dirty block details [ 220.457714][T18491] EXT4-fs (loop5): free_blocks=4293918720 [ 220.463506][T18491] EXT4-fs (loop5): dirty_blocks=16 [ 220.468752][T18491] EXT4-fs (loop5): Block reservation details [ 220.474909][T18491] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 220.517151][T11675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.641793][ T1040] kernel read not supported for file /vga_arbiter (pid: 1040 comm: kworker/1:2) [ 220.660816][T18542] netlink: 536 bytes leftover after parsing attributes in process `syz.8.5701'. [ 220.684645][T18542] netlink: 124 bytes leftover after parsing attributes in process `syz.8.5701'. [ 220.947464][T18578] tipc: Started in network mode [ 220.952490][T18578] tipc: Node identity ac14140f, cluster identity 4711 [ 220.978701][T18581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5706'. [ 220.982397][T18584] loop2: detected capacity change from 0 to 512 [ 220.987802][T18581] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5706'. [ 220.994334][T18578] tipc: New replicast peer: 255.255.255.83 [ 221.009043][T18578] tipc: Enabled bearer , priority 10 [ 221.016545][T18584] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 221.077408][T18584] EXT4-fs (loop2): 1 truncate cleaned up [ 221.088127][T18584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.350434][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.567853][T18647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5721'. [ 221.651119][T18534] syz.5.5698 (18534) used greatest stack depth: 7184 bytes left [ 221.714341][T18673] new mount options do not match the existing superblock, will be ignored [ 221.864868][T18702] atomic_op ffff888119a3a928 conn xmit_atomic 0000000000000000 [ 222.067842][ T3190] tipc: Node number set to 2886997007 [ 222.102844][T18741] tipc: New replicast peer: 255.255.255.83 [ 222.108985][T18741] tipc: Enabled bearer , priority 10 [ 222.390336][T18777] bridge0: entered promiscuous mode [ 222.396574][T18777] macvlan2: entered promiscuous mode [ 222.403727][T18777] bridge0: port 3(macvlan2) entered blocking state [ 222.410375][T18777] bridge0: port 3(macvlan2) entered disabled state [ 222.417277][T18777] macvlan2: entered allmulticast mode [ 222.422787][T18777] bridge0: entered allmulticast mode [ 222.429195][T18777] macvlan2: left allmulticast mode [ 222.434385][T18777] bridge0: left allmulticast mode [ 222.440389][T18777] bridge0: left promiscuous mode [ 222.511774][T18791] dvmrp1: entered allmulticast mode [ 222.525769][T18791] dvmrp1: left allmulticast mode [ 222.592149][T18799] hub 9-0:1.0: USB hub found [ 222.596971][T18799] hub 9-0:1.0: 8 ports detected [ 222.739412][T18810] new mount options do not match the existing superblock, will be ignored [ 222.836717][T18818] SELinux: security policydb version 18 (MLS) not backwards compatible [ 222.873830][T18818] SELinux: failed to load policy [ 223.138980][T18854] $Hÿ: renamed from bond0 (while UP) [ 223.155981][T18854] $Hÿ: entered promiscuous mode [ 223.161076][T18854] bond_slave_0: entered promiscuous mode [ 223.166980][T18854] bond_slave_1: entered promiscuous mode [ 223.172961][T18854] team0: entered promiscuous mode [ 223.178269][T18854] team_slave_0: entered promiscuous mode [ 223.184142][T18854] team_slave_1: entered promiscuous mode [ 223.640173][T18904] loop1: detected capacity change from 0 to 512 [ 223.656545][T18904] journal_path: Non-blockdev passed as './bus' [ 223.662858][T18904] EXT4-fs: error: could not find journal device path [ 223.774321][T18915] hub 9-0:1.0: USB hub found [ 223.782595][T18915] hub 9-0:1.0: 8 ports detected [ 223.970553][T18940] vxcan1 speed is unknown, defaulting to 1000 [ 223.994440][T18940] vxcan1 speed is unknown, defaulting to 1000 [ 224.049597][T18940] vxcan1 speed is unknown, defaulting to 1000 [ 224.149674][ T3391] IPVS: starting estimator thread 0... [ 224.187077][T18940] infiniband syz2: set active [ 224.191928][T18940] infiniband syz2: added vxcan1 [ 224.196854][ T3190] vxcan1 speed is unknown, defaulting to 1000 [ 224.205787][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 224.205804][ T29] audit: type=1326 audit(230.995:5842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18956 comm="syz.1.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94999e969 code=0x7ffc0000 [ 224.239682][T18957] IPVS: using max 2208 ests per chain, 110400 per kthread [ 224.251808][T18940] RDS/IB: syz2: added [ 224.255918][T18940] smc: adding ib device syz2 with port count 1 [ 224.272020][T18940] smc: ib device syz2 port 1 has pnetid [ 224.278206][ T3190] vxcan1 speed is unknown, defaulting to 1000 [ 224.290069][T18940] vxcan1 speed is unknown, defaulting to 1000 [ 224.295890][ T29] audit: type=1326 audit(230.995:5843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18956 comm="syz.1.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7ff94999e969 code=0x7ffc0000 [ 224.319088][ T29] audit: type=1326 audit(230.995:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18956 comm="syz.1.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94999e969 code=0x7ffc0000 [ 224.342026][ T29] audit: type=1326 audit(231.006:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18956 comm="syz.1.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94999e969 code=0x7ffc0000 [ 224.359459][T18940] vxcan1 speed is unknown, defaulting to 1000 [ 224.487360][T18940] vxcan1 speed is unknown, defaulting to 1000 [ 224.524358][T18940] vxcan1 speed is unknown, defaulting to 1000 [ 224.561910][T18940] vxcan1 speed is unknown, defaulting to 1000 [ 224.594782][T18983] __nla_validate_parse: 4 callbacks suppressed [ 224.594845][T18983] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5806'. [ 224.611303][T18983] netem: change failed [ 224.615769][T18940] vxcan1 speed is unknown, defaulting to 1000 [ 224.669664][T18940] vxcan1 speed is unknown, defaulting to 1000 [ 224.802720][T18940] vxcan1 speed is unknown, defaulting to 1000 [ 225.104806][T19023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5813'. [ 225.113785][T19023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5813'. [ 225.123589][T19023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5813'. [ 225.133757][T19025] netlink: 'syz.5.5814': attribute type 10 has an invalid length. [ 225.145501][T19025] batman_adv: batadv0: Adding interface: team0 [ 225.151758][T19025] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.159784][T18899] syz.2.5790 (18899) used greatest stack depth: 5952 bytes left [ 225.177036][T19025] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 225.189880][T19023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5813'. [ 225.204116][T19023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5813'. [ 225.223870][T19030] SELinux: security policydb version 18 (MLS) not backwards compatible [ 225.235118][T19023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5813'. [ 225.238265][T19030] SELinux: failed to load policy [ 225.288872][T19023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5813'. [ 225.297962][T19023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5813'. [ 225.312223][T19023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5813'. [ 225.343493][T19042] netlink: 'syz.5.5820': attribute type 4 has an invalid length. [ 225.429920][T19052] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 225.429920][T19052] program syz.7.5826 not setting count and/or reply_len properly [ 225.461435][ T29] audit: type=1326 audit(232.319:5846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19053 comm="syz.2.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 225.484491][ T29] audit: type=1326 audit(232.319:5847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19053 comm="syz.2.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 225.510965][ T29] audit: type=1326 audit(232.361:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19053 comm="syz.2.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 225.533963][ T29] audit: type=1326 audit(232.361:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19053 comm="syz.2.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 225.556973][ T29] audit: type=1326 audit(232.361:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19053 comm="syz.2.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 225.580088][ T29] audit: type=1326 audit(232.361:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19053 comm="syz.2.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 225.623680][T19060] bridge0: port 1(gretap0) entered blocking state [ 225.630286][T19060] bridge0: port 1(gretap0) entered disabled state [ 225.636949][T19060] gretap0: entered allmulticast mode [ 225.643511][T19060] gretap0: entered promiscuous mode [ 225.649645][T19060] bridge0: port 1(gretap0) entered blocking state [ 225.656100][T19060] bridge0: port 1(gretap0) entered forwarding state [ 225.884582][T19092] SELinux: failed to load policy [ 225.923017][T19101] netlink: 'syz.5.5849': attribute type 13 has an invalid length. [ 226.122191][T19128] bridge0: port 3(gretap0) entered blocking state [ 226.128855][T19128] bridge0: port 3(gretap0) entered disabled state [ 226.152000][T19128] gretap0: entered allmulticast mode [ 226.178689][T19128] bridge0: port 3(gretap0) entered blocking state [ 226.185264][T19128] bridge0: port 3(gretap0) entered forwarding state [ 226.213965][T19130] team0: left allmulticast mode [ 226.222988][T19130] team_slave_0: left allmulticast mode [ 226.228547][T19130] team_slave_1: left allmulticast mode [ 226.234355][T19130] bridge0: port 3(team0) entered disabled state [ 226.277085][T19139] netlink: 'syz.1.5864': attribute type 13 has an invalid length. [ 226.302306][T19130] bridge_slave_0: left allmulticast mode [ 226.308072][T19130] bridge_slave_0: left promiscuous mode [ 226.313937][T19130] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.328429][T19130] bridge_slave_1: left allmulticast mode [ 226.334160][T19130] bridge_slave_1: left promiscuous mode [ 226.339936][T19130] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.378815][T19130] bond0: (slave bond_slave_0): Releasing backup interface [ 226.398869][T19151] SELinux: failed to load policy [ 226.402996][T19155] loop8: detected capacity change from 0 to 512 [ 226.424065][T19155] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 226.434420][T19130] bond0: (slave bond_slave_1): Releasing backup interface [ 226.468655][T19130] team_slave_0: left promiscuous mode [ 226.475709][T19155] EXT4-fs (loop8): 1 truncate cleaned up [ 226.481872][T19155] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.486217][T19130] team0: Port device team_slave_0 removed [ 226.538887][T19130] team_slave_1: left promiscuous mode [ 226.566238][T19130] team0: Port device team_slave_1 removed [ 226.576098][T19130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.583673][T19130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.594455][T19130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.602031][T19130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.672225][T19173] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 226.672225][T19173] program syz.2.5878 not setting count and/or reply_len properly [ 226.772527][T17188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.776356][T19183] loop5: detected capacity change from 0 to 512 [ 226.821410][T19183] ext4: Unknown parameter 'permit_directio' [ 226.882325][T19194] bond0: entered promiscuous mode [ 226.887494][T19194] @ÿ: entered promiscuous mode [ 226.892607][T19194] bond_slave_1: entered promiscuous mode [ 226.908458][T19194] batadv0: entered promiscuous mode [ 226.920941][T19194] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 226.939602][T19194] bond0: left promiscuous mode [ 226.944478][T19194] @ÿ: left promiscuous mode [ 226.949347][T19194] bond_slave_1: left promiscuous mode [ 226.966964][T19194] batadv0: left promiscuous mode [ 227.000621][T19207] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 227.000621][T19207] program syz.8.5893 not setting count and/or reply_len properly [ 227.036139][T19208] IPv6: Can't replace route, no match found [ 227.090800][T19210] batman_adv: batadv0: Removing interface: team0 [ 227.127090][T19210] bridge_slave_0: left allmulticast mode [ 227.133052][T19210] bridge_slave_0: left promiscuous mode [ 227.138850][T19210] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.155436][T19210] bridge_slave_1: left allmulticast mode [ 227.161239][T19210] bridge_slave_1: left promiscuous mode [ 227.166977][T19210] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.179309][T19210] bond0: (slave 5@ÿ): Releasing backup interface [ 227.192186][T19210] bond0: (slave bond_slave_1): Releasing backup interface [ 227.210723][T19215] serio: Serial port ptm0 [ 227.221949][T19210] team0: Port device team_slave_1 removed [ 227.229037][T19210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.236497][T19210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.252199][T19210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.259758][T19210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.287404][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 227.403104][T19226] openvswitch: netlink: Message has 6 unknown bytes. [ 227.492035][T19240] netlink: 'syz.7.5908': attribute type 4 has an invalid length. [ 227.560029][T19245] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 227.560029][T19245] program syz.5.5910 not setting count and/or reply_len properly [ 227.597320][T19242] pimreg: entered allmulticast mode [ 227.621590][T19242] pimreg: left allmulticast mode [ 227.666663][T19255] netem: change failed [ 227.673866][T19252] gretap0: left allmulticast mode [ 227.679205][T19252] bridge0: port 3(gretap0) entered disabled state [ 227.699718][T19252] $Hÿ: (slave team0): Releasing backup interface [ 227.709670][T19252] team0: left promiscuous mode [ 227.717331][T19252] team_slave_0: left promiscuous mode [ 227.722986][T19252] team_slave_1: left promiscuous mode [ 227.731288][T19252] batman_adv: batadv0: Interface deactivated: dummy0 [ 227.738136][T19252] batman_adv: batadv0: Removing interface: dummy0 [ 227.751061][T19252] bridge_slave_0: left allmulticast mode [ 227.757086][T19252] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.768183][T19252] bridge_slave_1: left allmulticast mode [ 227.773944][T19252] bridge_slave_1: left promiscuous mode [ 227.779710][T19252] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.792296][T19252] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 227.801241][T19252] bond_slave_0: left promiscuous mode [ 227.809226][T19252] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 227.817277][T19252] bond_slave_1: left promiscuous mode [ 227.828058][T19252] team0: Port device team_slave_0 removed [ 227.837278][T19252] team0: Port device team_slave_1 removed [ 227.844224][T19252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.851788][T19252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.863490][T19252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.870996][T19252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.998120][T19264] loop7: detected capacity change from 0 to 512 [ 228.010171][T19264] ext4: Unknown parameter 'permit_directio' [ 228.018940][T19265] serio: Serial port ptm0 [ 228.083303][T19269] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 228.099903][T19273] netlink: 'syz.8.5922': attribute type 4 has an invalid length. [ 228.240717][T19287] IPv6: Can't replace route, no match found [ 228.257405][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 228.270441][T19289] loop8: detected capacity change from 0 to 1024 [ 228.285287][ T23] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 228.330917][T19299] netem: change failed [ 228.866489][T19385] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 228.866489][T19385] program syz.1.5935 not setting count and/or reply_len properly [ 229.034864][T19408] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 229.092158][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 229.092175][ T29] audit: type=1326 audit(236.121:5960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19420 comm="syz.2.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 229.144178][ T29] audit: type=1326 audit(236.152:5961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19420 comm="syz.2.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 229.167167][ T29] audit: type=1326 audit(236.163:5962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19420 comm="syz.2.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 229.190065][ T29] audit: type=1326 audit(236.163:5963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19420 comm="syz.2.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 229.213065][ T29] audit: type=1326 audit(236.163:5964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19420 comm="syz.2.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 229.236235][ T29] audit: type=1326 audit(236.163:5965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19420 comm="syz.2.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 229.259230][ T29] audit: type=1326 audit(236.163:5966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19420 comm="syz.2.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 229.282162][ T29] audit: type=1326 audit(236.163:5967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19420 comm="syz.2.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 229.285926][T19428] loop8: detected capacity change from 0 to 128 [ 229.305394][ T29] audit: type=1326 audit(236.163:5968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19420 comm="syz.2.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 229.334586][ T29] audit: type=1326 audit(236.163:5969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19420 comm="syz.2.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 229.498413][T19455] __nla_validate_parse: 13 callbacks suppressed [ 229.498433][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5957'. [ 229.513773][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5957'. [ 229.525388][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5957'. [ 229.542250][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5957'. [ 229.551249][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5957'. [ 229.560207][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5957'. [ 229.583926][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5957'. [ 229.592869][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5957'. [ 229.601811][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5957'. [ 229.679179][T19473] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5963'. [ 229.688360][T19473] netlink: 'syz.8.5963': attribute type 5 has an invalid length. [ 229.825123][T19493] veth0_vlan: entered allmulticast mode [ 229.858474][T19495] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 229.879401][T19493] veth0_vlan: left promiscuous mode [ 229.884868][T19493] veth0_vlan: entered promiscuous mode [ 230.041935][T19515] vxcan1 speed is unknown, defaulting to 1000 [ 230.081331][T19523] netlink: 'syz.2.5985': attribute type 3 has an invalid length. [ 230.276369][T19547] hsr_slave_0: left promiscuous mode [ 230.283770][T19547] hsr_slave_1: left promiscuous mode [ 230.362917][T19557] loop5: detected capacity change from 0 to 2048 [ 230.373711][T19555] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 230.447147][T19557] loop5: p1 < > p4 [ 230.455622][T19557] loop5: p4 size 8388608 extends beyond EOD, truncated [ 231.039125][T19623] loop5: detected capacity change from 0 to 1024 [ 231.045927][T19623] EXT4-fs: Ignoring removed i_version option [ 231.052137][T19623] EXT4-fs: test_dummy_encryption option not supported [ 231.287011][T19611] Set syz1 is full, maxelem 65536 reached [ 231.412747][T19646] loop1: detected capacity change from 0 to 164 [ 231.431586][T19646] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 231.452206][T19646] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 231.658766][T19660] SELinux: ebitmap: map size 149 does not match my size 64 (high bit was 0) [ 231.680344][T19660] SELinux: failed to load policy [ 232.204475][T19681] loop5: detected capacity change from 0 to 128 [ 232.217053][T19681] FAT-fs (loop5): Directory bread(block 162) failed [ 232.226246][T19681] FAT-fs (loop5): Directory bread(block 163) failed [ 232.233750][T19681] FAT-fs (loop5): Directory bread(block 164) failed [ 232.241784][T19681] FAT-fs (loop5): Directory bread(block 165) failed [ 232.248670][T19681] FAT-fs (loop5): Directory bread(block 166) failed [ 232.256700][T19681] FAT-fs (loop5): Directory bread(block 167) failed [ 232.263414][T19681] FAT-fs (loop5): Directory bread(block 168) failed [ 232.271125][T19681] FAT-fs (loop5): Directory bread(block 169) failed [ 232.304545][T19681] FAT-fs (loop5): Directory bread(block 162) failed [ 232.347257][T19681] FAT-fs (loop5): Directory bread(block 163) failed [ 232.358796][T19681] syz.5.6056: attempt to access beyond end of device [ 232.358796][T19681] loop5: rw=3, sector=226, nr_sectors = 6 limit=128 [ 232.372210][T19681] syz.5.6056: attempt to access beyond end of device [ 232.372210][T19681] loop5: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 232.451598][T19692] loop7: detected capacity change from 0 to 512 [ 232.484521][T19692] EXT4-fs error (device loop7): ext4_iget_extra_inode:4693: inode #15: comm syz.7.6060: corrupted in-inode xattr: invalid ea_ino [ 232.501866][T19692] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.6060: couldn't read orphan inode 15 (err -117) [ 232.521442][T19692] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.606387][T17664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.696730][T19710] loop1: detected capacity change from 0 to 1024 [ 232.755811][T19710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.816008][T14119] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.981751][T19749] loop5: detected capacity change from 0 to 512 [ 232.989000][T19734] infiniband syz1: set active [ 232.991698][T19749] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 232.993802][T19734] infiniband syz1: added veth0_to_bridge [ 233.016737][T19734] RDS/IB: syz1: added [ 233.020781][T19734] smc: adding ib device syz1 with port count 1 [ 233.037014][T19749] EXT4-fs (loop5): 1 truncate cleaned up [ 233.046406][T19734] smc: ib device syz1 port 1 has pnetid [ 233.055746][T19749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.152504][T11675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.432959][T19789] netlink: 'syz.1.6102': attribute type 3 has an invalid length. [ 233.455732][T19788] wireguard0: entered promiscuous mode [ 233.461230][T19788] wireguard0: entered allmulticast mode [ 233.512465][T19801] openvswitch: netlink: Message has 6 unknown bytes. [ 233.669719][T19810] loop2: detected capacity change from 0 to 1024 [ 233.679643][T19812] syzkaller1: entered promiscuous mode [ 233.685198][T19812] syzkaller1: entered allmulticast mode [ 233.694894][T19810] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 233.706003][T19810] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 233.709341][T19814] loop8: detected capacity change from 0 to 256 [ 233.718089][T19810] JBD2: no valid journal superblock found [ 233.728942][T19810] EXT4-fs (loop2): Could not load journal inode [ 233.747782][T19810] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 234.057475][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 234.057492][ T29] audit: type=1400 audit(241.341:6103): avc: denied { read write } for pid=17664 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.109072][ T29] audit: type=1400 audit(241.372:6104): avc: denied { open } for pid=17664 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.132787][ T29] audit: type=1400 audit(241.372:6105): avc: denied { ioctl } for pid=17664 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.205608][ T29] audit: type=1400 audit(241.414:6106): avc: denied { map_create } for pid=19848 comm="syz.7.6130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 234.224374][ T29] audit: type=1400 audit(241.414:6107): avc: denied { perfmon } for pid=19848 comm="syz.7.6130" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 234.244824][ T29] audit: type=1400 audit(241.414:6108): avc: denied { map_read map_write } for pid=19848 comm="syz.7.6130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 234.264210][ T29] audit: type=1400 audit(241.425:6109): avc: denied { prog_load } for pid=19848 comm="syz.7.6130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 234.282861][ T29] audit: type=1400 audit(241.425:6110): avc: denied { bpf } for pid=19848 comm="syz.7.6130" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 234.302998][ T29] audit: type=1400 audit(241.425:6111): avc: denied { prog_run } for pid=19848 comm="syz.7.6130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 234.311717][ T3190] kernel write not supported for file /414/loginuid (pid: 3190 comm: kworker/0:2) [ 234.321722][ T29] audit: type=1400 audit(241.477:6112): avc: denied { create } for pid=19849 comm="syz.8.6129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 234.502510][T19867] SELinux: failed to load policy [ 234.638561][T19883] __nla_validate_parse: 7 callbacks suppressed [ 234.638581][T19883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6144'. [ 235.203997][T19911] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6155'. [ 235.607890][T19938] netdevsim netdevsim5: Direct firmware load for ÿ failed with error -2 [ 235.615189][T19945] vxcan1 speed is unknown, defaulting to 1000 [ 235.662442][T19946] syzkaller0: entered promiscuous mode [ 235.668055][T19946] syzkaller0: entered allmulticast mode [ 235.960492][T19956] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 235.984090][T19956] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 236.282031][T19977] loop7: detected capacity change from 0 to 1024 [ 236.314548][T19977] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 236.325648][T19977] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 236.356484][T19977] JBD2: no valid journal superblock found [ 236.362311][T19977] EXT4-fs (loop7): Could not load journal inode [ 236.424285][T19977] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 236.493132][T19997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.523241][T19997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.375031][T20027] loop5: detected capacity change from 0 to 1024 [ 237.407533][T20027] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 237.418533][T20027] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 237.439381][T20027] JBD2: no valid journal superblock found [ 237.445594][T20027] EXT4-fs (loop5): Could not load journal inode [ 237.460310][T20027] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 237.694451][T20084] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6221'. [ 237.763067][T20098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6224'. [ 238.545640][T20248] program syz.1.6252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.570072][T20251] Invalid ELF header magic: != ELF [ 238.613845][T20257] vxcan1 speed is unknown, defaulting to 1000 [ 238.653948][T20262] loop1: detected capacity change from 0 to 512 [ 238.682898][T20262] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 238.699621][T20262] EXT4-fs (loop1): mount failed [ 238.786264][T20275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6261'. [ 238.839480][ T29] kauditd_printk_skb: 292 callbacks suppressed [ 238.839496][ T29] audit: type=1400 audit(246.361:6404): avc: denied { tracepoint } for pid=20278 comm="syz.7.6263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 238.870934][ T29] audit: type=1400 audit(246.393:6405): avc: denied { read } for pid=20278 comm="syz.7.6263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 238.915673][ T29] audit: type=1400 audit(246.435:6406): avc: denied { write } for pid=20279 comm="syz.1.6265" path="socket:[59845]" dev="sockfs" ino=59845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 238.979695][ T29] audit: type=1400 audit(246.519:6407): avc: denied { bind } for pid=20284 comm="syz.8.6268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 239.003286][T20285] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6268'. [ 239.012471][T20285] hsr_slave_0: left promiscuous mode [ 239.019543][T20285] hsr_slave_1: left promiscuous mode [ 239.038387][T20289] smc: net device bond0 applied user defined pnetid SYZ2 [ 239.045691][T20289] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 239.054246][T20289] smc: net device bond0 erased user defined pnetid SYZ2 [ 239.061332][T20289] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 239.115239][T20295] serio: Serial port ptm0 [ 239.145220][T20298] loop1: detected capacity change from 0 to 128 [ 239.152964][T20298] FAT-fs (loop1): Directory bread(block 162) failed [ 239.160050][T20298] FAT-fs (loop1): Directory bread(block 163) failed [ 239.166777][T20298] FAT-fs (loop1): Directory bread(block 164) failed [ 239.173626][T20298] FAT-fs (loop1): Directory bread(block 165) failed [ 239.180420][T20298] FAT-fs (loop1): Directory bread(block 166) failed [ 239.187183][T20298] FAT-fs (loop1): Directory bread(block 167) failed [ 239.194068][T20298] FAT-fs (loop1): Directory bread(block 168) failed [ 239.201866][T20298] FAT-fs (loop1): Directory bread(block 169) failed [ 239.213000][T20298] FAT-fs (loop1): Directory bread(block 162) failed [ 239.215089][ T29] audit: type=1400 audit(246.750:6408): avc: denied { mount } for pid=20297 comm="syz.1.6274" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 239.221139][T20298] FAT-fs (loop1): Directory bread(block 163) failed [ 239.248493][T20298] syz.1.6274: attempt to access beyond end of device [ 239.248493][T20298] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 239.261944][T20298] syz.1.6274: attempt to access beyond end of device [ 239.261944][T20298] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 239.321732][ T29] audit: type=1400 audit(246.876:6409): avc: denied { unmount } for pid=14119 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 239.370679][T20306] loop7: detected capacity change from 0 to 8192 [ 239.378982][T20306] vfat: Unknown parameter '&ó #ó0»!T—.yÕ„¯÷—Ž£ ÎÆ°*Æì ì#Ë' [ 239.394322][ T29] audit: type=1326 audit(246.949:6410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20313 comm="syz.1.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94999e969 code=0x7ffc0000 [ 239.417390][ T29] audit: type=1326 audit(246.949:6411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20313 comm="syz.1.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94999e969 code=0x7ffc0000 [ 239.456835][ T29] audit: type=1326 audit(247.012:6412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20313 comm="syz.1.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff94999e969 code=0x7ffc0000 [ 239.479902][ T29] audit: type=1326 audit(247.012:6413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20313 comm="syz.1.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94999e969 code=0x7ffc0000 [ 239.525797][T20323] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6285'. [ 239.598955][T20336] loop1: detected capacity change from 0 to 164 [ 239.608401][T20336] rock: directory entry would overflow storage [ 239.614696][T20336] rock: sig=0x4543, size=28, remaining=18 [ 239.687127][T20343] vhci_hcd: invalid port number 96 [ 239.692543][T20343] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 240.257671][T20384] loop5: detected capacity change from 0 to 164 [ 240.274908][T20384] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 240.291822][T20384] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 240.302012][T20384] Symlink component flag not implemented [ 240.307764][T20384] Symlink component flag not implemented [ 240.314049][T20384] Symlink component flag not implemented (7) [ 240.320146][T20384] Symlink component flag not implemented (116) [ 240.438411][T20407] netlink: 'syz.1.6322': attribute type 13 has an invalid length. [ 240.548822][T20419] program syz.8.6328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.571490][T20419] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 240.618720][T20407] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.627844][T20407] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.636769][T20407] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.645953][T20407] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.960529][T20465] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 240.967152][T20465] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 240.974669][T20465] vhci_hcd vhci_hcd.0: Device attached [ 240.983231][T20466] vhci_hcd: cannot find the pending unlink 2047 [ 240.990617][T20469] SELinux: syz.1.6349 (20469) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 241.004494][T20466] vhci_hcd: connection closed [ 241.016880][ T3772] vhci_hcd: stop threads [ 241.025973][ T3772] vhci_hcd: release socket [ 241.030400][ T3772] vhci_hcd: disconnect device [ 241.159573][T20480] loop2: detected capacity change from 0 to 8192 [ 241.244809][T20496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6359'. [ 241.263093][T20496] tipc: Resetting bearer [ 241.289549][T20496] tipc: Disabling bearer [ 241.295942][T20496] team_slave_0: left promiscuous mode [ 241.311135][T20496] team0 (unregistering): Port device team_slave_0 removed [ 241.319018][T20496] team_slave_1: left promiscuous mode [ 241.326744][T20496] team0 (unregistering): Port device team_slave_1 removed [ 241.414996][T20515] loop5: detected capacity change from 0 to 1024 [ 241.421908][T20515] EXT4-fs: Ignoring removed orlov option [ 241.428112][T20515] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 241.457829][T20515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.480884][T20525] loop1: detected capacity change from 0 to 164 [ 241.492593][T20515] EXT4-fs error (device loop5): ext4_find_dest_de:2054: inode #12: block 7: comm syz.5.6368: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 241.512522][T20525] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 241.521604][T20515] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.6368: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 241.551978][T20525] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 241.561931][T20525] Symlink component flag not implemented [ 241.567671][T20525] Symlink component flag not implemented [ 241.573851][T20525] Symlink component flag not implemented (7) [ 241.575863][T20529] vhci_hcd: invalid port number 96 [ 241.579967][T20525] Symlink component flag not implemented (116) [ 241.585003][T20529] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 241.586540][T11675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.592484][T20532] netlink: 240 bytes leftover after parsing attributes in process `syz.7.6373'. [ 241.666263][T20534] ALSA: seq fatal error: cannot create timer (-19) [ 241.699415][T20544] IPv6: Can't replace route, no match found [ 241.800892][T20552] netdevsim netdevsim7: Direct firmware load for ÿ failed with error -2 [ 241.816630][T20550] vhci_hcd: invalid port number 96 [ 241.821838][T20550] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 242.351545][T20569] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 242.382521][T20571] 9pnet: p9_errstr2errno: server reported unknown error [ 242.388295][T20569] SELinux: failed to load policy [ 242.515791][T20582] loop8: detected capacity change from 0 to 128 [ 242.557893][T20582] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 242.620484][T17188] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.664184][T20594] 9pnet_fd: Insufficient options for proto=fd [ 243.195930][ T10] hid-generic FFFC:0003:0000.000B: unknown main item tag 0x0 [ 243.203386][ T10] hid-generic FFFC:0003:0000.000B: unknown main item tag 0x0 [ 243.210932][ T10] hid-generic FFFC:0003:0000.000B: unknown main item tag 0x0 [ 243.218512][ T10] hid-generic FFFC:0003:0000.000B: unknown main item tag 0x0 [ 243.225985][ T10] hid-generic FFFC:0003:0000.000B: unknown main item tag 0x0 [ 243.233455][ T10] hid-generic FFFC:0003:0000.000B: unknown main item tag 0x0 [ 243.245620][ T10] hid-generic FFFC:0003:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 243.375183][T20666] loop8: detected capacity change from 0 to 164 [ 243.402775][T20666] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 243.431736][T20666] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 243.459966][T20666] Symlink component flag not implemented [ 243.465939][T20666] Symlink component flag not implemented [ 243.466124][T20676] rdma_op ffff88813ced5580 conn xmit_rdma 0000000000000000 [ 243.475144][T20666] Symlink component flag not implemented (7) [ 243.485033][T20666] Symlink component flag not implemented (116) [ 243.611951][T20691] netlink: 388 bytes leftover after parsing attributes in process `syz.8.6443'. [ 243.773496][T20699] loop8: detected capacity change from 0 to 512 [ 243.785444][T20701] loop7: detected capacity change from 0 to 256 [ 243.799520][T20699] __quota_error: 138 callbacks suppressed [ 243.799537][T20699] Quota error (device loop8): v2_read_file_info: Free block number 1 out of range (1, 6). [ 243.831147][T20699] EXT4-fs warning (device loop8): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 243.857928][T20699] EXT4-fs (loop8): mount failed [ 243.874205][ T29] audit: type=1400 audit(251.655:6552): avc: denied { mac_admin } for pid=20698 comm="syz.8.6446" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 243.876970][T20699] SELinux: Context GPL is not valid (left unmapped). [ 243.902389][ T29] audit: type=1400 audit(251.686:6553): avc: denied { relabelto } for pid=20698 comm="syz.8.6446" name="file0" dev="tmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="GPL" [ 243.925847][ T29] audit: type=1400 audit(251.686:6554): avc: denied { associate } for pid=20698 comm="syz.8.6446" name="file0" dev="tmpfs" ino=1342 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="GPL" [ 243.990102][T20715] netlink: 268 bytes leftover after parsing attributes in process `syz.7.6453'. [ 243.999493][T20715] unsupported nla_type 65024 [ 244.006174][T20713] netlink: 'syz.2.6451': attribute type 298 has an invalid length. [ 244.036336][ T29] audit: type=1326 audit(251.823:6555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20718 comm="syz.2.6456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 244.059511][ T29] audit: type=1326 audit(251.823:6556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20718 comm="syz.2.6456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 244.082541][ T29] audit: type=1326 audit(251.823:6557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20718 comm="syz.2.6456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 244.105470][ T29] audit: type=1326 audit(251.823:6558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20718 comm="syz.2.6456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 244.131139][T20720] loop2: detected capacity change from 0 to 164 [ 244.139812][T20720] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 244.149970][T20720] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 244.158533][T20720] Symlink component flag not implemented [ 244.164243][T20720] Symlink component flag not implemented [ 244.170036][ T29] audit: type=1326 audit(251.896:6559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20718 comm="syz.2.6456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 244.193193][ T29] audit: type=1326 audit(251.928:6560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20718 comm="syz.2.6456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f781ecae969 code=0x7ffc0000 [ 244.216859][T20720] Symlink component flag not implemented (7) [ 244.222865][T20720] Symlink component flag not implemented (116) [ 244.410699][T20739] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6464'. [ 244.527324][T20754] loop2: detected capacity change from 0 to 2048 [ 244.545869][T20758] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6473'. [ 244.833283][T20754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.900729][T20770] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6477'. [ 244.968101][T20754] SELinux: failed to load policy [ 245.082274][T20783] atomic_op ffff88813ced6528 conn xmit_atomic 0000000000000000 [ 245.159016][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.423923][T20819] loop8: detected capacity change from 0 to 764 [ 245.697378][T20847] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6524'. [ 245.711043][T20847] netlink: 'syz.5.6524': attribute type 1 has an invalid length. [ 245.718931][T20847] netlink: 'syz.5.6524': attribute type 2 has an invalid length. [ 245.726784][T20847] netlink: 'syz.5.6524': attribute type 3 has an invalid length. [ 245.734605][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6524'. [ 245.757512][T20849] 9pnet: p9_errstr2errno: server reported unknown error [ 245.799629][T20856] sd 0:0:1:0: device reset [ 245.979667][T20874] vxcan1 speed is unknown, defaulting to 1000 [ 246.020252][T20868] loop5: detected capacity change from 0 to 8192 [ 246.148076][T20868] loop5: p1 p3 p4 [ 246.160797][T20868] loop5: p3 size 4294967040 extends beyond EOD, truncated [ 246.184309][T20868] loop5: p4 start 261888 is beyond EOD, truncated [ 246.220059][T20887] loop1: detected capacity change from 0 to 164 [ 246.233120][T20887] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 246.243808][T20887] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 246.258160][T20887] Symlink component flag not implemented [ 246.263903][T20887] Symlink component flag not implemented [ 246.279539][T20887] Symlink component flag not implemented (7) [ 246.285560][T20887] Symlink component flag not implemented (116) [ 246.335481][T20893] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6533'. [ 246.485264][T20905] loop7: detected capacity change from 0 to 512 [ 246.501300][T20905] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.616531][T20913] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #19: comm syz.7.6541: corrupted inode contents [ 246.630304][T20913] EXT4-fs (loop7): Remounting filesystem read-only [ 246.638039][T20913] EXT4-fs warning (device loop7): ext4_evict_inode:279: xattr delete (err -30) [ 246.674420][T17664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.889265][T20928] loop1: detected capacity change from 0 to 1024 [ 246.896162][T20928] EXT4-fs: Ignoring removed nobh option [ 246.910405][T20928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.941568][T14119] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.081031][T20949] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6559'. [ 247.311955][T20963] SELinux: failed to load policy [ 247.340340][T20969] loop7: detected capacity change from 0 to 128 [ 247.368524][T20969] +}[@: attempt to access beyond end of device [ 247.368524][T20969] loop7: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 247.381542][T20969] Buffer I/O error on dev loop7, logical block 131, lost async page write [ 247.404905][T20969] +}[@: attempt to access beyond end of device [ 247.404905][T20969] loop7: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 247.417917][T20969] Buffer I/O error on dev loop7, logical block 132, lost async page write [ 247.442473][T20977] syzkaller0: entered allmulticast mode [ 247.449233][T20969] +}[@: attempt to access beyond end of device [ 247.449233][T20969] loop7: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 247.462302][T20969] Buffer I/O error on dev loop7, logical block 133, lost async page write [ 247.472144][T20969] +}[@: attempt to access beyond end of device [ 247.472144][T20969] loop7: rw=2049, sector=134, nr_sectors = 1 limit=128 [ 247.485226][T20969] Buffer I/O error on dev loop7, logical block 134, lost async page write [ 247.494121][T20969] +}[@: attempt to access beyond end of device [ 247.494121][T20969] loop7: rw=2049, sector=135, nr_sectors = 1 limit=128 [ 247.507055][T20969] Buffer I/O error on dev loop7, logical block 135, lost async page write [ 247.519890][T20969] +}[@: attempt to access beyond end of device [ 247.519890][T20969] loop7: rw=2049, sector=136, nr_sectors = 1 limit=128 [ 247.532876][T20969] Buffer I/O error on dev loop7, logical block 136, lost async page write [ 247.543944][T20975] syzkaller0: left allmulticast mode [ 247.545958][T20969] +}[@: attempt to access beyond end of device [ 247.545958][T20969] loop7: rw=2049, sector=137, nr_sectors = 64 limit=128 [ 247.593887][T20969] +}[@: attempt to access beyond end of device [ 247.593887][T20969] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 247.608311][T20976] syzkaller0: entered promiscuous mode [ 247.613915][T20976] syzkaller0: entered allmulticast mode [ 247.639994][T20969] +}[@: attempt to access beyond end of device [ 247.639994][T20969] loop7: rw=2049, sector=225, nr_sectors = 9 limit=128 [ 247.826656][T21007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21007 comm=syz.7.6578 [ 248.140502][T21049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6588'. [ 248.474333][T21079] loop2: detected capacity change from 0 to 1024 [ 248.500059][T21079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.516111][T21079] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6595: bg 0: block 88: padding at end of block bitmap is not set [ 248.545113][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.607573][ T3776] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.663723][ T3776] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.742924][ T3776] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.775568][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 248.775583][ T29] audit: type=1400 audit(256.801:6626): avc: denied { mounton } for pid=21122 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 248.825738][ T3776] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.090468][ T3776] bond0 (unregistering): Released all slaves [ 249.170650][ T29] audit: type=1326 audit(257.211:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21163 comm="syz.1.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94999e969 code=0x7ffc0000 [ 249.234897][T21122] vxcan1 speed is unknown, defaulting to 1000 [ 249.269377][ T29] audit: type=1326 audit(257.211:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21163 comm="syz.1.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7ff94999e969 code=0x7ffc0000 [ 249.292354][ T29] audit: type=1326 audit(257.211:6629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21163 comm="syz.1.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94999e969 code=0x7ffc0000 [ 249.315299][ T29] audit: type=1326 audit(257.295:6630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21163 comm="syz.1.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94999e969 code=0x7ffc0000 [ 249.389006][ T3776] hsr_slave_0: left promiscuous mode [ 249.418099][ T3776] hsr_slave_1: left promiscuous mode [ 249.446089][ T3776] veth1_macvtap: left promiscuous mode [ 249.454723][ T3776] veth0_macvtap: left promiscuous mode [ 249.466257][ T3776] veth1_vlan: left promiscuous mode [ 249.877027][T21122] chnl_net:caif_netlink_parms(): no params data found [ 250.012941][T21122] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.020024][T21122] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.044291][T21122] bridge_slave_0: entered allmulticast mode [ 250.063834][T21122] bridge_slave_0: entered promiscuous mode [ 250.081886][T21122] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.089191][T21122] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.120117][T21122] bridge_slave_1: entered allmulticast mode [ 250.133969][T21122] bridge_slave_1: entered promiscuous mode [ 250.181069][ T3776] IPVS: stop unused estimator thread 0... [ 250.189056][T21122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.218219][T21122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.267018][T21212] netlink: 'syz.8.6617': attribute type 3 has an invalid length. [ 250.279562][T21122] team0: Port device team_slave_0 added [ 250.286723][T21122] team0: Port device team_slave_1 added [ 250.318833][T21122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.325972][T21122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.352035][T21122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.365599][T21122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.372657][T21122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.398767][T21122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.406820][T21216] netlink: 'syz.5.6620': attribute type 4 has an invalid length. [ 250.411949][ T29] audit: type=1400 audit(258.513:6631): avc: denied { getopt } for pid=21215 comm="syz.5.6620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 250.473141][T21122] hsr_slave_0: entered promiscuous mode [ 250.476176][T21223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.485526][T21122] hsr_slave_1: entered promiscuous mode [ 250.487415][T21223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.497689][T21122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.542192][T21122] Cannot create hsr debugfs directory [ 250.590214][T21226] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6624'. [ 250.681766][T21229] vhci_hcd: invalid port number 96 [ 250.686965][T21229] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 250.760171][ T29] audit: type=1400 audit(258.881:6632): avc: denied { read } for pid=21234 comm="syz.5.6628" name="cgroup.procs" dev="cgroup" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 250.810542][ T29] audit: type=1400 audit(258.912:6633): avc: denied { open } for pid=21234 comm="syz.5.6628" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 250.879985][T21122] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 250.889590][T21122] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 250.899690][T21122] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 250.908788][T21122] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 250.915780][T21241] loop8: detected capacity change from 0 to 128 [ 250.926407][T21241] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 250.957888][T21245] vxcan1 speed is unknown, defaulting to 1000 [ 250.991418][ T29] audit: type=1400 audit(259.122:6634): avc: denied { remove_name } for pid=21240 comm="syz.8.6631" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 251.034861][ T29] audit: type=1400 audit(259.122:6635): avc: denied { rename } for pid=21240 comm="syz.8.6631" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 251.091883][T21122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.104402][T21122] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.115158][ T6032] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.122488][ T6032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.146306][ T6032] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.153478][ T6032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.197469][T17188] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 251.205200][T21122] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.216870][T21122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.286881][T21263] netlink: 'syz.2.6640': attribute type 39 has an invalid length. [ 251.415585][T21122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.616068][T21122] veth0_vlan: entered promiscuous mode [ 251.642076][T21122] veth1_vlan: entered promiscuous mode [ 251.667730][T21122] veth0_macvtap: entered promiscuous mode [ 251.679263][T21297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6648'. [ 251.680299][T21122] veth1_macvtap: entered promiscuous mode [ 251.725150][T21122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.744771][T21122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.757505][T21122] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.766303][T21122] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.775059][T21122] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.783884][T21122] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.067316][T21339] gretap0: left allmulticast mode [ 252.072522][T21339] gretap0: left promiscuous mode [ 252.077723][T21339] bridge0: port 1(gretap0) entered disabled state [ 252.267459][T21358] vxcan1 speed is unknown, defaulting to 1000 [ 252.294700][T21360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6674'. [ 252.313022][T21357] SELinux: failed to load policy [ 253.183668][ T3776] $Hÿ (unregistering): Released all slaves [ 253.224492][ T3776] tipc: Disabling bearer [ 253.229765][ T3776] tipc: Left network mode [ 253.234785][T21397] vxcan1 speed is unknown, defaulting to 1000 [ 253.345021][T21417] SELinux: failed to load policy [ 253.479992][T21397] chnl_net:caif_netlink_parms(): no params data found [ 253.541307][T21397] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.548484][T21397] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.555876][T21397] bridge_slave_0: entered allmulticast mode [ 253.562710][T21397] bridge_slave_0: entered promiscuous mode [ 253.569970][T21397] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.577197][T21397] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.585086][T21397] bridge_slave_1: entered allmulticast mode [ 253.592024][T21397] bridge_slave_1: entered promiscuous mode [ 253.616767][T21397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.629117][T21397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.653550][T21397] team0: Port device team_slave_0 added [ 253.660509][T21397] team0: Port device team_slave_1 added [ 253.698723][T21397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.705713][T21397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.714688][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 253.714702][ T29] audit: type=1400 audit(261.979:6696): avc: denied { write } for pid=21443 comm="syz.2.6708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 253.732482][T21397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.811525][T21397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.818512][T21397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.844603][T21397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.903168][T21397] hsr_slave_0: entered promiscuous mode [ 253.909354][T21397] hsr_slave_1: entered promiscuous mode [ 253.915340][T21397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.923932][T21397] Cannot create hsr debugfs directory [ 254.056573][ T29] audit: type=1326 audit(262.347:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21457 comm="syz.8.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 254.098375][ T29] audit: type=1326 audit(262.378:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21457 comm="syz.8.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 254.121498][ T29] audit: type=1326 audit(262.378:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21457 comm="syz.8.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 254.144524][ T29] audit: type=1326 audit(262.378:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21457 comm="syz.8.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 254.167453][ T29] audit: type=1326 audit(262.378:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21457 comm="syz.8.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 254.190404][ T29] audit: type=1326 audit(262.378:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21457 comm="syz.8.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 254.213450][ T29] audit: type=1326 audit(262.378:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21457 comm="syz.8.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 254.236443][ T29] audit: type=1326 audit(262.378:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21457 comm="syz.8.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 254.259445][ T29] audit: type=1326 audit(262.378:6705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21457 comm="syz.8.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 254.380876][T21397] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 254.390363][T21397] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 254.399772][T21397] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 254.409380][T21397] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 254.450998][T21397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.466468][T21397] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.486633][ T3776] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.493728][ T3776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.514430][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.521688][ T6039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.542940][T21482] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6726'. [ 254.547422][T21397] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.562428][T21397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.612617][T21488] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6728'. [ 254.644603][T21397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.755461][T21397] veth0_vlan: entered promiscuous mode [ 254.768851][T21397] veth1_vlan: entered promiscuous mode [ 254.791717][T21397] veth0_macvtap: entered promiscuous mode [ 254.804253][T21397] veth1_macvtap: entered promiscuous mode [ 254.824872][T21397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.840065][T21397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.852801][T21397] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.861736][T21397] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.870543][T21397] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.879383][T21397] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.942309][T21511] ALSA: seq fatal error: cannot create timer (-19) [ 255.032927][T21526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6739'. [ 255.033756][T21529] netlink: 'syz.0.6740': attribute type 1 has an invalid length. [ 255.190528][T21546] loop8: detected capacity change from 0 to 512 [ 255.198319][T21546] EXT4-fs: inline encryption not supported [ 255.204599][T21546] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 255.226576][T21546] EXT4-fs (loop8): 1 truncate cleaned up [ 255.232836][T21546] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.265648][T17188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.311103][T21557] loop8: detected capacity change from 0 to 764 [ 255.327383][T21557] Symlink component flag not implemented [ 255.333313][T21557] Symlink component flag not implemented (7) [ 255.345769][T21557] Symlink component flag not implemented (7) [ 255.382056][ T3391] usb usb8-port2: attempt power cycle [ 255.552685][T21581] sd 0:0:1:0: device reset [ 255.605827][T21593] netlink: 'syz.2.6771': attribute type 1 has an invalid length. [ 255.622249][T21593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.643908][T21596] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6772'. [ 255.656527][T21593] bond0: (slave veth7): Enslaving as an active interface with a down link [ 255.686526][T21593] bond0: (slave dummy0): making interface the new active one [ 255.695472][T21593] dummy0: entered promiscuous mode [ 255.700796][T21593] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 256.075272][T21626] netlink: 'syz.9.6785': attribute type 1 has an invalid length. [ 256.085049][T21627] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 256.116336][T21626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.146090][T21626] bond1: (slave veth3): Enslaving as an active interface with a down link [ 256.167681][T21626] bond1: (slave dummy0): making interface the new active one [ 256.177989][T21626] dummy0: entered promiscuous mode [ 256.183163][T21636] loop8: detected capacity change from 0 to 1024 [ 256.183676][T21636] EXT4-fs: Ignoring removed nobh option [ 256.197294][T21626] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 256.215237][T21636] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.217158][T21640] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 256.259915][T21636] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 256.264596][T21642] bridge0: entered promiscuous mode [ 256.284788][T21642] bridge0: port 3(macsec1) entered blocking state [ 256.291558][T21642] bridge0: port 3(macsec1) entered disabled state [ 256.298762][T21642] macsec1: entered allmulticast mode [ 256.304123][T21642] bridge0: entered allmulticast mode [ 256.310309][T21642] macsec1: left allmulticast mode [ 256.315484][T21642] bridge0: left allmulticast mode [ 256.321172][T21642] bridge0: left promiscuous mode [ 256.338639][T17188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.360545][T21644] netlink: 'syz.2.6794': attribute type 1 has an invalid length. [ 256.368409][T21644] netlink: 'syz.2.6794': attribute type 3 has an invalid length. [ 256.376296][T21644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6794'. [ 256.641233][T21689] vlan2: entered allmulticast mode [ 256.646423][T21689] macvtap0: entered allmulticast mode [ 256.652066][T21689] veth0_macvtap: entered allmulticast mode [ 256.784982][T21707] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6816'. [ 256.848005][T21712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6821'. [ 256.874153][T21717] loop9: detected capacity change from 0 to 1024 [ 256.891508][T21717] EXT4-fs: Ignoring removed i_version option [ 256.899385][T21717] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.906820][T21717] EXT4-fs: Ignoring removed nobh option [ 256.912553][T21717] EXT4-fs: Ignoring removed bh option [ 256.940164][T21717] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.970718][T21727] netlink: 'syz.2.6828': attribute type 10 has an invalid length. [ 256.980307][T21727] bond0: (slave dummy0): Releasing active interface [ 256.990630][T21727] dummy0: left promiscuous mode [ 257.002094][T21727] dummy0: entered promiscuous mode [ 257.009150][T21727] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 257.022702][T21729] netem: incorrect ge model size [ 257.027778][T21729] netem: change failed [ 257.054875][T21122] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.161620][ T3391] usb usb8-port2: unable to enumerate USB device [ 257.376406][T21763] loop5: detected capacity change from 0 to 1024 [ 257.415971][T21763] EXT4-fs: Ignoring removed nobh option [ 257.455667][T21763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.529334][T21778] loop9: detected capacity change from 0 to 1024 [ 257.561734][T21763] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 257.607133][T21778] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.697341][T21122] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.709990][T11675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.802057][T21790] loop9: detected capacity change from 0 to 1024 [ 257.809123][T21790] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 257.820592][T21790] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 257.832012][T21790] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 257.843100][T21790] EXT4-fs (loop9): orphan cleanup on readonly fs [ 257.849766][T21790] EXT4-fs error (device loop9): ext4_read_inode_bitmap:167: comm syz.9.6851: Inode bitmap for bg 0 marked uninitialized [ 257.864179][T21790] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 257.880791][T21790] EXT4-fs (loop9): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 257.910444][T21122] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.197184][ T3391] kernel write not supported for file /vcs (pid: 3391 comm: kworker/1:3) [ 258.289626][T21836] loop7: detected capacity change from 0 to 16384 [ 258.422490][T21849] tipc: New replicast peer: 255.255.255.255 [ 258.428810][T21849] tipc: Enabled bearer , priority 10 [ 258.447403][T21844] loop7: detected capacity change from 16384 to 0 [ 258.459238][ C1] I/O error, dev loop7, sector 6144 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 0 [ 258.533684][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 258.533712][ T29] audit: type=1326 audit(267.052:6800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21856 comm="syz.8.6880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 258.569382][ T29] audit: type=1326 audit(267.083:6801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21856 comm="syz.8.6880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 258.653852][ T29] audit: type=1326 audit(267.115:6802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21856 comm="syz.8.6880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 258.676932][ T29] audit: type=1326 audit(267.115:6803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21856 comm="syz.8.6880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 258.699997][ T29] audit: type=1326 audit(267.115:6804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21856 comm="syz.8.6880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 258.723280][ T29] audit: type=1326 audit(267.125:6805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21856 comm="syz.8.6880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 258.746385][ T29] audit: type=1326 audit(267.125:6806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21856 comm="syz.8.6880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 258.769565][ T29] audit: type=1326 audit(267.125:6807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21856 comm="syz.8.6880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 258.792542][ T29] audit: type=1326 audit(267.125:6808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21856 comm="syz.8.6880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 258.815711][ T29] audit: type=1326 audit(267.125:6809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21856 comm="syz.8.6880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29c898e969 code=0x7ffc0000 [ 259.147647][T21840] Set syz1 is full, maxelem 65536 reached [ 259.182847][T21886] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 259.182847][T21886] program syz.5.6894 not setting count and/or reply_len properly [ 259.381009][T21909] loop2: detected capacity change from 0 to 512 [ 259.413980][T21909] EXT4-fs (loop2): 1 orphan inode deleted [ 259.427656][T21909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.440742][ T6039] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:31: Failed to release dquot type 1 [ 259.473171][T21920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.504316][T21920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.524315][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.610680][T21932] loop2: detected capacity change from 0 to 512 [ 259.624924][T21932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.757899][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.909050][T21968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6929'. [ 259.960221][T21970] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.039852][T21970] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.069745][T21976] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 260.115861][T21970] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.166102][T21970] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.223521][T21970] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.252591][T21970] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.281487][T21970] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.293485][T21970] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.367688][T22006] wg2: entered promiscuous mode [ 260.372841][T22006] wg2: entered allmulticast mode [ 260.383498][T22008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6947'. [ 260.527899][T22025] loop5: detected capacity change from 0 to 2048 [ 260.544614][T22025] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.573639][T11675] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 260.588045][T22032] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6953'. [ 260.603912][T11675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.631280][T22036] bond_slave_1: entered promiscuous mode [ 260.638224][T22036] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6957'. [ 260.650670][T22036] bond_slave_1 (unregistering): left promiscuous mode [ 260.730523][T22039] tipc: Enabling of bearer rejected, already enabled [ 260.742606][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.750152][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.757615][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.767123][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.774720][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.782514][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.790045][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.797599][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.805071][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.812602][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.820158][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.827757][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.835281][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.857354][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.864808][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.872294][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.879769][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.887310][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.894912][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.898841][T22047] loop2: detected capacity change from 0 to 256 [ 260.902309][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.916300][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.923910][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.931460][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.938966][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.946414][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.953853][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.961307][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.961959][T22047] FAT-fs (loop2): bogus number of FAT sectors [ 260.968744][T10801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 260.974959][T22047] FAT-fs (loop2): Can't find a valid FAT filesystem [ 260.989268][T10801] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 261.020451][T22054] serio: Serial port ptm0 [ 261.126024][T22066] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6970'. [ 261.230881][T22076] vxcan1 speed is unknown, defaulting to 1000 [ 261.487115][T22103] netlink: 'syz.0.6986': attribute type 3 has an invalid length. [ 261.904071][T22142] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7004'. [ 262.006086][ T3391] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 262.015056][ T3391] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 262.141188][T22160] loop5: detected capacity change from 0 to 512 [ 262.150449][T22160] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 262.236325][T22171] netlink: 'syz.5.7018': attribute type 13 has an invalid length. [ 262.278665][T22177] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7021'. [ 262.384377][T22171] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.393401][T22171] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.402330][T22171] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.411312][T22171] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.434339][ T3190] vxcan1 speed is unknown, defaulting to 1000 [ 262.440735][ T3190] syz2: Port: 1 Link DOWN [ 262.450129][ T3190] vxcan1 speed is unknown, defaulting to 1000 [ 262.528654][T22194] loop5: detected capacity change from 0 to 128 [ 262.575462][T22199] loop9: detected capacity change from 0 to 512 [ 262.584341][T22199] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 262.596116][T22199] EXT4-fs (loop9): 1 truncate cleaned up [ 262.602295][T22199] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.691123][T21122] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.721716][T22208] loop5: detected capacity change from 0 to 1024 [ 262.730830][T22208] EXT4-fs: Ignoring removed bh option [ 262.738643][T22208] EXT4-fs: inline encryption not supported [ 262.744595][T22208] EXT4-fs: Ignoring removed i_version option [ 262.752453][T22208] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 262.764884][T22208] EXT4-fs error (device loop5): ext4_map_blocks:709: inode #3: block 1: comm syz.5.7033: lblock 1 mapped to illegal pblock 1 (length 1) [ 262.780531][T22208] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.7033: Failed to acquire dquot type 0 [ 262.793072][T22208] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.7033: Freeing blocks not in datazone - block = 0, count = 4096 [ 262.807836][T22208] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.7033: Invalid inode bitmap blk 0 in block_group 0 [ 262.823549][T22208] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 262.824082][ T6039] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1) [ 262.834653][T22208] EXT4-fs (loop5): 1 orphan inode deleted [ 262.852736][T22208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.869543][ T6039] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:31: Failed to release dquot type 0 [ 262.882857][T22208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.981564][T22226] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7041'. [ 263.101618][T22229] loop5: detected capacity change from 0 to 8192 [ 263.273865][ T6031] ================================================================== [ 263.282010][ T6031] BUG: KCSAN: data-race in copy_page_from_iter_atomic / fat16_ent_put [ 263.290216][ T6031] [ 263.292544][ T6031] write to 0xffff8881299b256c of 2 bytes by task 22229 on cpu 1: [ 263.300269][ T6031] fat16_ent_put+0x28/0x60 [ 263.304798][ T6031] fat_alloc_clusters+0x4ce/0xa80 [ 263.309850][ T6031] fat_get_block+0x258/0x5e0 [ 263.314459][ T6031] __block_write_begin_int+0x41c/0xf70 [ 263.319932][ T6031] cont_write_begin+0x5a3/0x8e0 [ 263.324798][ T6031] fat_write_begin+0x4f/0xe0 [ 263.329397][ T6031] cont_write_begin+0x19b/0x8e0 [ 263.334264][ T6031] fat_write_begin+0x4f/0xe0 [ 263.338865][ T6031] generic_cont_expand_simple+0xb0/0x150 [ 263.344517][ T6031] fat_cont_expand+0x3e/0x170 [ 263.349215][ T6031] fat_setattr+0x2a5/0x8a0 [ 263.353649][ T6031] notify_change+0x809/0x890 [ 263.358247][ T6031] do_ftruncate+0x327/0x430 [ 263.362764][ T6031] __x64_sys_ftruncate+0x68/0xc0 [ 263.367716][ T6031] x64_sys_call+0xd65/0x2fb0 [ 263.372315][ T6031] do_syscall_64+0xd0/0x1a0 [ 263.376862][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.382766][ T6031] [ 263.385094][ T6031] read to 0xffff8881299b2400 of 512 bytes by task 6031 on cpu 0: [ 263.392816][ T6031] copy_page_from_iter_atomic+0x77f/0xff0 [ 263.398561][ T6031] generic_perform_write+0x2c2/0x490 [ 263.403871][ T6031] shmem_file_write_iter+0xc5/0xf0 [ 263.409043][ T6031] lo_rw_aio+0x5f7/0x7c0 [ 263.413306][ T6031] loop_process_work+0x52d/0xa60 [ 263.418287][ T6031] loop_workfn+0x31/0x40 [ 263.422556][ T6031] process_scheduled_works+0x4cb/0x9d0 [ 263.428039][ T6031] worker_thread+0x582/0x770 [ 263.432648][ T6031] kthread+0x486/0x510 [ 263.436725][ T6031] ret_from_fork+0x4b/0x60 [ 263.441149][ T6031] ret_from_fork_asm+0x1a/0x30 [ 263.445924][ T6031] [ 263.448249][ T6031] Reported by Kernel Concurrency Sanitizer on: [ 263.454419][ T6031] CPU: 0 UID: 0 PID: 6031 Comm: kworker/u8:23 Tainted: G W 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(voluntary) [ 263.468669][ T6031] Tainted: [W]=WARN [ 263.472474][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.482536][ T6031] Workqueue: loop5 loop_workfn [ 263.487325][ T6031] ================================================================== [ 267.083283][ T3776] dummy0: left promiscuous mode