last executing test programs: 1m53.932789054s ago: executing program 32 (id=117): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 1m49.120892049s ago: executing program 33 (id=220): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1m40.513400296s ago: executing program 4 (id=413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1m40.441856178s ago: executing program 4 (id=417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) write(0xffffffffffffffff, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0x200, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x43, 0x2}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x1000, 0x2000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m40.241662442s ago: executing program 4 (id=421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x35}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000200)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, r3, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) 1m40.163293893s ago: executing program 4 (id=424): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x200000, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4010) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 1m40.108702874s ago: executing program 4 (id=426): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 1m39.861581249s ago: executing program 4 (id=429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 1m39.861462089s ago: executing program 34 (id=429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 1m29.229132857s ago: executing program 5 (id=667): syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x401, @empty, 0x6}, 0x1c) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r1, 0x0) poll(&(0x7f0000000000), 0x200000000000003d, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m29.185283378s ago: executing program 5 (id=668): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r3, &(0x7f0000000900)="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", 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 1m29.132174839s ago: executing program 5 (id=670): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313ca26600fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) close_range(r0, r1, 0x0) 1m29.112154129s ago: executing program 5 (id=671): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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") 1m28.975404222s ago: executing program 5 (id=675): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1m28.689496368s ago: executing program 5 (id=680): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000540)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m28.689362157s ago: executing program 35 (id=680): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000540)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m22.237460564s ago: executing program 1 (id=827): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x2) r1 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m22.168219125s ago: executing program 1 (id=838): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r2, 0xffffffffffffffff, 0x0) 1m22.001049728s ago: executing program 1 (id=833): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) close(r2) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0x4e, 0x0) 1m21.9032746s ago: executing program 1 (id=835): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x2a020400) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m21.821299612s ago: executing program 1 (id=839): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1m21.557569407s ago: executing program 1 (id=842): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) 1m21.515413278s ago: executing program 36 (id=842): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) 34.28853766s ago: executing program 9 (id=1706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 33.965332787s ago: executing program 9 (id=1713): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]}) r3 = memfd_secret(0x0) ftruncate(r3, 0x51a9497) 33.923171187s ago: executing program 9 (id=1715): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$eJzs28tvG8UfAPDvrp3219cvpiqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCgpC5YgqcUcckfgLOMEFASckrnBHlSrUSwsno7V3E8exncQ4ccGfj7TJzO5EM1/vjD2zEwcwtMayH0nE7oj4NSJGG9mVBcYav+7cujLz560rM0nUam/8kdTL3b51ZaYoWvzdriJTjkg/SeJgm3oXLl0+N12tzl3M8xOL59+dWLh0+Zmz56fPzJ2ZuzB18uTxY5PPnZh6ti9xZnHdPvDB/KH9r7x1/bWZU9ff/vHrpIi/JY4+Get28fFarc/VDdaepnRSHmBD2JBSY5jGSH38j0Yplm/eaLz88UAbB2yqWq1Wu6/z5as14D8siUG3ABiM4oM+W/8WxxZNPe4KN19oLICyuO/kR+NKOdK8zEjL+rafxiLi1NW/vsiO2JznEAAAK3ybzX+ebjf/S6P5udD/8z2USkTcExF7I+JEROyLiHsj6mXvj4gHNlh/6ybJ6vlPeqOnwNYpm/89n+9trZz/FbO/qJTy3J56/CPJ6bPVuaP5a3IkRrZn+ckudXz30i+fdbrWPP/Ljqz+Yi6Yt+NGeXufgm3j5kcRB8rt4k+WdgKSiNgfEQd6rOPsk18d6nRt7fi76MM+U+3LiCca9/9qtMRfSLrvT078L6pzRyeKXrHaTz9fe71T/euKP/nncXaS3f+dEVF0sdXx76kkzfu1Cxuv49pvn3Zc0/TS/2enF6e3JW+uOPf+9OLixcmIbcmr9Xyl+fxUS7mp5fJZ/EcOtx//e2P5lTgYEVknfjAiHoqIh/O2PxIRj0bE4S7x//DiY+/0Hv/myuKfbfv+t9TpWu7/cmJbtJ5pnyid+/6bFZVWNhJ/dv+P11NH8jPZ/V8rrvW0q7feDAAAAP8+aUTsjiQdX0qn6fh443/498XOtDq/sPjU6fn3Lsw2viNQiZG0eNI12vQ8dDJf1hf5sZb8sfy58eelHfX8+Mx8dXbQwcOQ29Vh/Gd+Lw26dcCm830tGF7GPwwv4x+Gl/EPw6vN+N8xiHYAW6/d5/+HA2gHsPVaxr9tPxgi1v8wvMrW+zC0fP7DUFrYEWt/SV5CYlUi0ruiGRI9JtKI6FZm0O9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/fF3AAAA//+edt38") bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000030c0)={0x765, {"a2e3ad21ed0d09f91b48090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f390068090890e0878f0e1ac6e7049b074a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000095802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1bb5a7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b7293ffff00009af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 33.696313842s ago: executing program 9 (id=1718): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) inotify_init1(0x800) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 33.543796355s ago: executing program 9 (id=1721): socket$kcm(0x2, 0xa, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000100)=r3, 0x8) setsockopt$sock_attach_bpf(r2, 0x1, 0x25, &(0x7f0000000100)=r1, 0x4) 33.113296523s ago: executing program 9 (id=1725): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x3c, r3, 0x1b, 0x0, 0x3, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3ff}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}}, 0x0) 33.103991053s ago: executing program 37 (id=1725): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x3c, r3, 0x1b, 0x0, 0x3, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3ff}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}}, 0x0) 28.15573348s ago: executing program 8 (id=1826): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x2, 0x0, @mcast1}}}, 0x88) 28.108199331s ago: executing program 8 (id=1827): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x1000) fallocate(r0, 0x0, 0x0, 0x8800000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 27.777391088s ago: executing program 8 (id=1834): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="031500000010000008000a00", @ANYRES32=r4, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="140012800b0001006d616373656300"], 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 27.427125064s ago: executing program 8 (id=1843): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r0, 0x0, 0x0) 27.202209899s ago: executing program 8 (id=1849): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000400), &(0x7f00000004c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[], 0x0) 26.061987581s ago: executing program 8 (id=1869): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 26.038532191s ago: executing program 38 (id=1869): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.55945789s ago: executing program 3 (id=2412): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'dummy0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x2, 0x0, 0x10, r4, 0x80000001}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 1.451601272s ago: executing program 3 (id=2417): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c000100000000"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.387347093s ago: executing program 3 (id=2419): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) 1.323069784s ago: executing program 0 (id=2422): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='sock_rcvqueue_full\x00', r1, 0x0, 0x7}, 0x18) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) 1.172007547s ago: executing program 7 (id=2426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000080)=0x6, 0x8) 1.171757557s ago: executing program 0 (id=2427): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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") r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r3, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) 1.171464727s ago: executing program 7 (id=2428): pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000300)={0x0, 0x519, 0x80, 0x0, 0x1bc}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) write$UHID_INPUT(r1, &(0x7f0000003ec0)={0x8, {"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", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xd7}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 1.149239257s ago: executing program 3 (id=2429): open(0x0, 0x64842, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000240)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.148571047s ago: executing program 6 (id=2430): syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(0x0, 0x804000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) fsopen(&(0x7f00000004c0)='proc\x00', 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) tgkill(0x0, 0x0, 0xf) 1.100352178s ago: executing program 7 (id=2431): pipe2$9p(&(0x7f00000000c0), 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.000563761s ago: executing program 6 (id=2432): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1.000047631s ago: executing program 3 (id=2433): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)="c057", 0x2}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x2, 0x0, 0x6, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x10, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 910.351292ms ago: executing program 7 (id=2434): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x40000) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 774.319145ms ago: executing program 3 (id=2435): socket$inet_sctp(0x2, 0x5, 0x84) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 773.852145ms ago: executing program 7 (id=2436): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r1 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x30, 0x0, 0x1ee, 0x2, 0x0, 0x7ff, 0x0, 0x1, {0x1}}) io_uring_enter(r1, 0x46bc, 0x3, 0x20, 0x0, 0x0) 773.519535ms ago: executing program 6 (id=2437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 773.170835ms ago: executing program 6 (id=2438): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x20, @rand_addr, 0x8}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0x94}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 480.234701ms ago: executing program 2 (id=2443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 423.486802ms ago: executing program 7 (id=2444): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000040)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@resgid={'resgid', 0x3d, 0xee01}}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f00000008c0)="3bf58d7d45", 0x5) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7fffeffd) 412.457122ms ago: executing program 2 (id=2445): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x18) rt_sigprocmask(0x2, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r4}, 0x10) 317.541264ms ago: executing program 6 (id=2446): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x0) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) 303.367814ms ago: executing program 0 (id=2447): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 245.107235ms ago: executing program 2 (id=2448): syz_io_uring_setup(0x8c6, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) readv(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000008c0)={0x800, 0xfffffff8, 0x51, 0x1, 0xfc}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwC0i2t8INlY+qvmzf71Z/8nzQkIAAAAAAAAAAAAANji+FH3/0Ovanz/v7n90M0a3P9fK/k9LgC6SP2P/tD2Q7dzjQ9s19q7/x8AAAAAAAAAAAAAOsDwrWtzi4sLyytrL97C250Rxu4W1uc6IoxdLBTuRjTe51lzah+IiE55E5ZXsmhaVVf5ERxtPOU2/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BMAAP//cdEbCg==") 223.485426ms ago: executing program 0 (id=2449): openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000900)=""/198) 199.070546ms ago: executing program 0 (id=2450): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e3, 0x0) 158.096057ms ago: executing program 0 (id=2451): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfcd1, 0xfecc) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 157.539137ms ago: executing program 6 (id=2452): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x1000) fallocate(r0, 0x0, 0x0, 0x8800000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x400000, &(0x7f0000006680)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x80000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 81.570389ms ago: executing program 2 (id=2453): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x4, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) 76.856859ms ago: executing program 2 (id=2454): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(0x0, 0x76, 0x160341) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 0s ago: executing program 2 (id=2455): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000680)={0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000080)={r1, 0x1, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000280)={r4, 0x0, 0x5}) kernel console output (not intermixed with test programs): acket from 127.202.26.0 [ 80.189007][ T6922] loop6: detected capacity change from 0 to 256 [ 80.211627][ T6922] FAT-fs (loop6): bogus number of FAT sectors [ 80.218145][ T6922] FAT-fs (loop6): Can't find a valid FAT filesystem [ 80.389963][ T29] audit: type=1400 audit(1758440779.161:1194): avc: denied { listen } for pid=6928 comm="syz.6.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.438363][ T29] audit: type=1400 audit(1758440779.191:1195): avc: denied { accept } for pid=6928 comm="syz.6.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.492025][ T6934] usb usb3: usbfs: process 6934 (syz.0.1078) did not claim interface 0 before use [ 80.881636][ T29] audit: type=1326 audit(1758440779.651:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 80.905163][ T29] audit: type=1326 audit(1758440779.651:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 80.928766][ T29] audit: type=1326 audit(1758440779.661:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 80.952325][ T29] audit: type=1326 audit(1758440779.661:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 81.043734][ T29] audit: type=1326 audit(1758440779.661:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 81.067394][ T29] audit: type=1326 audit(1758440779.661:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0b5992ec63 code=0x7ffc0000 [ 81.090698][ T29] audit: type=1326 audit(1758440779.661:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0b5992d6df code=0x7ffc0000 [ 81.250905][ T6968] loop8: detected capacity change from 0 to 128 [ 81.323085][ T6972] loop8: detected capacity change from 0 to 512 [ 81.353161][ T6972] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.370982][ T6972] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.426418][ T5681] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.482226][ T6977] loop9: detected capacity change from 0 to 164 [ 81.488441][ T6979] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1096'. [ 81.516681][ T6979] loop8: detected capacity change from 0 to 512 [ 81.559313][ T6977] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 81.568285][ T6977] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 81.578139][ T6977] Symlink component flag not implemented [ 81.583836][ T6977] Symlink component flag not implemented [ 81.590703][ T6977] Symlink component flag not implemented (7) [ 81.596796][ T6977] Symlink component flag not implemented (116) [ 81.697709][ T6979] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #17: comm syz.8.1096: invalid fast symlink length 37 [ 81.715653][ T6986] loop7: detected capacity change from 0 to 128 [ 81.722124][ T6979] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.1096: couldn't read orphan inode 17 (err -117) [ 81.771288][ T6979] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.789703][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'. [ 81.836815][ T5681] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.860507][ T6991] IPVS: set_ctl: invalid protocol: 50 172.20.20.19:20001 [ 81.896135][ T6991] loop7: detected capacity change from 0 to 512 [ 81.934952][ T6991] msdos: Unknown parameter '\Ynodots' [ 82.281104][ T7015] loop7: detected capacity change from 0 to 512 [ 82.337887][ T7015] EXT4-fs (loop7): orphan cleanup on readonly fs [ 82.362436][ T7015] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.1110: bad orphan inode 13 [ 82.372765][ T7015] ext4_test_bit(bit=12, block=18) = 1 [ 82.378168][ T7015] is_bad_inode(inode)=0 [ 82.382361][ T7015] NEXT_ORPHAN(inode)=2130706432 [ 82.387266][ T7015] max_ino=32 [ 82.390562][ T7015] i_nlink=1 [ 82.394170][ T7015] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.446073][ T7015] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 82.495206][ T7015] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1110: bg 0: block 248: padding at end of block bitmap is not set [ 82.556035][ T7015] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.1110: Failed to acquire dquot type 1 [ 82.576651][ T7031] loop8: detected capacity change from 0 to 512 [ 82.594828][ T7015] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 82.617297][ T7031] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 82.627430][ T7031] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 82.672590][ T4907] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.724195][ T7033] loop6: detected capacity change from 0 to 128 [ 82.784826][ T7031] netlink: zone id is out of range [ 82.801335][ T7031] netlink: zone id is out of range [ 82.816793][ T7031] netlink: zone id is out of range [ 82.822080][ T7031] netlink: zone id is out of range [ 82.831756][ T7031] netlink: zone id is out of range [ 82.836946][ T7031] netlink: zone id is out of range [ 82.842400][ T7031] netlink: zone id is out of range [ 82.847686][ T7031] netlink: zone id is out of range [ 82.879875][ T7033] syz.6.1117: attempt to access beyond end of device [ 82.879875][ T7033] loop6: rw=0, sector=121, nr_sectors = 920 limit=128 [ 83.133189][ T7060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.173363][ T7060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.188580][ T7064] loop9: detected capacity change from 0 to 1024 [ 83.207467][ T7064] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.249396][ T7069] loop7: detected capacity change from 0 to 512 [ 83.279130][ T6148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.314002][ T7069] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.328156][ T7069] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.339278][ T7079] loop9: detected capacity change from 0 to 512 [ 83.346604][ T7069] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 83.362243][ T7069] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 83.374616][ T7069] EXT4-fs (loop7): This should not happen!! Data will be lost [ 83.374616][ T7069] [ 83.376297][ T7079] EXT4-fs (loop9): too many log groups per flexible block group [ 83.384432][ T7069] EXT4-fs (loop7): Total free blocks count 0 [ 83.392170][ T7079] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 83.398109][ T7069] EXT4-fs (loop7): Free/Dirty block details [ 83.406066][ T7079] EXT4-fs (loop9): mount failed [ 83.410881][ T7069] EXT4-fs (loop7): free_blocks=65280 [ 83.421053][ T7069] EXT4-fs (loop7): dirty_blocks=1 [ 83.426096][ T7069] EXT4-fs (loop7): Block reservation details [ 83.432199][ T7069] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 83.470037][ T4907] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.494520][ T7073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.509748][ T7073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.527408][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1135'. [ 83.564366][ T7091] loop9: detected capacity change from 0 to 128 [ 83.605980][ T7091] syz.9.1139: attempt to access beyond end of device [ 83.605980][ T7091] loop9: rw=0, sector=121, nr_sectors = 920 limit=128 [ 84.086224][ T7113] loop9: detected capacity change from 0 to 512 [ 84.099797][ T7115] netlink: 'syz.7.1159': attribute type 1 has an invalid length. [ 84.107805][ T7115] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1159'. [ 84.117303][ T7113] EXT4-fs (loop9): orphan cleanup on readonly fs [ 84.130697][ T7113] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.1147: bad orphan inode 13 [ 84.147551][ T7113] ext4_test_bit(bit=12, block=18) = 1 [ 84.153036][ T7113] is_bad_inode(inode)=0 [ 84.157306][ T7113] NEXT_ORPHAN(inode)=2130706432 [ 84.162205][ T7113] max_ino=32 [ 84.165414][ T7113] i_nlink=1 [ 84.183406][ T7113] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.209560][ T7113] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 84.234474][ T7113] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1147: bg 0: block 248: padding at end of block bitmap is not set [ 84.261961][ T7113] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.1147: Failed to acquire dquot type 1 [ 84.341064][ T7113] EXT4-fs warning (device loop9): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.373863][ T7130] loop6: detected capacity change from 0 to 8192 [ 84.387382][ T7130] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.555375][ T7122] net_ratelimit: 74 callbacks suppressed [ 84.555398][ T7122] Set syz1 is full, maxelem 65536 reached [ 84.578462][ T6148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.441873][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 85.441890][ T29] audit: type=1326 audit(1758440784.221:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7140 comm="syz.8.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84892dec29 code=0x7fc00000 [ 85.526686][ T7158] loop8: detected capacity change from 0 to 1024 [ 85.549502][ T7158] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.561854][ T7158] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.676828][ T51] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 393: padding at end of block bitmap is not set [ 85.692437][ T51] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 85.705183][ T51] EXT4-fs (loop8): This should not happen!! Data will be lost [ 85.705183][ T51] [ 85.736218][ T5681] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.779861][ T7177] loop7: detected capacity change from 0 to 1024 [ 85.824463][ T7184] loop8: detected capacity change from 0 to 128 [ 85.832084][ T7177] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.951237][ T4907] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.156182][ T29] audit: type=1326 audit(1758440784.891:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7193 comm="syz.7.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaee20ec29 code=0x7ffc0000 [ 86.179664][ T29] audit: type=1326 audit(1758440784.891:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7193 comm="syz.7.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdaee20ec29 code=0x7ffc0000 [ 86.203093][ T29] audit: type=1326 audit(1758440784.891:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7193 comm="syz.7.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaee20ec29 code=0x7ffc0000 [ 86.226533][ T29] audit: type=1326 audit(1758440784.891:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7193 comm="syz.7.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaee20ec29 code=0x7ffc0000 [ 86.249969][ T29] audit: type=1326 audit(1758440784.891:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7193 comm="syz.7.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaee20ec29 code=0x7ffc0000 [ 86.273510][ T29] audit: type=1326 audit(1758440784.891:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7193 comm="syz.7.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaee20ec29 code=0x7ffc0000 [ 86.297079][ T29] audit: type=1326 audit(1758440784.901:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7193 comm="syz.7.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaee20ec29 code=0x7ffc0000 [ 86.320605][ T29] audit: type=1326 audit(1758440784.901:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7193 comm="syz.7.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaee20ec29 code=0x7ffc0000 [ 86.344374][ T29] audit: type=1326 audit(1758440784.901:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7193 comm="syz.7.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaee20ec29 code=0x7ffc0000 [ 86.448681][ T7198] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1179'. [ 86.509244][ T7180] Set syz1 is full, maxelem 65536 reached [ 86.529835][ T7198] loop7: detected capacity change from 0 to 512 [ 86.547873][ T7198] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #17: comm syz.7.1179: invalid fast symlink length 37 [ 86.568983][ T7198] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1179: couldn't read orphan inode 17 (err -117) [ 86.586260][ T7198] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.647233][ T4907] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.213900][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1197'. [ 87.297799][ T7223] Set syz1 is full, maxelem 65536 reached [ 87.323039][ T7250] loop6: detected capacity change from 0 to 1024 [ 87.341270][ T7250] EXT4-fs: Ignoring removed orlov option [ 87.376644][ T7250] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 87.420673][ T7252] loop9: detected capacity change from 0 to 128 [ 87.451668][ T7250] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.478125][ T7252] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.493310][ T7254] binfmt_misc: register: failed to install interpreter file ./file2 [ 87.534234][ T7252] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.631120][ T4139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.701645][ T6148] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.783289][ T7275] netlink: 'syz.9.1205': attribute type 4 has an invalid length. [ 87.861549][ T7283] bridge: RTM_NEWNEIGH with invalid ether address [ 87.953046][ T7288] loop6: detected capacity change from 0 to 256 [ 88.667411][ T7302] loop6: detected capacity change from 0 to 128 [ 88.896137][ T3398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 88.903697][ T3398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.911209][ T3398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.918624][ T3398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.926073][ T3398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.933505][ T3398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.956361][ T3398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.963831][ T3398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.971341][ T3398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.978766][ T3398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 88.991659][ T3398] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 89.021468][ T7330] Invalid ELF header magic: != ELF [ 89.053744][ T7334] loop9: detected capacity change from 0 to 164 [ 89.097550][ T7332] fido_id[7332]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 90.090766][ T7369] loop7: detected capacity change from 0 to 164 [ 90.145106][ T7376] raw_sendmsg: syz.0.1250 forgot to set AF_INET. Fix it! [ 90.169492][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1249'. [ 90.191380][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1249'. [ 90.206770][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1249'. [ 90.230513][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1249'. [ 90.244100][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1249'. [ 90.320082][ T7395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7395 comm=syz.6.1258 [ 90.335400][ T7395] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1258'. [ 90.348200][ T7397] netlink: 'syz.9.1259': attribute type 1 has an invalid length. [ 90.362895][ T7397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.376727][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1259'. [ 90.393666][ T7383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.395332][ T7397] bond1 (unregistering): Released all slaves [ 90.420139][ T7383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.487978][ T1035] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 90.689656][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 90.689682][ T29] audit: type=1326 audit(90.652:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.6.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a992dec29 code=0x7ffc0000 [ 90.743606][ T29] audit: type=1326 audit(90.652:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.6.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a992dec29 code=0x7ffc0000 [ 90.766478][ T29] audit: type=1326 audit(90.652:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.6.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a992dec29 code=0x7ffc0000 [ 90.789338][ T29] audit: type=1326 audit(90.652:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.6.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a992dec29 code=0x7ffc0000 [ 90.812181][ T29] audit: type=1326 audit(90.652:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.6.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a992dec29 code=0x7ffc0000 [ 90.835043][ T29] audit: type=1326 audit(90.652:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.6.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9a992dec29 code=0x7ffc0000 [ 90.857852][ T29] audit: type=1326 audit(90.672:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.6.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9a992dec63 code=0x7ffc0000 [ 90.880444][ T29] audit: type=1326 audit(90.672:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.6.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9a992dec63 code=0x7ffc0000 [ 90.903044][ T29] audit: type=1326 audit(90.672:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.6.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a992dec29 code=0x7ffc0000 [ 90.925924][ T29] audit: type=1326 audit(90.672:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.6.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a992dec29 code=0x7ffc0000 [ 90.960379][ T7428] loop9: detected capacity change from 0 to 1024 [ 90.971076][ T7428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.979436][ T7428] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 90.987982][ T7428] System zones: 0-1, 3-36 [ 90.993675][ T7428] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.024125][ T6148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.122213][ T7439] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1274'. [ 91.245445][ T7449] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.300416][ T7456] vlan2: entered allmulticast mode [ 91.305696][ T7456] bond1: entered allmulticast mode [ 91.502701][ T7458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.513553][ T7458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.540721][ T7473] bridge_slave_0: left allmulticast mode [ 91.546480][ T7473] bridge_slave_0: left promiscuous mode [ 91.552371][ T7473] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.564031][ T7473] bridge_slave_1: left allmulticast mode [ 91.569799][ T7473] bridge_slave_1: left promiscuous mode [ 91.575722][ T7473] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.582454][ T7475] netlink: 'syz.6.1289': attribute type 1 has an invalid length. [ 91.603730][ T7476] netlink: 'syz.9.1288': attribute type 10 has an invalid length. [ 91.611667][ T7476] __nla_validate_parse: 1 callbacks suppressed [ 91.611683][ T7476] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1288'. [ 91.627565][ T7473] bond0: (slave bond_slave_0): Releasing backup interface [ 91.635679][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1289'. [ 91.671283][ T7473] bond0: (slave bond_slave_1): Releasing backup interface [ 91.700416][ T7473] team0: Port device team_slave_0 removed [ 91.719847][ T7473] team0: Port device team_slave_1 removed [ 91.738790][ T7473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.746268][ T7473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.762126][ T7473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.769549][ T7473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.813292][ T7475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.831996][ T7476] batman_adv: batadv0: Adding interface: veth1_vlan [ 91.838721][ T7476] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.877599][ T7476] batman_adv: batadv0: Interface activated: veth1_vlan [ 91.901644][ T7479] bond2 (unregistering): Released all slaves [ 91.929307][ T7483] loop8: detected capacity change from 0 to 1024 [ 91.939153][ T7483] EXT4-fs: Ignoring removed bh option [ 91.946101][ T7483] EXT4-fs: inline encryption not supported [ 91.963948][ T7483] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.989229][ T7483] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 92.056261][ T7483] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.1292: lblock 2 mapped to illegal pblock 2 (length 1) [ 92.133519][ T7483] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.1292: lblock 0 mapped to illegal pblock 48 (length 1) [ 92.173827][ T7483] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.1292: Failed to acquire dquot type 0 [ 92.212368][ T7483] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 92.252693][ T7483] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.1292: mark_inode_dirty error [ 92.284487][ T7483] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 92.308294][ T7483] EXT4-fs (loop8): 1 orphan inode deleted [ 92.322538][ T6358] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:55: lblock 1 mapped to illegal pblock 1 (length 1) [ 92.325779][ T7483] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.363195][ T6358] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:55: Failed to release dquot type 0 [ 92.501397][ T7501] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #2: block 16: comm syz.8.1292: lblock 0 mapped to illegal pblock 16 (length 1) [ 92.677471][ T7510] loop9: detected capacity change from 0 to 128 [ 92.692499][ T7510] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 92.712018][ T7512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7512 comm=syz.0.1301 [ 92.830464][ T7510] syz.9.1300: attempt to access beyond end of device [ 92.830464][ T7510] loop9: rw=0, sector=97, nr_sectors = 944 limit=128 [ 92.882625][ T5681] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.900302][ T5681] EXT4-fs error (device loop8): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 92.922318][ T294] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 92.934450][ T5681] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 92.975792][ T5681] EXT4-fs error (device loop8): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 93.409031][ T7548] loop7: detected capacity change from 0 to 128 [ 93.431780][ T7548] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 93.461127][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1317'. [ 93.479380][ T7550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.508541][ T7550] vlan2: entered allmulticast mode [ 93.510287][ T7553] SELinux: policydb version 676477988 does not match my version range 15-35 [ 93.513841][ T7550] bond0: entered allmulticast mode [ 93.527818][ T7548] syz.7.1316: attempt to access beyond end of device [ 93.527818][ T7548] loop7: rw=0, sector=97, nr_sectors = 944 limit=128 [ 93.531805][ T7553] SELinux: failed to load policy [ 93.557050][ T6319] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 93.590630][ T7557] netlink: 'syz.9.1320': attribute type 1 has an invalid length. [ 93.598670][ T7557] netlink: 161700 bytes leftover after parsing attributes in process `syz.9.1320'. [ 93.608598][ T7559] loop7: detected capacity change from 0 to 256 [ 93.700359][ T7566] loop7: detected capacity change from 0 to 128 [ 93.719467][ T7555] loop6: detected capacity change from 0 to 8192 [ 93.737120][ T7566] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 93.745080][ T7566] FAT-fs (loop7): Filesystem has been set read-only [ 93.755248][ T7566] syz.7.1323: attempt to access beyond end of device [ 93.755248][ T7566] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 93.770742][ T7566] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 93.778729][ T7566] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 93.787505][ T7565] syz.7.1323: attempt to access beyond end of device [ 93.787505][ T7565] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 93.831427][ T7566] syz.7.1323: attempt to access beyond end of device [ 93.831427][ T7566] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 93.844851][ T7565] syz.7.1323: attempt to access beyond end of device [ 93.844851][ T7565] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 93.859269][ T7566] syz.7.1323: attempt to access beyond end of device [ 93.859269][ T7566] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 93.873379][ T7566] syz.7.1323: attempt to access beyond end of device [ 93.873379][ T7566] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 93.886845][ T7565] syz.7.1323: attempt to access beyond end of device [ 93.886845][ T7565] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 93.900391][ T7566] syz.7.1323: attempt to access beyond end of device [ 93.900391][ T7566] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 95.005142][ T7592] loop6: detected capacity change from 0 to 128 [ 95.036479][ T7592] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 95.203489][ T6358] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 95.259511][ T7598] loop9: detected capacity change from 0 to 1024 [ 95.281207][ T7598] EXT4-fs: Ignoring removed orlov option [ 95.297742][ T7598] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 95.311696][ T7598] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.465556][ T6148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.605437][ T7605] tipc: Started in network mode [ 95.610443][ T7605] tipc: Node identity f2fcaf03d90c, cluster identity 4711 [ 95.617806][ T7605] tipc: Enabled bearer , priority 0 [ 95.664205][ T7604] tipc: Resetting bearer [ 95.688427][ T7604] tipc: Disabling bearer [ 95.776950][ T7615] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 95.835023][ T7619] ref_ctr increment failed for inode: 0x3d3 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff888104b27300 [ 95.857637][ T7619] ref_ctr increment failed for inode: 0x3d3 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff888104b27300 [ 95.882421][ T7618] uprobe: syz.7.1343:7618 failed to unregister, leaking uprobe [ 95.963269][ T7618] uprobe: syz.7.1343:7618 failed to unregister, leaking uprobe [ 96.096532][ T7632] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1349'. [ 96.392921][ T7644] syzkaller0: refused to change device tx_queue_len [ 96.729422][ T7664] loop9: detected capacity change from 0 to 128 [ 96.752590][ T7664] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.811647][ T7670] loop8: detected capacity change from 0 to 736 [ 96.858515][ T6148] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.909247][ T7670] rock: directory entry would overflow storage [ 96.915568][ T7670] rock: sig=0x3b10, size=4, remaining=3 [ 97.091446][ T7677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7677 comm=syz.9.1365 [ 97.166688][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 97.166707][ T29] audit: type=1326 audit(97.132:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.8.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84892dec29 code=0x7ffc0000 [ 97.229515][ T29] audit: type=1326 audit(97.172:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.8.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f84892dec29 code=0x7ffc0000 [ 97.252269][ T29] audit: type=1326 audit(97.172:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.8.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84892dec29 code=0x7ffc0000 [ 97.275053][ T29] audit: type=1326 audit(97.172:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.8.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84892dec29 code=0x7ffc0000 [ 97.297944][ T29] audit: type=1326 audit(97.172:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.8.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f84892dec29 code=0x7ffc0000 [ 97.320772][ T29] audit: type=1326 audit(97.172:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.8.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84892dec29 code=0x7ffc0000 [ 97.343726][ T29] audit: type=1326 audit(97.172:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.8.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84892dec29 code=0x7ffc0000 [ 97.366476][ T29] audit: type=1326 audit(97.172:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.8.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f84892dec29 code=0x7ffc0000 [ 97.389189][ T29] audit: type=1326 audit(97.172:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.8.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84892dec29 code=0x7ffc0000 [ 97.411966][ T29] audit: type=1326 audit(97.172:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.8.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84892dec29 code=0x7ffc0000 [ 97.526498][ T7693] loop8: detected capacity change from 0 to 512 [ 97.594050][ T7693] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.646793][ T7695] SELinux: policydb version 676477988 does not match my version range 15-35 [ 97.662380][ T7693] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.695775][ T7695] SELinux: failed to load policy [ 97.763413][ T5681] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.855279][ T7709] SELinux: failed to load policy [ 98.243373][ T7739] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1394'. [ 98.324065][ T7745] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1396'. [ 98.443521][ T7754] loop8: detected capacity change from 0 to 512 [ 98.501460][ T7754] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1400: bg 0: block 5: invalid block bitmap [ 98.530453][ T7756] loop7: detected capacity change from 0 to 1024 [ 98.565707][ T7756] EXT4-fs: Ignoring removed bh option [ 98.571331][ T7754] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 98.595678][ T7754] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1400: invalid indirect mapped block 3 (level 2) [ 98.612379][ T7754] EXT4-fs (loop8): 2 truncates cleaned up [ 98.623855][ T7756] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.643371][ T7754] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.675963][ T7756] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 98.702320][ T7756] System zones: 0-1, 3-12 [ 98.714881][ T7756] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #3: block 1: comm syz.7.1403: lblock 1 mapped to illegal pblock 1 (length 1) [ 98.715762][ T7754] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.742045][ T7770] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1406'. [ 98.754917][ T7769] ref_ctr increment failed for inode: 0x2ad offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff888104b26780 [ 98.766801][ T7756] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.1403: Failed to acquire dquot type 0 [ 98.772976][ T7769] ref_ctr increment failed for inode: 0x2ad offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff888104b26780 [ 98.791055][ T7756] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.1403: Freeing blocks not in datazone - block = 0, count = 4096 [ 98.806127][ T7756] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.1403: Invalid inode bitmap blk 0 in block_group 0 [ 98.819061][ T6381] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:67: lblock 1 mapped to illegal pblock 1 (length 1) [ 98.819610][ T7756] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 98.843515][ T6381] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:67: Failed to release dquot type 0 [ 98.856177][ T7754] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.867010][ T7768] uprobe: syz.9.1407:7768 failed to unregister, leaking uprobe [ 98.875134][ T7756] EXT4-fs (loop7): 1 orphan inode deleted [ 98.915007][ T7754] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.931954][ T7768] uprobe: syz.9.1407:7768 failed to unregister, leaking uprobe [ 98.982536][ T51] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.000276][ T51] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.021098][ T51] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.029555][ T51] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.098690][ T5681] EXT4-fs unmount: 3 callbacks suppressed [ 99.098708][ T5681] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.200392][ T7788] netlink: 'syz.8.1414': attribute type 4 has an invalid length. [ 99.358194][ T7799] loop7: detected capacity change from 0 to 128 [ 100.133717][ T7816] geneve2: entered promiscuous mode [ 100.138976][ T7816] geneve2: entered allmulticast mode [ 100.293125][ T7825] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1430'. [ 100.431997][ T7828] loop6: detected capacity change from 0 to 4096 [ 100.469444][ T7828] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.566864][ T7836] loop9: detected capacity change from 0 to 512 [ 100.598315][ T7836] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.654278][ T6148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.114637][ T7850] loop9: detected capacity change from 0 to 8192 [ 101.219738][ T4139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.851214][ T7883] loop9: detected capacity change from 0 to 512 [ 101.862405][ T7883] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.887058][ T7885] netlink: 272 bytes leftover after parsing attributes in process `syz.6.1454'. [ 101.897661][ T7883] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.966847][ T6148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.625479][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1468'. [ 102.662846][ T7927] ip6gre1: entered allmulticast mode [ 102.681265][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 102.681282][ T29] audit: type=1326 audit(102.652:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.0.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 102.715376][ T29] audit: type=1326 audit(102.682:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.0.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 102.738306][ T29] audit: type=1326 audit(102.682:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.0.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 102.761180][ T29] audit: type=1326 audit(102.682:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.0.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 102.796568][ T29] audit: type=1326 audit(102.762:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.0.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 102.819442][ T29] audit: type=1326 audit(102.762:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.0.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 102.842243][ T29] audit: type=1326 audit(102.762:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.0.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 102.865252][ T29] audit: type=1326 audit(102.762:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.0.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 102.888364][ T29] audit: type=1326 audit(102.762:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.0.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 102.911231][ T29] audit: type=1326 audit(102.762:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.0.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 102.959866][ T7940] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1474'. [ 103.023256][ T7940] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.063239][ T7946] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 103.077485][ T7940] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1474'. [ 103.114945][ T7946] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 103.166009][ T7940] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 103.186451][ T7940] bond2 (unregistering): Released all slaves [ 103.309491][ T7971] loop7: detected capacity change from 0 to 512 [ 103.329086][ T7971] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 103.332133][ T7969] loop8: detected capacity change from 0 to 2048 [ 103.388260][ T7971] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 103.422616][ T3642] loop8: p2 p3 p7 [ 103.435828][ T7971] EXT4-fs (loop7): 1 truncate cleaned up [ 103.443155][ T7979] loop9: detected capacity change from 0 to 128 [ 103.463996][ T7971] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.521458][ T7969] loop8: p2 p3 p7 [ 103.584379][ T7982] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.660610][ T3643] udevd[3643]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 103.662991][ T7984] loop8: detected capacity change from 0 to 1024 [ 103.670744][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 103.683773][ T4907] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.718945][ T7984] EXT4-fs: Ignoring removed bh option [ 103.719980][ T3642] udevd[3642]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 103.743517][ T7984] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.772355][ T7986] loop7: detected capacity change from 0 to 1024 [ 103.779827][ T7984] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 103.816321][ T7984] System zones: 0-1, 3-12 [ 103.818123][ T3643] udevd[3643]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 103.832947][ T3642] udevd[3642]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 103.839196][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 103.854247][ T7984] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #3: block 1: comm syz.8.1492: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.868771][ T7986] ext3: Unknown parameter 'noacl' [ 103.929276][ T7984] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.1492: Failed to acquire dquot type 0 [ 103.984577][ T7984] EXT4-fs error (device loop8): ext4_free_blocks:6696: comm syz.8.1492: Freeing blocks not in datazone - block = 0, count = 4096 [ 104.028503][ T7984] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.1492: Invalid inode bitmap blk 0 in block_group 0 [ 104.044945][ T294] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 104.082922][ T294] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 104.095209][ T7984] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 104.109607][ T7984] EXT4-fs (loop8): 1 orphan inode deleted [ 104.136634][ T7984] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.183373][ T7995] loop7: detected capacity change from 0 to 512 [ 104.218623][ T7995] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1497: bg 0: block 5: invalid block bitmap [ 104.233294][ T7995] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 104.242619][ T7995] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1497: invalid indirect mapped block 3 (level 2) [ 104.257194][ T7995] EXT4-fs (loop7): 2 truncates cleaned up [ 104.263718][ T7995] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.314365][ T5681] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.609195][ T4907] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.108880][ T8028] loop7: detected capacity change from 0 to 4096 [ 105.129717][ T8028] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.404587][ T8040] syz_tun: entered promiscuous mode [ 105.414430][ T8040] vlan3: entered promiscuous mode [ 105.457989][ T3390] Process accounting resumed [ 105.545855][ T8049] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1517'. [ 105.726386][ T8055] all: renamed from lo (while UP) [ 105.786039][ T8061] pimreg: entered allmulticast mode [ 105.793064][ T8061] pimreg: left allmulticast mode [ 105.932220][ T4907] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.505969][ T8085] loop9: detected capacity change from 0 to 2048 [ 106.589023][ T8090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1535'. [ 106.605554][ T3568] loop9: p2 p3 p7 [ 106.626983][ T8085] loop9: p2 p3 p7 [ 106.738000][ T8096] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1538'. [ 106.748945][ T3642] udevd[3642]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 106.760082][ T3643] udevd[3643]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 106.762783][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 106.796011][ T8096] bond3: entered promiscuous mode [ 106.801188][ T8096] bond3: entered allmulticast mode [ 106.810917][ T8096] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.835898][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 106.838095][ T8096] bond3 (unregistering): Released all slaves [ 107.073317][ T8118] loop6: detected capacity change from 0 to 512 [ 107.089650][ T8118] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1547: bg 0: block 5: invalid block bitmap [ 107.125289][ T8122] loop7: detected capacity change from 0 to 2048 [ 107.133317][ T8118] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 107.144941][ T8118] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1547: invalid indirect mapped block 3 (level 2) [ 107.163488][ T8125] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 107.170051][ T8125] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 107.177686][ T8125] vhci_hcd vhci_hcd.0: Device attached [ 107.189144][ T3642] loop7: p2 p3 p7 [ 107.199117][ T8118] EXT4-fs (loop6): 2 truncates cleaned up [ 107.209053][ T8127] vhci_hcd: connection closed [ 107.209216][ T8118] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.209757][ T294] vhci_hcd: stop threads [ 107.230864][ T294] vhci_hcd: release socket [ 107.235462][ T294] vhci_hcd: disconnect device [ 107.271006][ T8122] loop7: p2 p3 p7 [ 107.331301][ T8118] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.403787][ T8118] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.467437][ T8118] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.558508][ T8118] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.628280][ T6381] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.650837][ T6381] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.690482][ T6381] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.709772][ T6381] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.724895][ T4139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.845544][ T8163] netlink: 14 bytes leftover after parsing attributes in process `+}[@'. [ 107.867953][ T8163] hsr_slave_0: left promiscuous mode [ 107.881107][ T8163] hsr_slave_1: left promiscuous mode [ 108.117072][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 108.117143][ T29] audit: type=1400 audit(108.082:1877): avc: denied { write } for pid=8181 comm="syz.8.1574" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.178780][ T8185] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 108.275244][ T3642] printk: udevd: 8 output lines suppressed due to ratelimiting [ 108.294637][ T29] audit: type=1326 audit(108.262:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8198 comm="syz.9.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a24cec29 code=0x7ffc0000 [ 108.317577][ T29] audit: type=1326 audit(108.262:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8198 comm="syz.9.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a24cec29 code=0x7ffc0000 [ 108.341168][ T29] audit: type=1326 audit(108.262:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8198 comm="syz.9.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29a24cec29 code=0x7ffc0000 [ 108.364224][ T29] audit: type=1326 audit(108.262:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8198 comm="syz.9.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a24cec29 code=0x7ffc0000 [ 108.387625][ T29] audit: type=1326 audit(108.262:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8198 comm="syz.9.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a24cec29 code=0x7ffc0000 [ 108.410457][ T29] audit: type=1326 audit(108.302:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8198 comm="syz.9.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29a24cec29 code=0x7ffc0000 [ 108.433938][ T29] audit: type=1326 audit(108.312:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8198 comm="syz.9.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a24cec29 code=0x7ffc0000 [ 108.456881][ T29] audit: type=1326 audit(108.312:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8198 comm="syz.9.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a24cec29 code=0x7ffc0000 [ 108.485644][ T29] audit: type=1326 audit(108.402:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8198 comm="syz.9.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29a24cec29 code=0x7ffc0000 [ 108.607083][ T8208] binfmt_misc: register: failed to install interpreter file ./file2 [ 108.942381][ T8224] loop8: detected capacity change from 0 to 512 [ 109.003343][ T8224] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.076102][ T8221] Set syz1 is full, maxelem 65536 reached [ 109.081771][ T8224] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 109.103933][ T5681] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.134202][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1596'. [ 109.156409][ T8239] loop7: detected capacity change from 0 to 512 [ 109.173260][ T8239] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.1598: iget: bad i_size value: 38620345925642 [ 109.195343][ T8239] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1598: couldn't read orphan inode 15 (err -117) [ 109.212674][ T8239] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.284255][ T8244] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1598: bg 0: block 5: invalid block bitmap [ 109.307429][ T8244] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 232 with error 28 [ 109.319862][ T8244] EXT4-fs (loop7): This should not happen!! Data will be lost [ 109.319862][ T8244] [ 109.329561][ T8244] EXT4-fs (loop7): Total free blocks count 0 [ 109.335705][ T8244] EXT4-fs (loop7): Free/Dirty block details [ 109.341687][ T8244] EXT4-fs (loop7): free_blocks=0 [ 109.346680][ T8244] EXT4-fs (loop7): dirty_blocks=240 [ 109.351933][ T8244] EXT4-fs (loop7): Block reservation details [ 109.357984][ T8244] EXT4-fs (loop7): i_reserved_data_blocks=240 [ 109.378288][ T6358] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 232 with max blocks 8 with error 28 [ 110.028426][ T8265] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.037422][ T8267] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1609'. [ 110.071013][ T3398] hid_parser_main: 28 callbacks suppressed [ 110.071068][ T3398] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 110.084332][ T3398] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 110.091757][ T3398] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 110.099226][ T3398] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 110.106855][ T3398] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 110.114363][ T3398] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 110.121850][ T3398] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 110.129341][ T3398] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 110.136785][ T3398] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 110.144306][ T3398] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 110.155611][ T8265] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.184469][ T3398] hid-generic 0008:0006:0007.0003: hidraw0: HID v0.0b Device [syz1] on syz1 [ 110.215244][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1611'. [ 110.239750][ T8272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.253831][ T8277] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1621'. [ 110.257794][ T8265] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.284115][ T8277] bond2: entered promiscuous mode [ 110.289298][ T8277] bond2: entered allmulticast mode [ 110.295886][ T8277] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.305796][ T8277] bond2 (unregistering): Released all slaves [ 110.318498][ T8272] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 110.328398][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1611'. [ 110.337454][ T8272] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 110.363429][ T8265] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.389566][ T8279] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 110.404503][ T8279] bond1 (unregistering): Released all slaves [ 110.447545][ T6381] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.458509][ T6381] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.471551][ T6381] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.482979][ T6381] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.525939][ T8284] loop7: detected capacity change from 0 to 512 [ 110.562671][ T8284] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.596046][ T8295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1618'. [ 110.623785][ T8284] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 110.648126][ T4907] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.663102][ T8295] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.693178][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1618'. [ 110.752754][ T8299] bond1 (unregistering): Released all slaves [ 110.915824][ T8304] loop7: detected capacity change from 0 to 512 [ 110.971940][ T8304] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 110.979957][ T8304] EXT4-fs (loop7): orphan cleanup on readonly fs [ 111.018420][ T8304] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.1620: corrupted inode contents [ 111.036962][ T8304] EXT4-fs (loop7): Remounting filesystem read-only [ 111.048280][ T8304] EXT4-fs (loop7): 1 truncate cleaned up [ 111.055228][ T51] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 111.066026][ T51] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 111.090939][ T51] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 111.102243][ T8304] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.164587][ T4907] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.506017][ T8317] loop7: detected capacity change from 0 to 8192 [ 111.526750][ T8317] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.573996][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1628'. [ 111.598580][ T8325] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.629091][ T8325] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 111.637569][ T8325] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 111.655049][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1628'. [ 111.689998][ T8325] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 111.708509][ T8325] bond2 (unregistering): Released all slaves [ 111.802659][ T8344] pimreg: entered allmulticast mode [ 111.811859][ T8344] pimreg: left allmulticast mode [ 111.842337][ T8351] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 111.848904][ T8351] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 111.856639][ T8351] vhci_hcd vhci_hcd.0: Device attached [ 111.866046][ T8352] vhci_hcd: connection closed [ 111.866162][ T6358] vhci_hcd: stop threads [ 111.875282][ T6358] vhci_hcd: release socket [ 111.879714][ T6358] vhci_hcd: disconnect device [ 112.662455][ T8359] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 112.789419][ T8375] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1646'. [ 113.303313][ T8407] netlink: 'syz.9.1663': attribute type 10 has an invalid length. [ 113.338731][ T8407] netlink: 'syz.9.1663': attribute type 10 has an invalid length. [ 113.378993][ T8407] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 113.436514][ T8414] loop8: detected capacity change from 0 to 512 [ 113.458312][ T8414] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.1664: iget: bad i_size value: 38620345925642 [ 113.498022][ T8414] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.1664: couldn't read orphan inode 15 (err -117) [ 113.536834][ T8414] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.685612][ T8424] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1664: bg 0: block 5: invalid block bitmap [ 113.700174][ T8424] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 576 with error 28 [ 113.712629][ T8424] EXT4-fs (loop8): This should not happen!! Data will be lost [ 113.712629][ T8424] [ 113.722308][ T8424] EXT4-fs (loop8): Total free blocks count 0 [ 113.728418][ T8424] EXT4-fs (loop8): Free/Dirty block details [ 113.734375][ T8424] EXT4-fs (loop8): free_blocks=0 [ 113.739324][ T8424] EXT4-fs (loop8): dirty_blocks=576 [ 113.744583][ T8424] EXT4-fs (loop8): Block reservation details [ 113.750582][ T8424] EXT4-fs (loop8): i_reserved_data_blocks=576 [ 113.878579][ T5681] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.936160][ T8428] veth0: entered promiscuous mode [ 113.948362][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 113.948378][ T29] audit: type=1400 audit(113.912:2035): avc: denied { write } for pid=8427 comm="syz.8.1669" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 113.981190][ T8428] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1669'. [ 114.004977][ T8432] loop7: detected capacity change from 0 to 128 [ 114.018401][ T8432] netlink: 196 bytes leftover after parsing attributes in process `syz.7.1670'. [ 114.097491][ T8442] loop8: detected capacity change from 0 to 1024 [ 114.114809][ T8442] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.127451][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1679'. [ 114.156226][ T8448] team0 (unregistering): Port device vlan2 removed [ 114.165544][ T8442] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.1678: Allocating blocks 385-513 which overlap fs metadata [ 114.171066][ T29] audit: type=1400 audit(114.122:2036): avc: denied { map } for pid=8441 comm="syz.8.1678" path="/177/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.242261][ T29] audit: type=1326 audit(114.212:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 114.267476][ T29] audit: type=1326 audit(114.232:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 114.290410][ T29] audit: type=1326 audit(114.232:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 114.313255][ T29] audit: type=1326 audit(114.232:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 114.336223][ T29] audit: type=1326 audit(114.232:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 114.359271][ T29] audit: type=1326 audit(114.232:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 114.382338][ T29] audit: type=1326 audit(114.232:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 114.405486][ T29] audit: type=1326 audit(114.232:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f0b5992ec29 code=0x7ffc0000 [ 114.417810][ T8462] EXT4-fs (loop8): pa ffff88810400f9a0: logic 16, phys. 129, len 24 [ 114.436357][ T8462] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 114.457225][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1685'. [ 114.479842][ T8466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.497495][ T8466] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 114.505324][ T5681] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.516045][ T8466] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 114.546533][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1685'. [ 114.615225][ T8466] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 114.625762][ T8481] loop7: detected capacity change from 0 to 512 [ 114.641730][ T8466] bond1 (unregistering): Released all slaves [ 114.675675][ T8482] tipc: Started in network mode [ 114.680419][ T8481] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.680611][ T8482] tipc: Node identity b62be978cb89, cluster identity 4711 [ 114.700492][ T8482] tipc: Enabled bearer , priority 0 [ 114.794639][ T8494] netlink: 'syz.0.1697': attribute type 10 has an invalid length. [ 114.836845][ T8472] tipc: Resetting bearer [ 114.855526][ T8495] netlink: 'syz.0.1697': attribute type 10 has an invalid length. [ 114.904447][ T8472] tipc: Disabling bearer [ 114.928123][ T8494] team0: Port device dummy0 added [ 114.933964][ T8495] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.981092][ T8495] team0: Failed to send options change via netlink (err -105) [ 115.006702][ T8495] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 115.057543][ T8495] team0: Port device dummy0 removed [ 115.069505][ T8512] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.102701][ T8495] : (slave dummy0): Enslaving as an active interface with an up link [ 115.126660][ T8509] loop8: detected capacity change from 0 to 8192 [ 115.216333][ T8521] netlink: 'syz.0.1707': attribute type 1 has an invalid length. [ 115.253741][ T8524] syzkaller0: create flow: hash 1494525228 index 1 [ 115.270457][ T51] syzkaller0: tun_net_xmit 76 [ 115.275401][ T51] syzkaller0: tun_net_xmit 48 [ 115.300987][ T1035] syzkaller0: tun_net_xmit 76 [ 115.308310][ T8518] syzkaller0: delete flow: hash 1494525228 index 1 [ 115.370395][ T8521] bond1: entered promiscuous mode [ 115.375613][ T8521] bond1: entered allmulticast mode [ 115.387246][ T8521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.423701][ T8527] bridge1: entered promiscuous mode [ 115.429019][ T8527] bridge1: entered allmulticast mode [ 115.441922][ T8527] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 115.471285][ T6381] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 115.551697][ T8540] loop9: detected capacity change from 0 to 512 [ 115.568156][ T8540] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 115.589495][ T8540] EXT4-fs (loop9): 1 truncate cleaned up [ 115.596939][ T6358] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 115.598982][ T8540] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.762835][ T6148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.797666][ T8551] loop9: detected capacity change from 0 to 128 [ 115.834141][ T8551] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.927380][ T8558] loop6: detected capacity change from 0 to 128 [ 115.944389][ T6148] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.961929][ T8558] bio_check_eod: 5500 callbacks suppressed [ 115.961976][ T8558] syz.6.1722: attempt to access beyond end of device [ 115.961976][ T8558] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 116.023458][ T8558] syz.6.1722: attempt to access beyond end of device [ 116.023458][ T8558] loop6: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 116.036955][ T8558] Buffer I/O error on dev loop6, logical block 79, lost async page write [ 116.100026][ T8481] syz.7.1693 (8481) used greatest stack depth: 7096 bytes left [ 116.108801][ T8558] syz.6.1722: attempt to access beyond end of device [ 116.108801][ T8558] loop6: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 116.122442][ T8558] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 116.132302][ T4907] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.147120][ T8558] syz.6.1722: attempt to access beyond end of device [ 116.147120][ T8558] loop6: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 116.161654][ T8558] syz.6.1722: attempt to access beyond end of device [ 116.161654][ T8558] loop6: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 116.175215][ T8558] Buffer I/O error on dev loop6, logical block 83, lost async page write [ 116.185872][ T8558] syz.6.1722: attempt to access beyond end of device [ 116.185872][ T8558] loop6: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 116.199325][ T8558] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 116.210576][ T8558] syz.6.1722: attempt to access beyond end of device [ 116.210576][ T8558] loop6: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 116.226036][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1723'. [ 116.227684][ T8558] syz.6.1722: attempt to access beyond end of device [ 116.227684][ T8558] loop6: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 116.240912][ T8563] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 116.248456][ T8558] Buffer I/O error on dev loop6, logical block 95, lost async page write [ 116.315889][ T8558] syz.6.1722: attempt to access beyond end of device [ 116.315889][ T8558] loop6: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 116.329386][ T8558] Buffer I/O error on dev loop6, logical block 96, lost async page write [ 116.358467][ T8563] batman_adv: batadv0: Removing interface: veth1_vlan [ 116.385609][ T6358] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.405938][ T8558] syz.6.1722: attempt to access beyond end of device [ 116.405938][ T8558] loop6: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 116.438265][ T8558] Buffer I/O error on dev loop6, logical block 99, lost async page write [ 116.448729][ T8558] Buffer I/O error on dev loop6, logical block 100, lost async page write [ 116.458835][ T6358] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.500018][ T8558] Buffer I/O error on dev loop6, logical block 111, lost async page write [ 116.510660][ T6358] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.528978][ T8558] Buffer I/O error on dev loop6, logical block 112, lost async page write [ 116.572531][ T6358] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.854654][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1732'. [ 116.873322][ T6358] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 116.884285][ T6358] bond0 (unregistering): Released all slaves [ 116.904936][ T6358] bond1 (unregistering): Released all slaves [ 116.968235][ T8594] veth0: entered promiscuous mode [ 117.006932][ T6358] tipc: Left network mode [ 117.037359][ T6358] hsr_slave_0: left promiscuous mode [ 117.048006][ T6358] hsr_slave_1: left promiscuous mode [ 117.068033][ T6358] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 117.075169][ T6358] batman_adv: batadv0: Removing interface: veth1_vlan [ 117.107899][ T6358] veth1_macvtap: left promiscuous mode [ 117.120512][ T6358] veth0_macvtap: left promiscuous mode [ 117.130818][ T6358] veth1_vlan: left promiscuous mode [ 117.146371][ T6358] veth0_vlan: left promiscuous mode [ 117.164897][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1739'. [ 117.401803][ T8567] chnl_net:caif_netlink_parms(): no params data found [ 117.443169][ T8567] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.450277][ T8567] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.457513][ T8567] bridge_slave_0: entered allmulticast mode [ 117.464249][ T8567] bridge_slave_0: entered promiscuous mode [ 117.471152][ T8567] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.478228][ T8567] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.485649][ T8567] bridge_slave_1: entered allmulticast mode [ 117.493123][ T8567] bridge_slave_1: entered promiscuous mode [ 117.511358][ T8567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.521925][ T8567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.543652][ T8567] team0: Port device team_slave_0 added [ 117.550456][ T8567] team0: Port device team_slave_1 added [ 117.577110][ T8567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.584237][ T8567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.610238][ T8567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.626650][ T8567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.633672][ T8567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.659731][ T8567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.703709][ T8567] hsr_slave_0: entered promiscuous mode [ 117.706244][ T8631] block device autoloading is deprecated and will be removed. [ 117.710161][ T8567] hsr_slave_1: entered promiscuous mode [ 117.785351][ T6358] IPVS: stop unused estimator thread 0... [ 117.847392][ T8640] tipc: Enabled bearer , priority 0 [ 117.858057][ T8640] tipc: Disabling bearer [ 117.992056][ T8644] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1755'. [ 118.004296][ T8648] loop7: detected capacity change from 0 to 512 [ 118.018613][ T8648] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 118.054369][ T8650] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.071945][ T8648] EXT4-fs (loop7): 1 truncate cleaned up [ 118.077968][ T8648] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.118500][ T8650] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.145193][ T4907] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.158381][ T8567] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 118.168049][ T8567] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 118.178487][ T8650] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.198246][ T8567] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 118.207674][ T8567] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 118.226662][ T8567] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.233809][ T8567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.241470][ T8567] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.248598][ T8567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.264773][ T8650] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.327033][ T8567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.344081][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.361744][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.385061][ T8567] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.398771][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.405893][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.419303][ T6358] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.426434][ T6358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.441383][ T51] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.454507][ T51] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.471334][ T51] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.482255][ T6381] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.507188][ T8670] loop6: detected capacity change from 0 to 128 [ 118.557285][ T8567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.638619][ T8567] veth0_vlan: entered promiscuous mode [ 118.648575][ T8567] veth1_vlan: entered promiscuous mode [ 118.667463][ T8567] veth0_macvtap: entered promiscuous mode [ 118.676276][ T8567] veth1_macvtap: entered promiscuous mode [ 118.687049][ T8567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.704151][ T8567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.717650][ T6319] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.738524][ T6319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.765016][ T6319] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.774409][ T6358] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.789466][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1726'. [ 118.848160][ T8696] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1767'. [ 118.949858][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1771'. [ 119.099793][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1777'. [ 119.118770][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 119.118786][ T29] audit: type=1400 audit(119.082:2136): avc: denied { create } for pid=8719 comm="syz.7.1778" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 119.153736][ T29] audit: type=1400 audit(119.112:2137): avc: denied { mounton } for pid=8719 comm="syz.7.1778" path="/281/file0" dev="tmpfs" ino=1499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 119.176363][ T29] audit: type=1400 audit(119.122:2138): avc: denied { mount } for pid=8719 comm="syz.7.1778" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 119.208131][ T29] audit: type=1400 audit(119.172:2139): avc: denied { unmount } for pid=4907 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 119.236660][ T8723] bridge0: entered promiscuous mode [ 119.242170][ T8723] macvtap1: entered allmulticast mode [ 119.247732][ T8723] bridge0: entered allmulticast mode [ 119.255636][ T8723] bridge0: port 3(macvtap1) entered blocking state [ 119.262326][ T8723] bridge0: port 3(macvtap1) entered disabled state [ 119.270308][ T8723] bridge0: left allmulticast mode [ 119.275534][ T8723] bridge0: left promiscuous mode [ 119.286454][ T8727] loop8: detected capacity change from 0 to 256 [ 119.293646][ T8727] msdos: Bad value for 'tz' [ 119.301142][ T29] audit: type=1400 audit(119.262:2140): avc: denied { unlink } for pid=4907 comm="syz-executor" name="file0" dev="tmpfs" ino=1499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 119.329295][ T8729] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1779'. [ 119.393831][ T29] audit: type=1400 audit(119.362:2141): avc: denied { cmd } for pid=8734 comm="syz.8.1784" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=io_uring permissive=1 [ 119.586543][ T8755] loop7: detected capacity change from 0 to 764 [ 119.596074][ T8755] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 120.117979][ T8770] ref_ctr_offset mismatch. inode: 0x782 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 120.132018][ T8767] loop7: detected capacity change from 0 to 2048 [ 120.145198][ T8767] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.194662][ T8779] loop6: detected capacity change from 0 to 512 [ 120.215386][ T29] audit: type=1400 audit(120.182:2142): avc: denied { name_connect } for pid=8780 comm="syz.0.1803" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 120.285371][ T8779] loop6: detected capacity change from 0 to 8192 [ 120.332927][ T4907] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.508450][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1814'. [ 120.615839][ T8794] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 120.623614][ T8794] FAT-fs (loop6): Filesystem has been set read-only [ 120.643341][ T8779] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 120.785458][ T29] audit: type=1326 audit(120.752:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8812 comm="syz.6.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a992dec29 code=0x7ffc0000 [ 120.808474][ T29] audit: type=1326 audit(120.752:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8812 comm="syz.6.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a992dec29 code=0x7ffc0000 [ 120.866774][ T29] audit: type=1326 audit(120.802:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8812 comm="syz.6.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9a992dec29 code=0x7ffc0000 [ 120.876179][ T8811] loop7: detected capacity change from 0 to 8192 [ 121.013665][ T1035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1035 comm=kworker/0:2 [ 121.183455][ T8827] tipc: Started in network mode [ 121.188453][ T8827] tipc: Node identity 82c931366108, cluster identity 4711 [ 121.195789][ T8827] tipc: Enabled bearer , priority 0 [ 121.225532][ T8827] tipc: Disabling bearer [ 121.378674][ T8838] serio: Serial port ptm0 [ 121.381704][ T8836] loop8: detected capacity change from 0 to 1024 [ 121.423826][ T8836] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.481073][ T8836] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.1827: Allocating blocks 385-513 which overlap fs metadata crond[3094]: tim[ 121.562090][ T8836] EXT4-fs (loop8): pa ffff888106f772a0: logic 16, phys. 129, len 24 e disparity of -[ 121.571364][ T8836] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 29307343 minutes detected [ 121.641906][ T8849] vlan3: entered allmulticast mode [ 121.647160][ T8849] dummy0: entered allmulticast mode [ 121.683085][ T5681] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.702189][ T8851] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 121.719291][ T8851] vhci_hcd: invalid port number 96 [ 121.724503][ T8851] vhci_hcd: default hub control req: 0017 vfffc i0060 l0 [ 121.766940][ T8855] __nla_validate_parse: 1 callbacks suppressed [ 121.766995][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1834'. [ 121.782271][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1834'. [ 121.802438][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1837'. [ 121.804976][ T8855] bridge0: port 3(macsec1) entered blocking state [ 121.818057][ T8855] bridge0: port 3(macsec1) entered disabled state [ 121.844020][ T8855] macsec1: entered allmulticast mode [ 121.850699][ T8855] macsec1: left allmulticast mode [ 122.045998][ T8878] tipc: Enabled bearer , priority 0 [ 122.064457][ T8880] loop8: detected capacity change from 0 to 2048 [ 122.074266][ T8878] tipc: Disabling bearer [ 122.116068][ T8880] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.257334][ T5681] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 122.294522][ T5681] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 123.279908][ T8935] pim6reg1: entered promiscuous mode [ 123.285418][ T8935] pim6reg1: entered allmulticast mode [ 123.315347][ T8940] loop7: detected capacity change from 0 to 1024 [ 123.334008][ T8940] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.352883][ T8889] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.373271][ T4907] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.386853][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1863'. [ 123.717646][ T8953] chnl_net:caif_netlink_parms(): no params data found [ 123.834818][ T8953] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.842013][ T8953] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.863388][ T8953] bridge_slave_0: entered allmulticast mode [ 123.869929][ T8953] bridge_slave_0: entered promiscuous mode [ 123.900043][ T8953] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.907615][ T8953] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.923012][ T8953] bridge_slave_1: entered allmulticast mode [ 123.929876][ T8953] bridge_slave_1: entered promiscuous mode [ 123.950475][ T8953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.961546][ T8953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.982614][ T8953] team0: Port device team_slave_0 added [ 123.989425][ T8953] team0: Port device team_slave_1 added [ 124.016003][ T8953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.023016][ T8953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.049044][ T8953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.061307][ T8953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.068272][ T8953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.094224][ T8953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.126967][ T8953] hsr_slave_0: entered promiscuous mode [ 124.133169][ T8953] hsr_slave_1: entered promiscuous mode [ 124.139081][ T8953] debugfs: 'hsr0' already exists in 'hsr' [ 124.144901][ T8953] Cannot create hsr debugfs directory [ 124.491078][ T8953] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 124.516539][ T8953] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 124.546185][ T8953] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 124.565459][ T8953] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 124.623392][ T8953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.636864][ T8953] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.649920][ T6358] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.657138][ T6358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.705443][ T6358] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.712650][ T6358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.002798][ T8953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.281590][ T8953] veth0_vlan: entered promiscuous mode [ 125.300260][ T8953] veth1_vlan: entered promiscuous mode [ 125.330129][ T8953] veth0_macvtap: entered promiscuous mode [ 125.363382][ T8953] veth1_macvtap: entered promiscuous mode [ 125.398209][ T8953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.443638][ T8953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.466627][ T6319] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.493365][ T6319] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.526393][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 125.526410][ T29] audit: type=1400 audit(125.492:2253): avc: denied { mounton } for pid=8953 comm="syz-executor" path="/root/syzkaller.0PBqKF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=29327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 125.571205][ T6319] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.580345][ T6319] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.714567][ T9042] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 125.742720][ T29] audit: type=1326 audit(125.712:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c445cec29 code=0x7ffc0000 [ 125.813924][ T29] audit: type=1326 audit(125.712:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5c445cec29 code=0x7ffc0000 [ 125.836972][ T29] audit: type=1326 audit(125.772:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5c445cec63 code=0x7ffc0000 [ 125.860195][ T29] audit: type=1326 audit(125.772:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5c445cec63 code=0x7ffc0000 [ 125.882882][ T29] audit: type=1326 audit(125.772:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c445cec29 code=0x7ffc0000 [ 125.905801][ T29] audit: type=1326 audit(125.772:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c445cec29 code=0x7ffc0000 [ 126.062227][ T29] audit: type=1326 audit(125.832:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c445cec29 code=0x7ffc0000 [ 126.085136][ T29] audit: type=1326 audit(125.832:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c445cec29 code=0x7ffc0000 [ 126.108174][ T29] audit: type=1326 audit(125.832:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c445cec29 code=0x7ffc0000 [ 126.264894][ T9067] loop7: detected capacity change from 0 to 1024 [ 126.282304][ T9068] tipc: Enabling of bearer rejected, failed to enable media [ 126.322702][ T9067] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.408940][ T9067] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 126.453962][ T9077] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1904'. [ 126.666335][ T4907] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.938840][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1916'. [ 127.104446][ T9124] netlink: 'syz.0.1923': attribute type 10 has an invalid length. [ 127.113202][ T9124] : (slave dummy0): Releasing backup interface [ 127.121257][ T9124] team0: Failed to send options change via netlink (err -105) [ 127.128811][ T9124] team0: Port device dummy0 added [ 127.136344][ T9124] netlink: 'syz.0.1923': attribute type 10 has an invalid length. [ 127.145125][ T9124] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 127.155022][ T9124] team0: Failed to send options change via netlink (err -105) [ 127.162703][ T9124] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 127.171924][ T9124] team0: Port device dummy0 removed [ 127.178346][ T9124] : (slave dummy0): Enslaving as an active interface with an up link [ 127.813759][ T9147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1930'. [ 128.128320][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1951'. [ 128.137394][ T9169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1951'. [ 128.146469][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1951'. [ 128.158936][ T9169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1951'. [ 128.168033][ T9169] netlink: 'syz.0.1951': attribute type 6 has an invalid length. [ 128.254697][ T9180] netlink: 'syz.3.1943': attribute type 10 has an invalid length. [ 128.267163][ T9180] team0: Port device dummy0 added [ 128.285155][ T9180] netlink: 'syz.3.1943': attribute type 10 has an invalid length. [ 128.305854][ T9180] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 128.330653][ T9180] team0: Failed to send options change via netlink (err -105) [ 128.340051][ T9180] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 128.369391][ T9180] team0: Port device dummy0 removed [ 128.388874][ T9180] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 128.882559][ T9218] FAT-fs (loop5): bogus number of reserved sectors [ 128.889110][ T9218] FAT-fs (loop5): Can't find a valid FAT filesystem [ 129.938866][ T9258] netlink: 'syz.7.1973': attribute type 1 has an invalid length. [ 129.985645][ T9258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.997473][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1973'. [ 130.031666][ T9264] bond1 (unregistering): Released all slaves [ 130.607325][ T9307] netlink: 'syz.2.1993': attribute type 1 has an invalid length. [ 130.621590][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1993'. [ 130.918316][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 130.918333][ T29] audit: type=1400 audit(130.882:2335): avc: denied { write } for pid=9318 comm="syz.0.2001" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 130.970646][ T9323] openvswitch: netlink: Message has 6 unknown bytes. [ 130.977626][ T29] audit: type=1400 audit(130.932:2336): avc: denied { setopt } for pid=9322 comm="syz.2.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 131.058513][ T9325] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1996'. [ 131.170727][ T9330] loop7: detected capacity change from 0 to 1024 [ 131.226332][ T9330] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.260661][ T29] audit: type=1400 audit(131.222:2337): avc: denied { watch } for pid=9329 comm="syz.7.2004" path="/329/file1" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.908155][ T4907] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.967950][ T9351] Set syz1 is full, maxelem 65536 reached [ 131.973805][ T29] audit: type=1400 audit(131.932:2338): avc: denied { getopt } for pid=9352 comm="syz.6.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.995853][ T29] audit: type=1400 audit(131.962:2339): avc: denied { setattr } for pid=9345 comm="syz.2.2010" name="file0" dev="tmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 132.106058][ T9363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2016'. [ 132.149054][ T9367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9367 comm=syz.6.2028 [ 132.191599][ T29] audit: type=1326 audit(132.162:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.2.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c445cec29 code=0x7ffc0000 [ 132.241186][ T29] audit: type=1326 audit(132.192:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.2.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c445cec29 code=0x7ffc0000 [ 132.264341][ T29] audit: type=1326 audit(132.192:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.2.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c445cec29 code=0x7ffc0000 [ 132.287229][ T29] audit: type=1326 audit(132.192:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.2.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c445cec29 code=0x7ffc0000 [ 132.310162][ T29] audit: type=1326 audit(132.202:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.2.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c445cec29 code=0x7ffc0000 [ 132.343516][ T9373] loop7: detected capacity change from 0 to 512 [ 132.350474][ T9373] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 132.378480][ T9373] EXT4-fs (loop7): 1 truncate cleaned up [ 132.384689][ T9373] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.512239][ T9389] netlink: 'syz.6.2022': attribute type 1 has an invalid length. [ 132.633500][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2022'. [ 132.743262][ T9389] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.830913][ T9405] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9405 comm=syz.6.2030 [ 132.843515][ T9405] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9405 comm=syz.6.2030 [ 132.873814][ T4907] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.042454][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2038'. [ 133.483880][ T9433] netlink: 'syz.3.2042': attribute type 1 has an invalid length. [ 133.504123][ T9433] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.518498][ T9433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2042'. [ 133.537968][ T9433] bond1 (unregistering): Released all slaves [ 133.729538][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2052'. [ 133.750206][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2052'. [ 133.961876][ T9478] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.238027][ T9478] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.315713][ T9478] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.373966][ T9490] loop7: detected capacity change from 0 to 1024 [ 134.380712][ T9490] EXT4-fs: Ignoring removed bh option [ 134.393931][ T9490] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 134.413652][ T9478] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.461363][ T9490] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.539002][ T6314] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.573142][ T9495] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9495 comm=syz.2.2066 [ 134.585645][ T9495] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9495 comm=syz.2.2066 [ 134.628683][ T6336] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.654840][ T6336] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.679877][ T6336] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.749061][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2068'. [ 134.774121][ T9500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2068'. [ 134.813930][ T9504] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2071'. [ 134.857872][ T9504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2071'. [ 135.127694][ T9532] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.200350][ T9532] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.233902][ T4907] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.256497][ T9544] loop7: detected capacity change from 0 to 764 [ 135.274643][ T9532] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.415119][ T9532] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.503959][ T6336] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.536760][ T9558] netlink: 'syz.3.2092': attribute type 1 has an invalid length. [ 135.550984][ T6336] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.575204][ T9558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.595183][ T6336] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.617976][ T9558] bond1 (unregistering): Released all slaves [ 135.656506][ T6336] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.813162][ T9571] wg2: entered promiscuous mode [ 135.818109][ T9571] wg2: entered allmulticast mode [ 135.844915][ T9576] tipc: Enabling of bearer rejected, failed to enable media [ 135.925489][ T9581] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.968937][ T9581] FAT-fs (loop7): unable to read boot sector [ 136.053117][ T9590] tipc: Can't bind to reserved service type 2 [ 136.117830][ T9592] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.186604][ T9592] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.253524][ T9592] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.318691][ T9606] tipc: Enabling of bearer rejected, failed to enable media [ 136.329695][ T9592] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.408053][ T6336] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.443554][ T6336] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.479512][ T6336] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.497814][ T6336] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.832832][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 136.832848][ T29] audit: type=1400 audit(136.802:2435): avc: denied { append } for pid=9639 comm="syz.0.2137" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 136.861660][ T29] audit: type=1400 audit(136.802:2436): avc: denied { open } for pid=9639 comm="syz.0.2137" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 136.870942][ T9640] random: crng reseeded on system resumption [ 136.933337][ T29] audit: type=1400 audit(136.902:2437): avc: denied { firmware_load } for pid=6314 comm="kworker/u8:11" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 137.064463][ T29] audit: type=1400 audit(137.032:2438): avc: denied { setopt } for pid=9651 comm="syz.2.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.509889][ T29] audit: type=1326 audit(137.472:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.7.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaee20ec29 code=0x7ffc0000 [ 137.532799][ T29] audit: type=1326 audit(137.472:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.7.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fdaee20ec29 code=0x7ffc0000 [ 137.555856][ T29] audit: type=1326 audit(137.472:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.7.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaee20ec29 code=0x7ffc0000 [ 137.578804][ T29] audit: type=1326 audit(137.472:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.7.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fdaee20ec29 code=0x7ffc0000 [ 137.601779][ T29] audit: type=1326 audit(137.472:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.7.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaee20ec29 code=0x7ffc0000 [ 137.624905][ T29] audit: type=1326 audit(137.472:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.7.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fdaee20ec29 code=0x7ffc0000 [ 137.784636][ T9684] netlink: 'syz.7.2145': attribute type 3 has an invalid length. [ 137.959445][ T9694] __nla_validate_parse: 7 callbacks suppressed [ 137.959459][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2149'. [ 138.312921][ T9706] netlink: 'syz.6.2153': attribute type 4 has an invalid length. [ 138.320868][ T9706] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2153'. [ 138.332773][ T9706] .`: renamed from bond0 (while UP) [ 138.343031][ T9708] netlink: 'syz.2.2155': attribute type 1 has an invalid length. [ 138.385088][ T9708] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.400679][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2155'. [ 138.411602][ T9708] bond1 (unregistering): Released all slaves [ 138.569566][ T9736] bridge: RTM_NEWNEIGH with invalid ether address [ 138.601064][ T9739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2166'. [ 138.699891][ T9743] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 138.736985][ T9751] loop7: detected capacity change from 0 to 512 [ 138.882680][ T9751] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.044502][ T4907] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.086757][ T9775] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2182'. [ 139.100329][ T9776] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 139.120521][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2181'. [ 139.197814][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2182'. [ 139.614158][ T9790] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2187'. [ 139.871349][ T9801] tipc: Enabled bearer , priority 0 [ 139.879806][ T9800] tipc: Resetting bearer [ 139.921456][ T9800] tipc: Disabling bearer [ 139.971493][ T9805] netlink: 'syz.7.2192': attribute type 4 has an invalid length. [ 139.979274][ T9805] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2192'. [ 140.018957][ T9805] .`: renamed from bond0 [ 140.093117][ T9811] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2205'. [ 140.676966][ T9859] team0: entered promiscuous mode [ 140.682071][ T9859] team0: entered allmulticast mode [ 141.202255][ T9900] : (slave dummy0): Releasing backup interface [ 141.215680][ T9900] bond1: (slave bridge1): Removing an active aggregator [ 141.223098][ T9900] bond1: (slave bridge1): Releasing backup interface [ 141.234354][ T9900] bridge1: left promiscuous mode [ 141.239432][ T9900] bridge1: left allmulticast mode [ 141.263239][ T9900] netlink: 'syz.0.2230': attribute type 10 has an invalid length. [ 141.295494][ T9905] netlink: 'syz.2.2231': attribute type 21 has an invalid length. [ 142.273110][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 142.273183][ T29] audit: type=1326 audit(142.242:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9929 comm="syz.6.2244" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f9a992d5be7 code=0x0 [ 142.330059][ T29] audit: type=1326 audit(142.252:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f52064c5be7 code=0x7ffc0000 [ 142.353696][ T29] audit: type=1326 audit(142.252:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f520646ae09 code=0x7ffc0000 [ 142.376457][ T29] audit: type=1326 audit(142.252:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f52064c5be7 code=0x7ffc0000 [ 142.400132][ T29] audit: type=1326 audit(142.252:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f520646ae09 code=0x7ffc0000 [ 142.423603][ T29] audit: type=1326 audit(142.252:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52064cec29 code=0x7ffc0000 [ 142.446429][ T29] audit: type=1326 audit(142.252:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f52064cec29 code=0x7ffc0000 [ 142.470115][ T29] audit: type=1326 audit(142.252:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f52064c5be7 code=0x7ffc0000 [ 142.493562][ T29] audit: type=1326 audit(142.252:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f520646ae09 code=0x7ffc0000 [ 142.516330][ T29] audit: type=1326 audit(142.252:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f52064c5be7 code=0x7ffc0000 [ 143.643244][T10019] bridge: RTM_NEWNEIGH with invalid ether address [ 144.196558][T10052] netlink: 'syz.7.2298': attribute type 10 has an invalid length. [ 144.216403][T10052] dummy0: entered promiscuous mode [ 144.217111][T10054] __nla_validate_parse: 8 callbacks suppressed [ 144.217129][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2299'. [ 144.236567][T10052] team0: Port device dummy0 added [ 144.246049][T10054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.246254][T10052] netlink: 'syz.7.2298': attribute type 10 has an invalid length. [ 144.253482][T10054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.269924][T10054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.277530][T10054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.289596][T10052] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 144.326588][T10052] team0: Failed to send options change via netlink (err -105) [ 144.342355][T10052] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 144.368827][T10052] team0: Port device dummy0 removed [ 144.381817][T10052] dummy0: left promiscuous mode [ 144.387072][T10052] dummy0: entered promiscuous mode [ 144.398689][T10052] .`: (slave dummy0): Enslaving as an active interface with an up link [ 144.510942][T10065] vhci_hcd: invalid port number 255 [ 144.516302][T10065] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 144.585594][T10070] loop7: detected capacity change from 0 to 512 [ 144.614821][T10070] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.702425][ T4907] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.805101][T10113] netlink: 'syz.7.2320': attribute type 10 has an invalid length. [ 145.094473][T10143] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2334'. [ 145.103632][T10143] netlink: 212 bytes leftover after parsing attributes in process `syz.6.2334'. [ 145.771142][T10188] macvtap0: entered allmulticast mode [ 145.776700][T10188] bridge0: entered allmulticast mode [ 145.785318][T10188] bridge0: port 1(macvtap0) entered blocking state [ 145.792035][T10188] bridge0: port 1(macvtap0) entered disabled state [ 145.801168][T10188] bridge0: left allmulticast mode [ 145.884266][T10198] ip6gre1: entered allmulticast mode [ 145.921939][T10203] loop7: detected capacity change from 0 to 1024 [ 145.936994][T10203] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 145.980624][T10203] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2357: Invalid block bitmap block 0 in block_group 0 [ 146.007379][T10203] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.2357: Failed to acquire dquot type 0 [ 146.016161][T10218] ip6gre2: entered allmulticast mode [ 146.029261][T10203] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.2357: Freeing blocks not in datazone - block = 0, count = 4096 [ 146.056068][T10203] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.2357: Invalid inode bitmap blk 0 in block_group 0 [ 146.071998][T10203] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 146.081612][T10203] EXT4-fs (loop7): 1 orphan inode deleted [ 146.089379][ T6312] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 0 [ 146.103186][T10203] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.139826][T10203] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.245239][T10231] tipc: Enabled bearer , priority 0 [ 146.254256][T10230] tipc: Resetting bearer [ 146.276214][T10230] tipc: Disabling bearer [ 146.650403][T10264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2380'. [ 146.771923][T10277] netlink: 'syz.3.2386': attribute type 1 has an invalid length. [ 146.785996][T10277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.814130][T10277] bond1: (slave gretap1): making interface the new active one [ 146.825025][T10277] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 146.847160][T10277] vlan0: entered allmulticast mode [ 146.853097][T10277] bond1: entered allmulticast mode [ 146.858245][T10277] gretap1: entered allmulticast mode [ 146.871676][T10277] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 147.087292][T10296] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2393'. [ 147.402809][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 147.402825][ T29] audit: type=1326 audit(147.372:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.3.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52064cec29 code=0x7ffc0000 [ 147.432076][ T29] audit: type=1326 audit(147.372:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.3.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52064cec29 code=0x7ffc0000 [ 147.455993][ T29] audit: type=1326 audit(147.372:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.3.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f52064cec29 code=0x7ffc0000 [ 147.479068][ T29] audit: type=1326 audit(147.372:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.3.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52064cec29 code=0x7ffc0000 [ 147.502227][ T29] audit: type=1326 audit(147.372:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.3.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52064cec29 code=0x7ffc0000 [ 147.525484][ T29] audit: type=1326 audit(147.372:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.3.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52064cec29 code=0x7ffc0000 [ 147.548474][ T29] audit: type=1326 audit(147.372:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.3.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52064cec29 code=0x7ffc0000 [ 147.571595][ T29] audit: type=1326 audit(147.372:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.3.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52064cec29 code=0x7ffc0000 [ 147.594841][ T29] audit: type=1326 audit(147.372:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.3.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52064cec29 code=0x7ffc0000 [ 147.617841][ T29] audit: type=1326 audit(147.372:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.3.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52064cec29 code=0x7ffc0000 [ 147.657254][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2401'. [ 147.899017][T10343] netlink: 14 bytes leftover after parsing attributes in process `gtp'. [ 147.949695][T10349] dummy0: entered allmulticast mode [ 147.962320][T10349] dummy0: left allmulticast mode [ 148.020508][T10357] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 148.166709][T10373] loop7: detected capacity change from 0 to 512 [ 148.181979][T10373] /dev/loop7: Can't open blockdev [ 148.193386][T10375] netlink: 'syz.6.2425': attribute type 30 has an invalid length. [ 148.325846][T10387] syzkaller0: entered allmulticast mode [ 148.333278][T10387] syzkaller0: entered promiscuous mode [ 148.340522][T10387] syzkaller0 (unregistering): left allmulticast mode [ 148.347637][T10387] syzkaller0 (unregistering): left promiscuous mode [ 148.364818][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2431'. [ 148.568681][T10398] loop7: detected capacity change from 0 to 164 [ 148.578086][T10398] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 148.589132][T10398] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 148.597764][T10398] Symlink component flag not implemented [ 148.604190][T10398] Symlink component flag not implemented [ 148.625660][T10398] Symlink component flag not implemented (7) [ 148.632433][T10398] Symlink component flag not implemented (116) [ 149.079314][T10424] loop7: detected capacity change from 0 to 512 [ 149.087163][T10424] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.099668][T10424] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 149.113552][T10424] EXT4-fs (loop7): 1 truncate cleaned up [ 149.119788][T10424] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.509053][T10424] ================================================================== [ 149.517282][T10424] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 149.525111][T10424] [ 149.527456][T10424] write to 0xffffea0004c5da18 of 8 bytes by task 10433 on cpu 1: [ 149.535184][T10424] __filemap_remove_folio+0x1a5/0x2a0 [ 149.540561][T10424] folio_unmap_invalidate+0x1dd/0x360 [ 149.545962][T10424] invalidate_inode_pages2_range+0x27c/0x3d0 [ 149.551946][T10424] filemap_invalidate_pages+0x16d/0x1a0 [ 149.557496][T10424] kiocb_invalidate_pages+0x6e/0x80 [ 149.562694][T10424] __iomap_dio_rw+0x5d4/0x1250 [ 149.567456][T10424] iomap_dio_rw+0x40/0x90 [ 149.571795][T10424] ext4_file_write_iter+0xad9/0xf00 [ 149.577016][T10424] iter_file_splice_write+0x666/0xa60 [ 149.582400][T10424] direct_splice_actor+0x156/0x2a0 [ 149.587521][T10424] splice_direct_to_actor+0x312/0x680 [ 149.592899][T10424] do_splice_direct+0xda/0x150 [ 149.597664][T10424] do_sendfile+0x380/0x650 [ 149.602087][T10424] __x64_sys_sendfile64+0x105/0x150 [ 149.607286][T10424] x64_sys_call+0x2bb0/0x2ff0 [ 149.611958][T10424] do_syscall_64+0xd2/0x200 [ 149.616473][T10424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.622364][T10424] [ 149.624684][T10424] read to 0xffffea0004c5da18 of 8 bytes by task 10424 on cpu 0: [ 149.632305][T10424] folio_mapping+0xa1/0x120 [ 149.636849][T10424] lru_add+0x80/0x430 [ 149.640842][T10424] folio_batch_move_lru+0x1c2/0x280 [ 149.646046][T10424] lru_add_drain_cpu+0x77/0x250 [ 149.650927][T10424] __folio_batch_release+0x44/0xb0 [ 149.656060][T10424] filemap_splice_read+0x59e/0x740 [ 149.661170][T10424] ext4_file_splice_read+0x8f/0xb0 [ 149.666289][T10424] splice_direct_to_actor+0x26c/0x680 [ 149.671660][T10424] do_splice_direct+0xda/0x150 [ 149.676419][T10424] do_sendfile+0x380/0x650 [ 149.680867][T10424] __x64_sys_sendfile64+0x105/0x150 [ 149.686157][T10424] x64_sys_call+0x2bb0/0x2ff0 [ 149.690835][T10424] do_syscall_64+0xd2/0x200 [ 149.695348][T10424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.701246][T10424] [ 149.703562][T10424] value changed: 0xffff88811959f6a0 -> 0x0000000000000000 [ 149.710678][T10424] [ 149.712996][T10424] Reported by Kernel Concurrency Sanitizer on: [ 149.719143][T10424] CPU: 0 UID: 0 PID: 10424 Comm: syz.7.2444 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.728967][T10424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.739025][T10424] ================================================================== [ 150.072755][ T4907] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.