last executing test programs: 6m26.170015692s ago: executing program 32 (id=1224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x206b}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x8000, 0x0, 0x0, 0x2, 0x0, @broadcast, @loopback}, {0x17, 0x7c, 0x0, @multicast1}}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 6m23.612422978s ago: executing program 33 (id=1293): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) 6m22.171294859s ago: executing program 34 (id=1333): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000a00)={[{@min_batch_time}, {@inlinecrypt}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0x1, 0x7ac, &(0x7f0000001640)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0, 0x0, 0xbed}, 0x18) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) getuid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) 6m21.778141073s ago: executing program 35 (id=1340): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x2004, 0x7fc}) 6m21.603882086s ago: executing program 36 (id=1343): r0 = socket(0x40000000015, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xa77}, 0x1c) 6m14.515781305s ago: executing program 37 (id=1453): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0']) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x22}, 0x18) mknodat$null(r1, &(0x7f0000000240)='./file0\x00', 0x2, 0x103) 5m24.278121186s ago: executing program 38 (id=2542): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sync() 3m5.389713724s ago: executing program 39 (id=6790): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x85}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m41.520631067s ago: executing program 40 (id=7866): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x20000000000000b9, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2m4.106938549s ago: executing program 4 (id=9274): socket$qrtr(0x2a, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r0 = syz_io_uring_setup(0x52e, &(0x7f00000000c0)={0x0, 0x3723, 0x0, 0x800, 0x37c}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 2m4.05542722s ago: executing program 4 (id=9277): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2m3.866343722s ago: executing program 4 (id=9284): r0 = socket$inet6(0xa, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x1a400000}, 0x18) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) 2m3.822443253s ago: executing program 4 (id=9286): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2m3.678587025s ago: executing program 4 (id=9291): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 2m3.446166068s ago: executing program 4 (id=9298): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 2m3.390719969s ago: executing program 41 (id=9298): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 1m22.941573123s ago: executing program 8 (id=10874): creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x194) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000003c0)=""/19, &(0x7f0000000240)=0x13) 1m22.941305853s ago: executing program 8 (id=10875): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000900)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x48}}, 0x0) 1m22.878465044s ago: executing program 8 (id=10878): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1m22.786689556s ago: executing program 8 (id=10880): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') 1m22.702173227s ago: executing program 8 (id=10881): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1m22.191551314s ago: executing program 8 (id=10904): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000640)="be", 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x6044}, 0x6) 1m22.144576094s ago: executing program 42 (id=10904): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000640)="be", 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x6044}, 0x6) 1m13.827935131s ago: executing program 5 (id=11237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000380)={'\x00', 0x7ff, 0x530, 0xc, 0xfffffffffffffffa, 0xfe, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) 1m13.787250771s ago: executing program 5 (id=11239): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m13.660885913s ago: executing program 5 (id=11242): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0xffff, &(0x7f0000001080)) 1m13.595297334s ago: executing program 5 (id=11244): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') 1m13.445061056s ago: executing program 5 (id=11255): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0) umount2(&(0x7f0000000100)='./file0/../file0\x00', 0x9) 1m13.420913536s ago: executing program 5 (id=11257): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4200, 0x1) write$9p(r0, &(0x7f0000001400)="3b27a4", 0x3) sendfile(r0, r1, 0x0, 0x7ffff000) 1m13.399759946s ago: executing program 43 (id=11257): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4200, 0x1) write$9p(r0, &(0x7f0000001400)="3b27a4", 0x3) sendfile(r0, r1, 0x0, 0x7ffff000) 30.624722223s ago: executing program 9 (id=12581): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x47c, &(0x7f0000000a80)="$eJzs3M1vFOUfAPDvTLulwI9fK+ILCFJFI/GlpeVFDl40mnDQxEQPGE+1LaRSqKE1EUK0esCjIfFu/C+MJ70Y9aKJV70bEmK4gHpZMzsztLS77ZZud4H9fJLZfZ6Z2X2e78w8O8/Ms7sBdK2h7CGJ+F9E/B4RA3n29hWG8qeb1y9N/H390kQS1epbfyW19W5cvzRRrlq+bnueqVaL/JY65V5+N2J8ZmbqfJEfmT/7wcjchYsvTJ8dPz11eurc2PHjRw7v6zs2drQlcWZx3djz8eze3SfeufLGxMkr7/2UpJHHHcviaJWhfOvW9XSrC+uwHUvSSW/22F/k9v+yuKTekUAn9UREtrsqtfY/ED2x9daygXjts45WDthU1Wq1usqn8kIVuI8l0ekaAJ1Rnuiz699yalPX465w7eX8AiiL+2Yx5Ut6I80T+yvLrm9baSgiTi7881U2xSbdhwAAWOq7rP/zfL3+XxoP54m+7OH/xRjKYEQ8EBE7I+LBiNgVEQ9F1NZ9JCIeXWf5y0dIVvZ/0qt3HFwTsv7fS8XY1u39v7RcZbCnyO2oxV9JTk3PTB0qtsnBqGw5NZ1Mja5Sxvev/vZFo2VL+3/ZlJVf9gWLelztXXaDbnJ8fnwjMS917dOIPb314k9q4wJRjOvtjog9d1jG9LO9DZetHf8qGr9t06pfRzyT7/+FWBZ/KWk4Pjn64rGxoyP9MTN1aKQ8Klb6+dfLbzYqf0Pxt0C2/7fVPf5vxT+Y9EfMXbh4pjZeO7f+Mi7/8XnDa5p1Hv8ndhTHf1/ydm1GX7Hgo/H5+fOjEX3J6yvnjy2+W5kv18/iP3igfvvfGYtb4rGI2BsR+yLi8eyisKj7ExHxZEQcWCX+H1956v31x9+esdIs/sm19n8s3f/rT/Sc+eHbtePvj4hG+/9ILXWwmNPM51+zFdzItgMAAIB7Rf4d+CQdXkwnw8P5d/h3xbZ0ZnZu/rlTsx+em8y/Kz8YlbS80zWw5H7oaHFvuMyPLcsfLu4bf9mztZYfnpidmex08NDltq9o/2matf/Mnz2drh2w6Vowjgbco7R/6F7aP3SnZM32X2lbXYD2c/6H7lWv/X/ScO3hbza1MkBbOf9D92qi/S/kT417BcC9yfkfupf2D12p4W/j0w395L/tiX+L/zO8W+pz/ycivSuqcf8nepv+M4tGicrKtlwdyNt/NmdL3Vd1+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNf4LAAD///R05PQ=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) getdents64(r1, &(0x7f00000002c0)=""/191, 0xbf) 30.400430016s ago: executing program 9 (id=12592): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000200), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 29.635581577s ago: executing program 9 (id=12614): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 29.570808127s ago: executing program 9 (id=12609): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x891018, 0x0) 29.525415478s ago: executing program 9 (id=12610): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 28.908116077s ago: executing program 9 (id=12628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 28.886134177s ago: executing program 44 (id=12628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="140000001000010000000000000000030000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a3200000000240b0000060a010400000000000000000100000008000b4000000000fc0a048028000180080001006c6f67001c0002800e00024073797a6b616c6c65720000000800054000000008d00a01800e000100696d6d656469617465000000bc0a0280640002804c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a31000000000800034000009c920900020073797a300000000008000180ffffffff14000280080003400000000808000180fffffffb0800014000000002080001400000000b500002804b000100fa62d7ba9ceeacf9aa4f832b78f35731f355d63e192a72aef5e68a05d1b806151b6bd1e2d74abafd383790ad363fdc1b7766748630b48f9beefdb33c86d5835a470b5ffd20d7e9006c0102805c00028008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffd0900020073797a310000000008000180fffffffc0800034000000e5628000280080003400000000608000340000000070900020073797a320000000008000180fffffffe540002800900020073797a320000000008000180fffffffe0800034000000000080003400000000008000340000000090900020073797a310000000008000180fffffffe080003400000800108000180fffffffd8e000100818ce881ff18470752e86442e8b77ddcfc7a4c87f05cd36147be26c85cc854cc117db1906007a5a8c298f4724c8c743d46ec7f3ba478d9dfb10bbe9e4fdfc2188d62db9bb1364fed383fe0b0c3fbbab83959470cb0ffb14765c32f10b54d99531d04caaf264214997543a1c63637d9a3a20b7ce9312e545626eb375c88462c198f35cf8a11616de4fa0c000098020280eb00010099c8e680eb4d0e7f78e1fb62226ae541d997c8cb51c5ebd0bb7e2730b61310dcd7525807288a7ad8c00f6aa230a1d1b876ddb0e188384e7c79cd8af94a02451a04d8f116bde38077da45650d82bdd1767b03e3f35bc4a5769e659d8cdb6d9d9d717c78b50f6b3ac899b07a9eaf2c989654de7d6609299bad01ca1f3fa8b6229a6c69627a07f627880e902231b20368f3ae64fd12fc37afeb95f14a4dc3d0bc5f6e2afd0fc8ef6982054cffa703ee1376654019ad6d2add9052c5d2f2e0ba3318f931b2c5f2dcce5cbca6093c64d23b64e2f2061da3dd5983644280de22d592b63b5d7f6b571beb005400010041bbc64da6bacaad1bebec23352accccbca40d6ba87943f82df945bf4ccc5250a0c2b2cb13793380f424b280bfb960885af6df4afa26efa8fcd7a1243389ef3fcf1d709f775a9cd1dfb2b84fd03e5d70f800010001950b7c0ec30534e476b721ba6e82d03078fe63b683918ecbbb9c339c8cdd63689339ac43acd5973f4aac8720a98d18e13b98e11e291f3f3621ed29c717639f84bdd28810da6ae30538775f15e00133741e9de3f96f69ab363752fa962b3c71041ba1e463a91d782a968d9febb648b66e71a6827c53b3be014b785f61c4fd46fef00658f64cdd465edb61ba4c5f00849b2935c485da99a38489ecc29837433ac5446c3922d73153fd8fb2368a5ce4201760ca6778f570b7fcb38be633a02d57c5884b6bcbaf3bc28ca7686edb5d59e1b823a8f0f5ff788625995d51c16413783c6290a9714bd4dcbd2a388139f3e46f69916f335c0002800900020073797a3000000000080003400000000908000180000000000900020073797a3000000000080003400000000808000180fffffffd080003400000000408000340fffffff908000180fffffffb0800034000000003a80002801c000280080003400000020008000340fffffff508000340000000001400028008000340000000050800034000000007720001001c2cce526d2ee30fb33f426450278cb35ac06b1cef15fefc26b5c17a8c9251bed316fccb5588f2e071fc355537fcf458cf14217f16ce4c12a4b559f3e807c94c6cc4f418baebc6024b74b9dbc5ef66dbbe91812ea247db80670c101ed494f105ad9c09b4eaf8d5c133b46a311c1a00001c0302802000028008000180fffffffc0900020073797a320000000008000340000000035c00028008000180fffffffc08000180fffffffc08000180fffffffb0900020073797a300000000008000340000000060900020073797a30000000000900020073797a31000000000900020073797a310000000008000180fffffffbf6000100330e5af714359ac9da33381a13071148dbe4293800e6be0290efbb549850cda132ca27a55553fd77c3067504c4596086f4001f53d49e8111395ebccb983c6b04735a58ab2617dfc62123b09c8dc5a47154667414dc28e8369829764b2e3cc23303a882890bad6d3a70d9e15701ec8c4c15a46d38c9ed6bc8658f8a45a02083f563324a27c649bab7cbcb485c289bd8df0a040128df6891ab48095977e0463f8e3ed7ba6df976ee30768954dfeb3f08c942b2c9384aa0b78baf92ecf5e4d73788afb1bc5a8f7c4b454897cd8bcac7f19cdd949fac66756da3b9311e13362eee317df853f6bc7e4638eb145a1484d3780e09b50000c8000100d5c1e4159bf770e02e6e1ebe911d7513709588175328d2e11f2ebf3f6967c49bedcb2a5459a45272bb8084e3bb55ea7a80166d97ec16457ed7d2a834d9aafdb2a54110ddc7975eaeda4f897ec7d533c27df0ce5ff92cfedadc67fff850ee5d07822d72b27af229d17ad2f8d802ae40d98f373e348a04b4f0270c71f82319de3a0331f165204896e0e448cf7ea0f8eb32a312fda6716f72f0234742fe6708ad0adf587ea21d94b8c8f5080028dda1e21d3d9ac82d8edd12941631b72b692ecc262d6ae12393000100c56deda494a09379df59bad8f0f17376b307ce49571034af728b1c4bf694e3b91406b976944238ab36ccaf40e3d92952ba87aa27af6353a82868c9508577a1b6a349fce75b3e4952b04b9527f496b5555e6db110dec07430b01446635eff12f136dbcb54fd4dc90b02e1bc6488ed74efd9eeb1b6de6e2a234f6c323df5c28a0352d03b34ee4f64ab614078125aa3cc0048000280080003400000000c08000340000000010900020073797a310000000008000180fffffffd0800034000008000080003400000dc5b08000180fffffffc08000180fffffffb2c0202804b000100cece2d8ff50c68c1060c2e691ddc50c6d87b46b4e5f6695010163d98bac2d9d7693cff0ec1e2107f58d3c305c78e5a596df92f1dbe80793dce5424be9e7951890023db7d0b9b2700e5000100f46e4b21dd4b92221713eece21b0e3bfb3fe995725eca78713a8d11ac82a6aefeeeab4720bd136479523ccafa34771afedeafc55275842bb7adb37ff3c93b19d9d5139f8b67ee81e380faa9506e6c8e5956cf7efc9828438d340aa4bfe771769c6ddb2f8c31049c1fc37e8f28812ea0aadd0caa7e32f6bb4b2b7a4473e5fa876c87bf285a503660ea12a0cfff6863a87c64ea83c31e737e278edcad77cb964828c7049d335e25156fd4d1c2faada6a8363794fe487155fbfd7c2e1b8504d4a744357734f51fca0426ffe929280df27411f8a90a067b285e970fa1e403722ae91dd000000f400010073e22ba6603d1c92836887468b100c2dc430efeb2ef19c66bd0582fe94df7b5a20292fdfbd2009980dbf9651685f7713bfb0f42583e452670f29e2cabf848fcdcb7a2067f0b257efd7dc927e540584b08f026e14be231afa797e36410d8ad6cbced8c5d2cce2f5a8b75713e57b3161b5b4ce78f283bf59a04f90bc1c5a4371abed0124c621ecb51b6166ad39f14216c09456232b7ea8dd7058bbbeae8b1c13df7ffa1515a359309683421d783f4fb00547cb06b3f974e65f28397c2c16675436a414b6e28d61800c35bdc05f9837e14491ce0fa7c0fbf6f61dd8f7eceac62373ed913de212a188ad5fa12d0eab8a0b440900010073797a30"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 21.081934526s ago: executing program 2 (id=12825): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 20.876801509s ago: executing program 2 (id=12834): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100)) 20.822941219s ago: executing program 2 (id=12838): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, 0x3}, 0x1c) shutdown(r0, 0x1) 20.711674731s ago: executing program 2 (id=12840): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1200000, &(0x7f0000000400)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@mblk_io_submit}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) unlink(&(0x7f0000000180)='./file1\x00') 20.536301073s ago: executing program 2 (id=12846): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) 20.413860345s ago: executing program 2 (id=12850): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 20.413499825s ago: executing program 45 (id=12850): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.682687556s ago: executing program 1 (id=13348): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r2}) keyctl$link(0x8, r2, r1) rmdir(0x0) 1.666515677s ago: executing program 1 (id=13351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8943, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.524141279s ago: executing program 1 (id=13356): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x0) getdents64(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) 920.489107ms ago: executing program 1 (id=13364): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write(r0, &(0x7f0000000140)="24000000010006", 0x7) 840.395428ms ago: executing program 0 (id=13369): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1000000000000}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) 812.520019ms ago: executing program 3 (id=13371): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x3f00, "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"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b000000000000000000000000030000000023b5000000000001"]}, 0x99) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 760.639799ms ago: executing program 1 (id=13374): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x4cb, @loopback, 0x7fffffff, 0x4}, 0x20) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) 760.06903ms ago: executing program 3 (id=13375): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)='%pK \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f00000009c0)={r0, r1}, 0xc) 730.55609ms ago: executing program 1 (id=13376): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_ignore}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3b00, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 719.98993ms ago: executing program 3 (id=13378): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7, @void, @value}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 677.265611ms ago: executing program 7 (id=13380): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x1ff00000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 570.063762ms ago: executing program 7 (id=13382): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000020a01"], 0xf0}}, 0x0) 563.605222ms ago: executing program 0 (id=13383): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) semtimedop(0x0, 0x0, 0x0, 0x0) 547.428082ms ago: executing program 3 (id=13385): write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904ff", 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000001b00009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prlimit64(0x0, 0x2, &(0x7f0000000000)={0x40000004000000, 0x800000008000000}, 0x0) brk(0x400000ffc000) 546.979852ms ago: executing program 7 (id=13386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 475.882703ms ago: executing program 3 (id=13387): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$eJzs3U9rI2UcB/Bf2vTv2qbquroL4oNeFCFue/DkpcguiAWl2gUVhFmbamialCYUIuLWkyfBlyHq0ZsgvoFevHgWBJFePO5BHGmT1aZJu7ptU5HP5zIPzzzfeWYyzMCE+TF7L32+sb7WLK9lrRgpFKK4ORbFuylSjMRodOzEc7d+/OnJN956+9XFpaUbyyndXHxz/sWU0uxT373z0ddPf9+6dOub2W8nYnfu3b3fFn7evbJ7de+Pr6LaTNVmqjdaKUu3G41WdrtWSavV5no5pddrlaxZSdV6s7LVs36t1tjcbKesvjozvblVaTZTVm+n9Uo7tQqptdVO2ftZtZ7K5XKamQ5OY+XLu3meR+T5WIxHnuf5VEzHpXgoZmI2SjEXD8cj8WhcjsfiSjweT8TVg1EXvd8AAAAAAAAAAAAAAAAAAADw/3Kf+v+C+n8AAAAAAAAAAAAAAAAAAAA4f0fr/4sRvv8PAAAAAAAAAAAAAAAAAAAAQ3af7/8fqf9/Xv0/AAAAAAAAAAAAAAAAAAAAnIfJzmI5pcmIjU+3V7ZXOstO/+JaVKMWlbgepfg9Dqr/Ozrtm68s3bieDszFCxt3uvk72yujvfn5sVLMFQbm5zv51JufiOnD+YUoxeXB8y8MzE/Gs8/s5z/p5MtRih/ei0bUYjWi0D36g/zH8ym9/NrSVG/+2v64Y42e82kBAACAs1ROf+l/ft/pDhq4vrOq+3yeuiMLJ/w/cOT5vBjXihd11NzTbH+4ntVqla0HbIwfv53x0225r1GIiCwO98xO/7K8P/mZTfGgjdGhTjp28phTnNMo/gd+zDNo/PrFoZ7JGO7sI91LIqvt3z//WSp28vxcd2zgxThxUur4e0ZhCPclhuPvk37RewIAAAAAAAAAAMC/MfDtv6mI6Hsf8IO+nnuvh/fG+7d8/OyfDeEIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD///ME0UM=") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x188) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r2, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) 475.321283ms ago: executing program 6 (id=13388): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private0}, 0x1c) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x3500, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/27, 0x1b}, 0xa10}], 0x1, 0x2, 0x0) 466.327923ms ago: executing program 0 (id=13389): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 418.117084ms ago: executing program 6 (id=13390): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x6000000) 373.919085ms ago: executing program 7 (id=13391): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x1) 318.492726ms ago: executing program 7 (id=13392): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59bb22bd70000000200011"], 0x28}}, 0x0) 316.952276ms ago: executing program 6 (id=13393): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 262.050306ms ago: executing program 0 (id=13394): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 252.459037ms ago: executing program 3 (id=13395): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41101}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 220.613597ms ago: executing program 6 (id=13396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000004000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000000, 0x1}, 0x8002, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001200326a03030000001b000000000000000010002b0001000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 211.203527ms ago: executing program 7 (id=13397): bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x1) 144.682178ms ago: executing program 6 (id=13398): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x141042, 0x80) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 144.112498ms ago: executing program 6 (id=13399): socket(0xa, 0x3, 0x3a) socket$inet_dccp(0x2, 0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") socket$nl_route(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 25.25428ms ago: executing program 0 (id=13400): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0xe9c) 0s ago: executing program 0 (id=13401): prctl$PR_SET_NAME(0xf, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f0000000340)='%pS \x00'}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x209082, &(0x7f0000000a40)={[{@i_version}, {@nomblk_io_submit}, {@data_err_ignore}]}, 0x84, 0x51b, &(0x7f0000000340)="$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") kernel console output (not intermixed with test programs): item tag 0x0 [ 404.331842][T31713] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 404.339279][T31713] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 404.346907][T31713] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 404.355453][T11679] lo speed is unknown, defaulting to 1000 [ 404.394824][T11691] xt_hashlimit: size too large, truncated to 1048576 [ 404.415031][T31713] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 404.422663][T31713] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 404.430214][T31713] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 404.437811][T31713] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 404.445339][T31713] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 404.452933][T31713] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 404.460668][T31713] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 404.468396][T31713] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 404.475924][T31713] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 404.483435][T31713] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 404.491139][T31713] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 404.498653][T31713] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 404.506150][T31713] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 404.513681][T31713] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 404.521232][T31713] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 404.598941][T31713] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 404.801579][T11728] serio: Serial port ptm1 [ 404.903780][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 404.911313][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 404.918870][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 404.926685][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 404.934304][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 404.941894][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 404.949579][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 404.957273][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 404.964735][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 404.972164][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 404.979727][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 404.987170][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 404.994762][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.002329][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.009896][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.017348][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.024916][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.032416][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.039970][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.047440][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.055205][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.062744][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.070264][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.077933][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.085420][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.093199][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.100634][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.108093][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.116045][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.123630][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.131176][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.138693][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.146312][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.153841][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.161303][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.168789][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.176625][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.184331][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.188542][T11745] loop7: detected capacity change from 0 to 128 [ 405.191888][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.205558][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.213102][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.220573][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.228294][T16179] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 405.238360][T16179] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 405.273501][T11756] loop7: detected capacity change from 0 to 512 [ 405.316109][T11763] bridge_slave_0: left allmulticast mode [ 405.322037][T11763] bridge_slave_0: left promiscuous mode [ 405.327867][T11763] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.339599][T11765] loop9: detected capacity change from 0 to 256 [ 405.351781][T11763] bridge_slave_1: left allmulticast mode [ 405.357761][T11763] bridge_slave_1: left promiscuous mode [ 405.363853][T11763] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.371947][T11765] msdos: Bad value for 'gid' [ 405.376572][T11765] msdos: Bad value for 'gid' [ 405.377582][T11756] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.408146][T11756] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 405.421935][T11763] bond0: (slave bond_slave_0): Releasing backup interface [ 405.433772][T11756] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.11986: corrupted inode contents [ 405.446351][T11763] bond0: (slave bond_slave_1): Releasing backup interface [ 405.461392][T11756] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #2: comm syz.7.11986: mark_inode_dirty error [ 405.478095][T11763] team0: Port device team_slave_0 removed [ 405.478487][T11756] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.11986: corrupted inode contents [ 405.496231][T11756] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.11986: mark_inode_dirty error [ 405.498588][T11763] team0: Port device team_slave_1 removed [ 405.514682][T11763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.526964][T11763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.533673][T11756] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.11986: corrupted inode contents [ 405.549098][T11763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.555611][T11756] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #2: comm syz.7.11986: mark_inode_dirty error [ 405.556624][T11763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.575689][T11756] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.11986: corrupted inode contents [ 405.617305][T11756] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.11986: corrupted inode contents [ 405.622537][T11763] batadv1: left allmulticast mode [ 405.631695][T11756] EXT4-fs error (device loop7): add_dirent_to_buf:2155: inode #2: comm syz.7.11986: mark_inode_dirty error [ 405.634298][T11763] batadv1: left promiscuous mode [ 405.651238][T11763] bridge0: port 3(batadv1) entered disabled state [ 405.694947][T11756] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.11986: corrupted inode contents [ 405.775409][ T8980] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.842020][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12001'. [ 405.851893][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12001'. [ 405.894372][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12001'. [ 405.951029][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12001'. [ 405.960576][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12001'. [ 405.993496][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12001'. [ 406.032444][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12001'. [ 406.041505][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12001'. [ 406.053635][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12001'. [ 406.099525][T11816] loop7: detected capacity change from 0 to 512 [ 406.106827][T11816] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 406.116168][T11820] loop6: detected capacity change from 0 to 128 [ 406.133278][T11816] EXT4-fs (loop7): invalid journal inode [ 406.146955][T11816] EXT4-fs (loop7): can't get journal size [ 406.174056][T11816] EXT4-fs (loop7): 1 truncate cleaned up [ 406.207207][T11816] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.210371][T11835] bridge_slave_0: left allmulticast mode [ 406.222318][T11836] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12020'. [ 406.225067][T11835] bridge_slave_0: left promiscuous mode [ 406.240158][T11835] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.277423][T11835] bridge_slave_1: left allmulticast mode [ 406.283137][T11835] bridge_slave_1: left promiscuous mode [ 406.288976][T11835] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.315019][ T8980] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.335811][T11835] bond0: (slave bond_slave_0): Releasing backup interface [ 406.350092][T11835] bond0: (slave bond_slave_1): Releasing backup interface [ 406.361982][T11835] team0: Port device team_slave_0 removed [ 406.370339][T11835] team0: Port device team_slave_1 removed [ 406.376657][T11835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.385652][T11835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.394481][T11835] bond2: left allmulticast mode [ 406.399584][T11835] bond2: left promiscuous mode [ 406.404693][T11835] bridge0: port 3(bond2) entered disabled state [ 406.467090][T11836] netlink: 'syz.9.12020': attribute type 1 has an invalid length. [ 406.475121][T11836] netlink: 'syz.9.12020': attribute type 2 has an invalid length. [ 406.612077][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 406.612094][ T29] audit: type=1400 audit(2000000094.600:12417): avc: denied { bind } for pid=11853 comm="syz.9.12017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 406.661619][ T29] audit: type=1400 audit(2000000094.630:12418): avc: denied { listen } for pid=11853 comm="syz.9.12017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 406.733380][ T29] audit: type=1400 audit(2000000094.720:12419): avc: denied { mounton } for pid=11859 comm="syz.7.12018" path="/proc/313/task" dev="proc" ino=108968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 406.831023][ T29] audit: type=1326 audit(2000000094.820:12420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.6.12024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16aece969 code=0x7ffc0000 [ 406.854801][ T29] audit: type=1326 audit(2000000094.820:12421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.6.12024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16aece969 code=0x7ffc0000 [ 406.878803][ T29] audit: type=1326 audit(2000000094.820:12422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.6.12024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc16aece969 code=0x7ffc0000 [ 406.902978][ T29] audit: type=1326 audit(2000000094.820:12423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.6.12024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16aece969 code=0x7ffc0000 [ 406.927262][ T29] audit: type=1326 audit(2000000094.820:12424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.6.12024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fc16aece969 code=0x7ffc0000 [ 406.951290][ T29] audit: type=1326 audit(2000000094.820:12425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.6.12024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16aece969 code=0x7ffc0000 [ 407.059763][T11883] loop6: detected capacity change from 0 to 1024 [ 407.069859][T11883] EXT4-fs: Ignoring removed nobh option [ 407.075772][T11883] EXT4-fs: Ignoring removed bh option [ 407.079913][T11886] netlink: 'syz.9.12029': attribute type 1 has an invalid length. [ 407.089176][T11886] netlink: 'syz.9.12029': attribute type 4 has an invalid length. [ 407.120266][T11883] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.143472][T11883] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.12028: Allocating blocks 385-513 which overlap fs metadata [ 407.163003][T11883] EXT4-fs (loop6): pa ffff888105fb6e70: logic 16, phys. 129, len 24 [ 407.171328][T11883] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 407.182011][T11883] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 407.194334][T11883] EXT4-fs (loop6): This should not happen!! Data will be lost [ 407.194334][T11883] [ 407.204330][T11883] EXT4-fs (loop6): Total free blocks count 0 [ 407.210443][T11883] EXT4-fs (loop6): Free/Dirty block details [ 407.216431][T11883] EXT4-fs (loop6): free_blocks=128 [ 407.221802][T11883] EXT4-fs (loop6): dirty_blocks=0 [ 407.226869][T11883] EXT4-fs (loop6): Block reservation details [ 407.232869][T11883] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 407.249543][T11894] bridge_slave_0: left allmulticast mode [ 407.255406][T11894] bridge_slave_0: left promiscuous mode [ 407.261601][T11894] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.272203][T11894] bridge_slave_1: left allmulticast mode [ 407.278054][T11894] bridge_slave_1: left promiscuous mode [ 407.283777][T11894] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.296701][T11894] bond0: (slave bond_slave_0): Releasing backup interface [ 407.308596][T11894] bond0: (slave bond_slave_1): Releasing backup interface [ 407.323188][T11894] team0: Port device team_slave_0 removed [ 407.337243][T11894] team0: Port device team_slave_1 removed [ 407.344683][T11894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.352608][T11894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.366419][T11894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.374202][T11894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.409723][T16115] syz2: Port: 1 Link DOWN [ 407.481714][ T29] audit: type=1400 audit(2000000095.470:12426): avc: denied { name_bind } for pid=11922 comm="syz.9.12041" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 408.351752][T11933] loop2: detected capacity change from 0 to 1024 [ 408.377749][T11933] EXT4-fs: Ignoring removed nobh option [ 408.383389][T11933] EXT4-fs: Ignoring removed bh option [ 408.442337][T11932] lo speed is unknown, defaulting to 1000 [ 408.452887][T11933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.491724][T11933] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.12045: Allocating blocks 385-513 which overlap fs metadata [ 408.533214][T11933] EXT4-fs (loop2): pa ffff88810530ad20: logic 16, phys. 129, len 24 [ 408.541359][T11933] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 408.556943][T11933] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 408.569453][T11933] EXT4-fs (loop2): This should not happen!! Data will be lost [ 408.569453][T11933] [ 408.579138][T11933] EXT4-fs (loop2): Total free blocks count 0 [ 408.585215][T11933] EXT4-fs (loop2): Free/Dirty block details [ 408.591260][T11933] EXT4-fs (loop2): free_blocks=128 [ 408.596392][T11933] EXT4-fs (loop2): dirty_blocks=0 [ 408.601659][T11933] EXT4-fs (loop2): Block reservation details [ 408.607875][T11933] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 408.875493][T11983] loop2: detected capacity change from 0 to 8192 [ 408.887182][T11983] vfat: Unknown parameter '&ó #ó0»!T—.yÕ„¯÷—Ž£ ÎÆ°*Æì ì#Ë' [ 409.259212][T11992] syz_tun: entered promiscuous mode [ 409.286619][T11992] netlink: 'syz.3.12055': attribute type 13 has an invalid length. [ 409.295644][T11992] syz_tun: refused to change device tx_queue_len [ 409.302114][T11992] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 409.378471][T11995] bond0: (slave bond_slave_0): Releasing backup interface [ 409.395589][T11995] bond0: (slave bond_slave_1): Releasing backup interface [ 409.404959][T11995] team0: Port device team_slave_0 removed [ 409.414784][T11995] team0: Port device team_slave_1 removed [ 409.436725][T11995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.472466][T11995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.542476][T11995] team0: Port device geneve1 removed [ 409.563500][T11995] bond1: (slave batadv1): Releasing backup interface [ 409.583159][T11995] batadv1: left promiscuous mode [ 409.591592][T11995] batadv2: left allmulticast mode [ 409.596715][T11995] batadv2: left promiscuous mode [ 409.602014][T11995] bridge0: port 1(batadv2) entered disabled state [ 409.749884][T12034] netlink: 'syz.6.12075': attribute type 30 has an invalid length. [ 409.797126][T12034] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.805479][T12034] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.813862][T12034] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.822276][T12034] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.841792][T12034] netlink: 'syz.6.12075': attribute type 30 has an invalid length. [ 409.939872][T12060] loop6: detected capacity change from 0 to 512 [ 410.000644][T12060] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 410.020050][T12060] ext4 filesystem being mounted at /2198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 410.079607][T12084] netlink: 'syz.3.12094': attribute type 30 has an invalid length. [ 410.099361][T12086] loop7: detected capacity change from 0 to 512 [ 410.119766][T12084] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.128360][T12084] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.136586][T12084] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.144959][T12084] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.146175][T12086] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 410.166443][T12084] netlink: 'syz.3.12094': attribute type 30 has an invalid length. [ 410.167388][T12086] EXT4-fs (loop7): 1 truncate cleaned up [ 410.190024][T12086] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.219218][ T6447] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 410.238586][T12086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.338480][T12120] netlink: 'syz.6.12101': attribute type 13 has an invalid length. [ 410.369472][T12126] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 410.440094][T12138] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 410.553202][T12155] loop7: detected capacity change from 0 to 128 [ 410.568930][T12158] netem: change failed [ 410.589956][T12155] syz.7.12114: attempt to access beyond end of device [ 410.589956][T12155] loop7: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 410.596253][T12163] loop2: detected capacity change from 0 to 512 [ 410.604624][T12155] Buffer I/O error on dev loop7, logical block 2065, async page read [ 410.624111][T12155] syz.7.12114: attempt to access beyond end of device [ 410.624111][T12155] loop7: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 410.637766][T12155] Buffer I/O error on dev loop7, logical block 2066, async page read [ 410.646155][T12155] syz.7.12114: attempt to access beyond end of device [ 410.646155][T12155] loop7: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 410.660239][T12155] Buffer I/O error on dev loop7, logical block 2067, async page read [ 410.661776][T12163] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.12117: corrupted in-inode xattr: invalid ea_ino [ 410.685426][T12155] syz.7.12114: attempt to access beyond end of device [ 410.685426][T12155] loop7: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 410.685977][T12163] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.12117: couldn't read orphan inode 15 (err -117) [ 410.698952][T12155] Buffer I/O error on dev loop7, logical block 2068, async page read [ 410.715811][T12163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.719306][T12155] syz.7.12114: attempt to access beyond end of device [ 410.719306][T12155] loop7: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 410.748891][T12155] Buffer I/O error on dev loop7, logical block 2069, async page read [ 410.757315][T12155] syz.7.12114: attempt to access beyond end of device [ 410.757315][T12155] loop7: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 410.770866][T12155] Buffer I/O error on dev loop7, logical block 2070, async page read [ 410.794742][T12155] syz.7.12114: attempt to access beyond end of device [ 410.794742][T12155] loop7: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 410.808171][T12155] Buffer I/O error on dev loop7, logical block 2071, async page read [ 410.818949][ T7715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.857293][T12155] syz.7.12114: attempt to access beyond end of device [ 410.857293][T12155] loop7: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 410.871030][T12155] Buffer I/O error on dev loop7, logical block 2072, async page read [ 410.883754][T12155] syz.7.12114: attempt to access beyond end of device [ 410.883754][T12155] loop7: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 410.897408][T12155] Buffer I/O error on dev loop7, logical block 2065, async page read [ 410.917980][T12155] syz.7.12114: attempt to access beyond end of device [ 410.917980][T12155] loop7: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 410.931424][T12155] Buffer I/O error on dev loop7, logical block 2066, async page read [ 410.958568][T12183] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 411.144502][T12219] loop6: detected capacity change from 0 to 128 [ 411.155582][T12219] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 411.171492][T12219] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 411.272851][T12233] lo speed is unknown, defaulting to 1000 [ 411.805624][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 411.805643][ T29] audit: type=1400 audit(2000000099.790:12588): avc: denied { read write } for pid=12285 comm="syz.6.12153" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 411.839003][T12288] __nla_validate_parse: 11 callbacks suppressed [ 411.839025][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12152'. [ 411.854422][T12288] netlink: 'syz.9.12152': attribute type 30 has an invalid length. [ 411.881323][ T29] audit: type=1400 audit(2000000099.830:12589): avc: denied { open } for pid=12285 comm="syz.6.12153" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 411.893405][T12288] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.905499][ T29] audit: type=1400 audit(2000000099.860:12590): avc: denied { create } for pid=12290 comm="syz.3.12154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 411.913632][T12288] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.933772][ T29] audit: type=1400 audit(2000000099.860:12591): avc: denied { sys_admin } for pid=12290 comm="syz.3.12154" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 411.933808][ T29] audit: type=1400 audit(2000000099.860:12592): avc: denied { checkpoint_restore } for pid=12290 comm="syz.3.12154" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 411.933839][ T29] audit: type=1400 audit(2000000099.860:12593): avc: denied { mac_admin } for pid=12292 comm="syz.2.12155" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 411.942106][T12288] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.015439][T12288] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.039205][ T29] audit: type=1400 audit(2000000100.030:12594): avc: denied { append } for pid=12285 comm="syz.6.12153" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 412.071685][T12302] netlink: 'syz.2.12158': attribute type 3 has an invalid length. [ 412.135518][ T29] audit: type=1326 audit(2000000100.120:12595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.3.12162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437fe969 code=0x7ffc0000 [ 412.162531][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12152'. [ 412.171604][T12288] netlink: 'syz.9.12152': attribute type 30 has an invalid length. [ 412.253743][ T29] audit: type=1326 audit(2000000100.150:12596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.3.12162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f1a437fe969 code=0x7ffc0000 [ 412.277823][ T29] audit: type=1326 audit(2000000100.150:12597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.3.12162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437fe969 code=0x7ffc0000 [ 412.485147][T12363] syz!: rxe_newlink: already configured on team_slave_0 [ 412.558417][T18697] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 412.568764][T18697] ref_tracker: batadv_slave_0@ffff888117961550 has 1/1 users at [ 412.568764][T18697] batadv_hard_if_event+0x688/0xef0 [ 412.568764][T18697] raw_notifier_call_chain+0x6c/0x1b0 [ 412.568764][T18697] call_netdevice_notifiers_info+0xae/0x100 [ 412.568764][T18697] register_netdevice+0xd48/0xf10 [ 412.568764][T18697] veth_newlink+0x49b/0x770 [ 412.568764][T18697] rtnl_newlink_create+0x1bf/0x630 [ 412.568764][T18697] rtnl_newlink+0xf29/0x12d0 [ 412.568764][T18697] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 412.568764][T18697] netlink_rcv_skb+0x120/0x220 [ 412.568764][T18697] rtnetlink_rcv+0x1c/0x30 [ 412.568764][T18697] netlink_unicast+0x59e/0x670 [ 412.568764][T18697] netlink_sendmsg+0x58b/0x6b0 [ 412.568764][T18697] __sock_sendmsg+0x142/0x180 [ 412.568764][T18697] __sys_sendto+0x268/0x330 [ 412.568764][T18697] __x64_sys_sendto+0x76/0x90 [ 412.568764][T18697] x64_sys_call+0x2eb6/0x2fb0 [ 412.568764][T18697] [ 412.750679][T12379] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12183'. [ 412.856223][T12413] loop7: detected capacity change from 0 to 1024 [ 412.884891][T12418] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12198'. [ 412.923042][T12410] loop2: detected capacity change from 0 to 8192 [ 412.934210][T12410] vfat: Unknown parameter '&ó #ó0»!T—.yÕ„¯÷—Ž£ ÎÆ°*Æì ì#Ë' [ 412.947736][T12413] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.966933][T12413] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.995569][T12413] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.12195: bg 0: block 393: padding at end of block bitmap is not set [ 413.054143][T12413] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 413.067206][T12413] EXT4-fs (loop7): This should not happen!! Data will be lost [ 413.067206][T12413] [ 413.082017][T12441] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12205'. [ 413.131141][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12207'. [ 413.189609][ T8980] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.220919][T12457] netlink: 'syz.2.12213': attribute type 4 has an invalid length. [ 413.228947][T12457] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.12213'. [ 413.295649][T12471] loop7: detected capacity change from 0 to 512 [ 413.326186][T12476] macvlan2: entered promiscuous mode [ 413.331714][T12476] bridge0: entered promiscuous mode [ 413.340534][T12471] EXT4-fs error (device loop7): ext4_iget_extra_inode:4693: inode #15: comm syz.7.12217: corrupted in-inode xattr: invalid ea_ino [ 413.354590][T12476] bridge0: port 1(macvlan2) entered blocking state [ 413.358115][T12471] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.12217: couldn't read orphan inode 15 (err -117) [ 413.361318][T12476] bridge0: port 1(macvlan2) entered disabled state [ 413.383695][T12476] macvlan2: entered allmulticast mode [ 413.389161][T12476] bridge0: entered allmulticast mode [ 413.395908][T12471] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.411893][T12476] macvlan2: left allmulticast mode [ 413.417128][T12476] bridge0: left allmulticast mode [ 413.430535][T12476] bridge0: left promiscuous mode [ 413.445958][ T8980] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.457424][T12486] ÿÿÿÿÿÿ: renamed from vlan1 [ 413.669734][T12514] loop6: detected capacity change from 0 to 512 [ 413.726257][T12514] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.12230: corrupted in-inode xattr: invalid ea_ino [ 413.749824][T12514] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.12230: couldn't read orphan inode 15 (err -117) [ 413.752474][T12526] netlink: 36 bytes leftover after parsing attributes in process `syz.7.12236'. [ 413.778681][T12514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.783018][T12524] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 413.801689][T12528] loop2: detected capacity change from 0 to 512 [ 413.847321][T12528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.865509][ T6447] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.875104][T12528] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.894594][T12528] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.905788][T12540] sctp: [Deprecated]: syz.3.12241 (pid 12540) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.905788][T12540] Use struct sctp_sack_info instead [ 413.944050][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12243'. [ 413.947816][T12546] loop7: detected capacity change from 0 to 512 [ 413.990963][T12546] EXT4-fs warning (device loop7): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 414.009379][T12546] EXT4-fs (loop7): mount failed [ 414.147264][T12576] loop6: detected capacity change from 0 to 1024 [ 414.174573][T12587] netlink: 16 bytes leftover after parsing attributes in process `syz.9.12252'. [ 414.186947][T12576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.226042][T12576] ext4 filesystem being mounted at /2236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.291551][T12576] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.12249: bg 0: block 393: padding at end of block bitmap is not set [ 414.334226][T12576] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 414.347255][T12576] EXT4-fs (loop6): This should not happen!! Data will be lost [ 414.347255][T12576] [ 414.395537][ T6447] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.480277][T12611] loop6: detected capacity change from 0 to 512 [ 414.542519][T12611] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 414.565461][T12611] EXT4-fs (loop6): mount failed [ 414.631263][T12633] ÿÿÿÿÿÿ: renamed from vlan1 [ 414.676953][T12636] netlink: 'syz.2.12267': attribute type 3 has an invalid length. [ 414.703970][ T1039] Process accounting resumed [ 415.955143][T12703] hub 2-0:1.0: USB hub found [ 415.968947][T12703] hub 2-0:1.0: 8 ports detected [ 415.981355][T12711] vhci_hcd: invalid port number 96 [ 415.986547][T12711] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 416.086552][T12728] loop7: detected capacity change from 0 to 2048 [ 416.117779][T12728] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.158071][T12742] loop6: detected capacity change from 0 to 128 [ 416.173571][ T8980] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.197249][T12742] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 416.227064][T12742] ext4 filesystem being mounted at /2248/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 416.280267][ T6447] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 416.319000][T12771] program syz.6.12314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 416.347004][T16115] kernel write not supported for file /4597/attr/exec (pid: 16115 comm: kworker/0:7) [ 416.750804][T12835] loop2: detected capacity change from 0 to 512 [ 416.800761][T12835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.814036][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 416.814053][ T29] audit: type=1400 audit(2000000104.810:12724): avc: denied { mount } for pid=12834 comm="syz.2.12342" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 416.843125][T12835] ext4 filesystem being mounted at /286/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 416.843438][T12845] program syz.9.12344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 416.853908][ T29] audit: type=1400 audit(2000000104.840:12725): avc: denied { write } for pid=12844 comm="syz.9.12344" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 416.887010][ T29] audit: type=1400 audit(2000000104.840:12726): avc: denied { open } for pid=12844 comm="syz.9.12344" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 416.912680][ T29] audit: type=1400 audit(2000000104.900:12727): avc: denied { write } for pid=12834 comm="syz.2.12342" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 416.941550][ T29] audit: type=1400 audit(2000000104.930:12728): avc: denied { add_name } for pid=12834 comm="syz.2.12342" name="pids.current" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 416.967582][ T29] audit: type=1400 audit(2000000104.930:12729): avc: denied { create } for pid=12834 comm="syz.2.12342" name="pids.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 417.006681][ T29] audit: type=1400 audit(2000000104.930:12730): avc: denied { read append open } for pid=12834 comm="syz.2.12342" path="/286/bus/pids.current" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 417.031297][ T29] audit: type=1400 audit(2000000104.930:12731): avc: denied { write } for pid=12834 comm="syz.2.12342" path="/286/bus/bus" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 417.071125][ T29] audit: type=1400 audit(2000000104.990:12732): avc: denied { ioctl } for pid=12834 comm="syz.2.12342" path="/286/bus/pids.current" dev="loop2" ino=18 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 417.120400][ T29] audit: type=1400 audit(2000000105.110:12733): avc: denied { mount } for pid=12849 comm="syz.7.12346" name="/" dev="ramfs" ino=110281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 417.184086][ T7715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.203687][T12857] batadv0: entered allmulticast mode [ 417.209930][T12857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.219009][T12857] bridge0: port 1(batadv0) entered blocking state [ 417.225694][T12857] bridge0: port 1(batadv0) entered disabled state [ 417.233681][T12857] batadv0: entered promiscuous mode [ 417.239565][T12857] bridge0: port 1(batadv0) entered blocking state [ 417.246382][T12857] bridge0: port 1(batadv0) entered forwarding state [ 417.321779][T12872] loop9: detected capacity change from 0 to 128 [ 417.358455][T12872] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 417.376249][T12872] ext4 filesystem being mounted at /2147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 417.432108][ T6582] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 417.545619][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.553310][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.560931][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.569990][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.577767][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.585462][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.593439][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.601312][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.609216][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.617101][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.620283][T12921] veth1_macvtap: left promiscuous mode [ 417.624682][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.638535][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.646020][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.654188][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.660032][T12921] macsec0: entered promiscuous mode [ 417.662049][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.675088][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.682924][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.690630][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.698350][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.705980][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.713445][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.713496][T17514] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 417.713513][T17514] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 417.721124][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.721153][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.754686][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.762310][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.770119][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.777557][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.785275][ T1039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 417.794634][T12928] hub 2-0:1.0: USB hub found [ 417.794796][ T1039] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz1 [ 417.804752][T12928] hub 2-0:1.0: 8 ports detected [ 417.847414][T12923] Falling back ldisc for ttyS3. [ 417.926756][T12953] netlink: 'syz.9.12380': attribute type 1 has an invalid length. [ 417.956322][T12955] vhci_hcd: invalid port number 96 [ 417.961867][T12955] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 418.569077][T12984] lo speed is unknown, defaulting to 1000 [ 418.810501][T12992] lo speed is unknown, defaulting to 1000 [ 418.819453][T13014] batadv0: entered allmulticast mode [ 418.831953][T13014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.840131][T13014] bridge0: port 1(batadv0) entered blocking state [ 418.846692][T13014] bridge0: port 1(batadv0) entered disabled state [ 418.854088][T13014] batadv0: entered promiscuous mode [ 418.860251][T13014] bridge0: port 1(batadv0) entered blocking state [ 418.866840][T13014] bridge0: port 1(batadv0) entered forwarding state [ 419.285693][T13089] __nla_validate_parse: 2 callbacks suppressed [ 419.285712][T13089] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12412'. [ 419.303897][T13088] loop9: detected capacity change from 0 to 2048 [ 419.317157][T17514] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 419.326540][T17514] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 419.337418][T13088] ext4: Unknown parameter 'noacl' [ 419.693150][T13113] loop9: detected capacity change from 0 to 128 [ 419.720607][T13115] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 419.775467][T13124] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12437'. [ 419.860459][T13127] random: crng reseeded on system resumption [ 420.123453][T31715] Process accounting resumed [ 420.148688][T13139] netlink: 268 bytes leftover after parsing attributes in process `syz.6.12434'. [ 420.178006][T13141] netlink: 'syz.6.12435': attribute type 2 has an invalid length. [ 420.185958][T13141] netlink: 164 bytes leftover after parsing attributes in process `syz.6.12435'. [ 420.509248][T13164] Falling back ldisc for ttyS3. [ 420.646223][T13187] loop7: detected capacity change from 0 to 8192 [ 420.764993][T13209] netlink: 'syz.7.12458': attribute type 1 has an invalid length. [ 420.794902][T13246] ip6t_rpfilter: unknown options [ 420.822345][T13209] bond1: (slave gretap1): making interface the new active one [ 420.841530][T13209] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 420.860006][T13255] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 420.866668][T13255] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 420.874522][T13255] vhci_hcd vhci_hcd.0: Device attached [ 420.904645][T13261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.918462][T13256] vhci_hcd: connection closed [ 420.918744][T11549] vhci_hcd: stop threads [ 420.921039][T13261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.923571][T11549] vhci_hcd: release socket [ 420.940106][T11549] vhci_hcd: disconnect device [ 420.976180][T13267] batadv1: entered allmulticast mode [ 420.983681][T13267] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 421.025356][T13283] netlink: 'syz.3.12469': attribute type 1 has an invalid length. [ 421.042982][T13283] bond3: entered promiscuous mode [ 421.048484][T13283] 8021q: adding VLAN 0 to HW filter on device bond3 [ 421.062521][T13283] netlink: 3 bytes leftover after parsing attributes in process `syz.3.12469'. [ 421.078825][T13283] batadv1: entered promiscuous mode [ 421.084231][T13283] batadv1: entered allmulticast mode [ 421.093451][T13283] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 421.103360][T13283] bond3: (slave batadv1): making interface the new active one [ 421.112138][T13283] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 421.236375][T13344] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.288092][T13344] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.338317][T13344] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.398345][T13344] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.423738][T13340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.433395][T13340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.461189][T13344] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.473752][T13344] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.494091][T13344] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.510749][T13344] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.731943][T13387] netlink: 'syz.2.12483': attribute type 1 has an invalid length. [ 421.766156][T13387] bond1: entered promiscuous mode [ 421.783572][T13387] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.821388][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 421.821407][ T29] audit: type=1400 audit(2000000109.810:12953): avc: denied { ioctl } for pid=13429 comm="syz.7.12485" path="socket:[112847]" dev="sockfs" ino=112847 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 421.857995][T13387] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12483'. [ 421.870973][T13387] batadv2: entered promiscuous mode [ 421.876295][T13387] batadv2: entered allmulticast mode [ 421.883666][T13387] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 421.892267][T13387] bond1: (slave batadv2): making interface the new active one [ 421.900181][ T29] audit: type=1400 audit(2000000109.870:12954): avc: denied { setopt } for pid=13431 comm="syz.3.12486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 421.907672][T13387] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 421.920500][ T29] audit: type=1400 audit(2000000109.870:12955): avc: denied { write } for pid=13431 comm="syz.3.12486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 421.973362][T13438] netlink: 'syz.6.12488': attribute type 1 has an invalid length. [ 421.991088][ T29] audit: type=1400 audit(2000000109.970:12956): avc: denied { create } for pid=13439 comm="syz.7.12499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 422.011254][ T29] audit: type=1400 audit(2000000109.970:12957): avc: denied { write } for pid=13439 comm="syz.7.12499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 422.084503][T13446] bond4: (slave gretap1): making interface the new active one [ 422.092757][ T29] audit: type=1400 audit(2000000110.080:12958): avc: denied { setopt } for pid=13482 comm="syz.7.12491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 422.099194][T13484] netlink: 'syz.2.12490': attribute type 21 has an invalid length. [ 422.114715][T13446] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 422.121149][T13484] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12490'. [ 422.149519][T13484] netlink: 'syz.2.12490': attribute type 5 has an invalid length. [ 422.157463][T13484] netlink: 'syz.2.12490': attribute type 6 has an invalid length. [ 422.165300][T13484] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12490'. [ 422.242765][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.250609][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.256873][ T29] audit: type=1400 audit(2000000110.230:12959): avc: denied { read write } for pid=13494 comm="syz.6.12496" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 422.258116][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.283196][ T29] audit: type=1400 audit(2000000110.230:12960): avc: denied { open } for pid=13494 comm="syz.6.12496" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 422.314325][ T29] audit: type=1400 audit(2000000110.230:12961): avc: denied { connect } for pid=13491 comm="syz.7.12495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 422.352999][T13498] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 422.366871][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.374449][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.381929][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.389437][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.397090][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.404783][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.412306][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.419977][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.427541][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.435055][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.445567][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.453211][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.460655][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.468253][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.475721][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.483310][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.490813][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.498332][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.506121][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.513664][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.521276][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.528746][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.536294][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.543909][T16179] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 422.552862][T16179] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 422.591930][T13531] netlink: 'syz.6.12503': attribute type 1 has an invalid length. [ 422.629756][T13531] bond5: entered promiscuous mode [ 422.635752][T13531] 8021q: adding VLAN 0 to HW filter on device bond5 [ 422.651028][T13531] netlink: 3 bytes leftover after parsing attributes in process `syz.6.12503'. [ 422.662535][ T29] audit: type=1400 audit(2000000110.650:12962): avc: denied { read } for pid=13570 comm="syz.7.12505" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 422.695125][T13531] batadv0: entered promiscuous mode [ 422.700532][T13531] batadv0: entered allmulticast mode [ 422.707392][T13531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.715614][T13531] bond5: (slave batadv0): making interface the new active one [ 422.724407][T13531] bond5: (slave batadv0): Enslaving as an active interface with an up link [ 422.733960][T13514] lo speed is unknown, defaulting to 1000 [ 422.826080][T13525] lo speed is unknown, defaulting to 1000 [ 422.954209][T13609] SELinux: ebitmap: truncated map [ 422.960775][T13609] SELinux: failed to load policy [ 423.379654][T13659] batadv3: entered allmulticast mode [ 423.386006][T13659] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 423.396386][T13659] bridge0: port 1(batadv3) entered blocking state [ 423.403066][T13659] bridge0: port 1(batadv3) entered disabled state [ 423.415888][T13659] batadv3: entered promiscuous mode [ 423.503131][T13667] SELinux: failed to load policy [ 423.582910][T13674] lo speed is unknown, defaulting to 1000 [ 423.641149][T13694] pimreg: entered allmulticast mode [ 423.724914][T13709] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12534'. [ 423.740159][T13699] pimreg: left allmulticast mode [ 423.763630][T13678] lo speed is unknown, defaulting to 1000 [ 423.877197][T11881] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 423.887432][T11881] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 424.740077][T13791] __nla_validate_parse: 1 callbacks suppressed [ 424.740099][T13791] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12558'. [ 424.796329][T13797] 9pnet: Could not find request transport: rwitch [ 424.863906][T13802] SELinux: failed to load policy [ 425.237265][T13833] loop9: detected capacity change from 0 to 1024 [ 425.244460][T13833] EXT4-fs: Ignoring removed bh option [ 425.253424][T13833] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 425.269310][T13833] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.333908][T13842] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12583'. [ 425.346450][ T6582] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.371638][T13841] lo speed is unknown, defaulting to 1000 [ 425.492335][T13846] lo speed is unknown, defaulting to 1000 [ 425.709982][T13908] loop9: detected capacity change from 0 to 512 [ 425.732761][T13908] EXT4-fs: Ignoring removed orlov option [ 425.755282][T13908] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 425.787261][T13908] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 425.809632][T13908] EXT4-fs error (device loop9): ext4_iget_extra_inode:4693: inode #15: comm syz.9.12581: corrupted in-inode xattr: e_value size too large [ 425.846973][T13908] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.12581: couldn't read orphan inode 15 (err -117) [ 425.864055][T13908] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.916481][ T6582] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.102402][T13946] loop9: detected capacity change from 0 to 2048 [ 426.104466][T13966] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 426.153944][T13946] loop9: p2 p3 p7 [ 426.159028][T13969] SELinux: Context system_u:object_r:cpu_online_t:s0 is not valid (left unmapped). [ 426.692055][T13985] program syz.9.12614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 426.703258][T13985] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 426.743428][T13993] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12607'. [ 426.782069][T13997] serio: Serial port ptm0 [ 426.871850][T13990] lo speed is unknown, defaulting to 1000 [ 426.891137][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 426.891151][ T29] audit: type=1400 audit(2000000114.880:13107): avc: denied { getopt } for pid=14010 comm="syz.2.12615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 426.982475][ T29] audit: type=1400 audit(2000000114.970:13108): avc: denied { mount } for pid=14033 comm="syz.7.12617" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 427.044952][T14036] loop2: detected capacity change from 0 to 2048 [ 427.058100][ T29] audit: type=1326 audit(2000000115.010:13109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.3.12619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437fe969 code=0x7ffc0000 [ 427.081996][ T29] audit: type=1326 audit(2000000115.010:13110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.3.12619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437fe969 code=0x7ffc0000 [ 427.105730][ T29] audit: type=1326 audit(2000000115.020:13111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.3.12619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1a437fe969 code=0x7ffc0000 [ 427.129542][ T29] audit: type=1326 audit(2000000115.020:13112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.3.12619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437fe969 code=0x7ffc0000 [ 427.153803][ T29] audit: type=1326 audit(2000000115.020:13113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.3.12619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437fe969 code=0x7ffc0000 [ 427.177590][ T29] audit: type=1326 audit(2000000115.020:13114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.3.12619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a437fe969 code=0x7ffc0000 [ 427.201401][ T29] audit: type=1326 audit(2000000115.020:13115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.3.12619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437fe969 code=0x7ffc0000 [ 427.225232][ T29] audit: type=1326 audit(2000000115.020:13116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.3.12619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a437fe969 code=0x7ffc0000 [ 427.255814][T14036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.315650][T14036] netlink: 136 bytes leftover after parsing attributes in process `syz.2.12618'. [ 427.325056][T14036] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 427.355858][ T7715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.381306][T14060] netlink: 44 bytes leftover after parsing attributes in process `syz.7.12625'. [ 427.390888][T14060] bridge0: port 1(batadv0) entered disabled state [ 427.410339][T14062] netlink: 'syz.3.12626': attribute type 10 has an invalid length. [ 427.418359][T14062] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12626'. [ 427.444118][T14062] dummy0: entered promiscuous mode [ 427.463017][T14062] bridge0: port 1(dummy0) entered blocking state [ 427.469676][T14062] bridge0: port 1(dummy0) entered disabled state [ 427.481035][T14062] dummy0: entered allmulticast mode [ 427.495083][T14065] loop6: detected capacity change from 0 to 8192 [ 427.497541][T14070] loop9: detected capacity change from 0 to 7 [ 427.532153][T14070] buffer_io_error: 6 callbacks suppressed [ 427.532172][T14070] Buffer I/O error on dev loop9, logical block 0, async page read [ 427.548911][T14070] Buffer I/O error on dev loop9, logical block 0, async page read [ 427.556858][T14070] loop9: unable to read partition table [ 427.570221][T14070] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 427.570221][T14070] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 427.692098][T14090] lo speed is unknown, defaulting to 1000 [ 427.755796][T14115] netlink: 'syz.6.12639': attribute type 10 has an invalid length. [ 427.756046][T14073] lo speed is unknown, defaulting to 1000 [ 427.923933][T14073] chnl_net:caif_netlink_parms(): no params data found [ 427.995017][T14073] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.002295][T14073] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.012622][T14073] bridge_slave_0: entered allmulticast mode [ 428.022852][T14073] bridge_slave_0: entered promiscuous mode [ 428.031666][T14073] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.038888][T14073] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.046465][T14073] bridge_slave_1: entered allmulticast mode [ 428.053672][T14073] bridge_slave_1: entered promiscuous mode [ 428.081222][T14073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.092307][T14073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.117603][T14073] team0: Port device team_slave_0 added [ 428.124769][T14073] team0: Port device team_slave_1 added [ 428.150751][T14073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.157943][T14073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.184248][T14073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.201135][T14073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.208292][T14073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.234454][T14073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.269681][T14073] hsr_slave_0: entered promiscuous mode [ 428.276081][T14073] hsr_slave_1: entered promiscuous mode [ 428.282266][T14073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.289900][T14073] Cannot create hsr debugfs directory [ 428.588445][T14073] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 428.598067][T14073] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 428.607792][T14073] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 428.617546][T14073] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 428.662916][T14073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.676867][T14073] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.695323][T12365] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.702516][T12365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.720270][T13263] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.727431][T13263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.833684][T14073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.929215][T14073] veth0_vlan: entered promiscuous mode [ 428.939245][T14073] veth1_vlan: entered promiscuous mode [ 428.972603][T14073] veth0_macvtap: entered promiscuous mode [ 428.981173][T14073] veth1_macvtap: entered promiscuous mode [ 428.994137][T14073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.004721][T14073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.025069][T14073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.044923][T14073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.055590][T14073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.071674][T14073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.083230][T14488] serio: Serial port ptm0 [ 429.084123][T14073] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.096612][T14073] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.105530][T14073] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.114343][T14073] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.365437][T14515] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12655'. [ 429.374757][T14515] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12655'. [ 429.383972][T14515] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12655'. [ 429.397897][T14515] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12655'. [ 429.407101][T14515] netlink: 'syz.6.12655': attribute type 6 has an invalid length. [ 429.562538][T14529] IPVS: Error joining to the multicast group [ 429.586437][T14531] loop6: detected capacity change from 0 to 164 [ 429.611176][T14531] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 429.634115][T14531] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 429.651051][T14531] Symlink component flag not implemented [ 429.656763][T14531] Symlink component flag not implemented [ 429.674586][T14531] Symlink component flag not implemented (7) [ 429.680759][T14531] Symlink component flag not implemented (116) [ 429.696679][T14538] bridge0: port 2(batadv1) entered blocking state [ 429.700628][T14536] vhci_hcd: invalid port number 96 [ 429.703253][T14538] bridge0: port 2(batadv1) entered disabled state [ 429.708347][T14536] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 429.721265][T14538] batadv1: entered allmulticast mode [ 429.733049][T14538] batadv1: entered promiscuous mode [ 429.814960][T14554] netlink: 'syz.1.12667': attribute type 10 has an invalid length. [ 429.832286][T14554] syz_tun: entered promiscuous mode [ 429.842086][T14554] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 429.876117][T14558] loop6: detected capacity change from 0 to 512 [ 429.898222][T14558] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 429.946206][T14561] loop1: detected capacity change from 0 to 2048 [ 429.956964][T14558] EXT4-fs (loop6): 1 truncate cleaned up [ 429.960049][T14561] EXT4-fs: Ignoring removed nomblk_io_submit option [ 429.969669][T14561] EXT4-fs: Ignoring removed nobh option [ 429.975997][T14558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.005046][T14558] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.030497][T14561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.055933][T14561] EXT4-fs error (device loop1): ext4_check_all_de:659: inode #12: block 5: comm syz.1.12671: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=124 fake=0 [ 430.107134][T14561] EXT4-fs (loop1): Remounting filesystem read-only [ 430.185293][T14073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.200694][T12365] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 430.210331][T12365] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 430.360382][T14602] loop6: detected capacity change from 0 to 128 [ 430.471263][T14602] bio_check_eod: 6 callbacks suppressed [ 430.471284][T14602] syz.6.12685: attempt to access beyond end of device [ 430.471284][T14602] loop6: rw=0, sector=121, nr_sectors = 120 limit=128 [ 430.498212][T14627] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 430.517272][T14622] __nla_validate_parse: 2 callbacks suppressed [ 430.517290][T14622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12691'. [ 430.543057][T11881] kworker/u8:125: attempt to access beyond end of device [ 430.543057][T11881] loop6: rw=1, sector=241, nr_sectors = 800 limit=128 [ 430.560363][T14622] bridge0: port 3(batadv1) entered blocking state [ 430.567054][T14622] bridge0: port 3(batadv1) entered disabled state [ 430.575037][T14622] batadv1: entered allmulticast mode [ 430.582487][T14622] batadv1: entered promiscuous mode [ 430.603422][T14639] IPVS: stopping backup sync thread 14640 ... [ 430.607261][T14640] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 430.649889][T14643] ref_ctr_offset mismatch. inode: 0x59 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 430.885086][T14673] loop2: detected capacity change from 0 to 512 [ 430.930194][T14673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.955014][T14673] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 431.004876][ T7715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.049257][T14695] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.12716'. [ 431.049429][T14694] loop2: detected capacity change from 0 to 164 [ 431.079161][T11549] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 431.088544][T11549] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 431.101131][T14694] syz.2.12719: attempt to access beyond end of device [ 431.101131][T14694] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 431.113638][T14684] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.12716'. [ 431.140255][T14694] syz.2.12719: attempt to access beyond end of device [ 431.140255][T14694] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 431.193297][T14703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12724'. [ 431.202752][T14703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12724'. [ 431.246242][T14705] loop6: detected capacity change from 0 to 512 [ 431.254972][T14705] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 431.285915][T31715] kernel write not supported for file /634/attr/exec (pid: 31715 comm: kworker/0:15) [ 431.333314][T14718] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 431.488769][T14737] loop7: detected capacity change from 0 to 128 [ 431.515713][T14740] loop2: detected capacity change from 0 to 512 [ 431.525292][T14740] EXT4-fs: Ignoring removed orlov option [ 431.551761][T14740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.573794][T14737] syz.7.12736: attempt to access beyond end of device [ 431.573794][T14737] loop7: rw=0, sector=121, nr_sectors = 120 limit=128 [ 431.601058][T14740] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.604538][T14747] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 431.626950][T11549] kworker/u8:110: attempt to access beyond end of device [ 431.626950][T11549] loop7: rw=1, sector=241, nr_sectors = 800 limit=128 [ 431.659346][ T7715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.735825][T14770] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 431.746101][T14769] IPVS: stopping backup sync thread 14770 ... [ 432.062225][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 432.062241][ T29] audit: type=1400 audit(2000000120.050:13241): avc: denied { create } for pid=14795 comm="syz.1.12764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 432.106614][ T29] audit: type=1400 audit(2000000120.080:13242): avc: denied { connect } for pid=14795 comm="syz.1.12764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 432.126537][ T29] audit: type=1400 audit(2000000120.090:13243): avc: denied { read } for pid=14795 comm="syz.1.12764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 432.239584][ T29] audit: type=1400 audit(2000000120.230:13244): avc: denied { read } for pid=14804 comm="syz.7.12756" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 432.270732][ T29] audit: type=1400 audit(2000000120.260:13245): avc: denied { open } for pid=14804 comm="syz.7.12756" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 432.919442][ T29] audit: type=1400 audit(2000000120.900:13246): avc: denied { write } for pid=14810 comm="syz.1.12759" path="socket:[114435]" dev="sockfs" ino=114435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 432.982476][T14815] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12761'. [ 433.007429][T14815] 0ªX¹¦À: renamed from caif0 [ 433.022173][T14815] 0ªX¹¦À: entered allmulticast mode [ 433.028499][T14815] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 433.044558][T14820] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.12762'. [ 433.057469][T14818] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.12762'. [ 433.080446][ T29] audit: type=1326 audit(2000000121.050:13247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14821 comm="syz.3.12763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437fe969 code=0x7ffc0000 [ 433.104261][ T29] audit: type=1326 audit(2000000121.060:13248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14821 comm="syz.3.12763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437fe969 code=0x7ffc0000 [ 433.128144][ T29] audit: type=1326 audit(2000000121.060:13249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14821 comm="syz.3.12763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a437fe969 code=0x7ffc0000 [ 433.152415][ T29] audit: type=1326 audit(2000000121.060:13250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14821 comm="syz.3.12763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a437fe969 code=0x7ffc0000 [ 433.451794][T14847] vhci_hcd: invalid port number 65 [ 433.457038][T14847] vhci_hcd: invalid port number 65 [ 433.641998][T14865] wireguard0: entered promiscuous mode [ 433.851993][T14885] loop7: detected capacity change from 0 to 512 [ 433.877284][T14885] EXT4-fs: Ignoring removed oldalloc option [ 433.891016][T14885] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 433.937190][T14885] EXT4-fs (loop7): 1 truncate cleaned up [ 433.966445][T14885] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.111797][ T8980] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.380847][T14908] batadv0: left promiscuous mode [ 434.385945][T14908] bridge0: port 1(batadv0) entered disabled state [ 434.440926][T14908] bond1: (slave gretap1): Releasing active interface [ 434.460912][T14908] batadv1: left allmulticast mode [ 434.466047][T14908] batadv1: left promiscuous mode [ 434.471360][T14908] bridge0: port 2(batadv1) entered disabled state [ 434.535111][T14929] netlink: 'syz.1.12806': attribute type 17 has an invalid length. [ 434.543114][T14929] netlink: 'syz.1.12806': attribute type 41 has an invalid length. [ 434.551155][T14929] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12806'. [ 434.778987][T14935] bond1: entered promiscuous mode [ 434.784145][T14935] bond1: entered allmulticast mode [ 434.799835][T14935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 434.823609][T14935] bond1 (unregistering): Released all slaves [ 434.961020][T15009] vhci_hcd: default hub control req: 0000 vfffc i0000 l0 [ 435.007530][T15017] SELinux: syz.7.12817 (15017) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 435.045573][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12818'. [ 435.111420][T15029] loop7: detected capacity change from 0 to 512 [ 435.142889][T15029] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 435.163982][T15029] EXT4-fs (loop7): 1 truncate cleaned up [ 435.176336][T15029] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.235895][ T8980] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.278023][T15037] wireguard0: entered promiscuous mode [ 435.634218][T15074] loop2: detected capacity change from 0 to 1024 [ 435.641467][T15074] EXT4-fs: Ignoring removed mblk_io_submit option [ 435.648209][T15074] EXT4-fs: Ignoring removed nomblk_io_submit option [ 435.674580][T15074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.694468][T15084] netem: incorrect gi model size [ 435.699802][T15084] netem: change failed [ 435.761685][ T7715] EXT4-fs error (device loop2): ext4_lookup:1789: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256) [ 435.781628][ T7715] EXT4-fs error (device loop2): ext4_lookup:1789: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256) [ 435.837480][ T7715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.922165][T15100] __nla_validate_parse: 1 callbacks suppressed [ 435.922185][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12852'. [ 436.166679][T15101] lo speed is unknown, defaulting to 1000 [ 436.245566][T15104] loop6: detected capacity change from 0 to 512 [ 436.256161][T15104] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 436.265307][T15104] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 436.314808][T15104] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 436.321484][T15101] chnl_net:caif_netlink_parms(): no params data found [ 436.334054][T15104] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 436.355800][T15104] System zones: 0-2, 18-18, 34-35 [ 436.361813][T15104] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.395496][T15104] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 436.449952][T15101] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.457403][T15101] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.464974][T15101] bridge_slave_0: entered allmulticast mode [ 436.471799][T15101] bridge_slave_0: entered promiscuous mode [ 436.479299][T15101] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.487296][T15101] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.494985][T15101] bridge_slave_1: entered allmulticast mode [ 436.501667][T15101] bridge_slave_1: entered promiscuous mode [ 436.532390][ T6447] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.541052][T15101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.555109][T15101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.593107][T15101] team0: Port device team_slave_0 added [ 436.602777][T15101] team0: Port device team_slave_1 added [ 436.637812][T15101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.644823][T15101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.671074][T15101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.699576][T15364] pim6reg1: entered promiscuous mode [ 436.705039][T15364] pim6reg1: entered allmulticast mode [ 436.717737][T15101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.724764][T15101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.750834][T15101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.786723][T15101] hsr_slave_0: entered promiscuous mode [ 436.793393][T15101] hsr_slave_1: entered promiscuous mode [ 436.799971][T15101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.807801][T15101] Cannot create hsr debugfs directory [ 437.012608][T15431] loop7: detected capacity change from 0 to 512 [ 437.024845][T15431] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 437.033994][T15431] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 437.049719][T15431] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 437.059212][T15431] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 437.069833][T15431] System zones: 0-2, 18-18, 34-35 [ 437.075601][T15431] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.095290][T15431] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 437.133984][T15101] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 437.169531][T15101] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 437.182661][ T8980] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.194568][T15101] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 437.209131][T15101] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 437.320043][T15101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.362915][T15101] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.392543][T15493] loop7: detected capacity change from 0 to 1024 [ 437.399980][T12365] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.407091][T12365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.423568][T12365] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.430811][T12365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.449473][T15493] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.502936][T15493] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 437.611569][T15101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.627268][ T8980] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.652225][T15513] bond0: (slave syz_tun): Releasing backup interface [ 437.663926][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 437.663944][ T29] audit: type=1326 audit(2000000125.650:13384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.6.12885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16aece969 code=0x7ffc0000 [ 437.695395][ T29] audit: type=1326 audit(2000000125.660:13385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.6.12885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc16aece969 code=0x7ffc0000 [ 437.719290][ T29] audit: type=1326 audit(2000000125.660:13386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.6.12885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16aece969 code=0x7ffc0000 [ 437.743393][ T29] audit: type=1326 audit(2000000125.660:13387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.6.12885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16aece969 code=0x7ffc0000 [ 437.767290][ T29] audit: type=1326 audit(2000000125.660:13388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.6.12885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc16aece969 code=0x7ffc0000 [ 437.791166][ T29] audit: type=1326 audit(2000000125.660:13389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.6.12885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16aece969 code=0x7ffc0000 [ 437.802828][T15527] loop6: detected capacity change from 0 to 512 [ 437.815288][ T29] audit: type=1326 audit(2000000125.660:13390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.6.12885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16aece969 code=0x7ffc0000 [ 437.831326][T15527] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.12886: corrupted in-inode xattr: invalid ea_ino [ 437.845201][ T29] audit: type=1326 audit(2000000125.660:13391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.6.12885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fc16aece969 code=0x7ffc0000 [ 437.845235][ T29] audit: type=1326 audit(2000000125.660:13392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.6.12885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 437.845267][ T29] audit: type=1326 audit(2000000125.660:13393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.6.12885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16aece969 code=0x7ffc0000 [ 437.918051][T15513] bridge_slave_0: left allmulticast mode [ 437.936188][T15527] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.12886: couldn't read orphan inode 15 (err -117) [ 437.936729][T15527] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.948220][T15513] bridge_slave_0: left promiscuous mode [ 437.966416][T15513] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.976612][T15513] bridge_slave_1: left allmulticast mode [ 437.982496][T15513] bridge_slave_1: left promiscuous mode [ 437.988356][T15513] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.998909][T15513] bond0: (slave bond_slave_0): Releasing backup interface [ 438.009461][T15513] bond0: (slave bond_slave_1): Releasing backup interface [ 438.027712][T15513] team0: Port device team_slave_0 removed [ 438.043360][T15513] team0: Port device team_slave_1 removed [ 438.050820][T15513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.058380][T15513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.070629][T15513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.078260][T15513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.107065][T15513] batadv1: left allmulticast mode [ 438.112706][T15513] batadv1: left promiscuous mode [ 438.117941][T15513] bridge0: port 3(batadv1) entered disabled state [ 438.125655][ T6447] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.166464][T15521] bridge3: entered promiscuous mode [ 438.171941][T15521] bridge3: entered allmulticast mode [ 438.241984][T15522] wireguard0: entered promiscuous mode [ 438.255885][T15552] netlink: 164 bytes leftover after parsing attributes in process `syz.1.12890'. [ 438.266085][T15552] netlink: 164 bytes leftover after parsing attributes in process `syz.1.12890'. [ 438.275438][T15552] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12890'. [ 438.326541][T15101] veth0_vlan: entered promiscuous mode [ 438.335761][T15101] veth1_vlan: entered promiscuous mode [ 438.356118][T15101] veth0_macvtap: entered promiscuous mode [ 438.364801][T15101] veth1_macvtap: entered promiscuous mode [ 438.383597][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.394168][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.409214][T15101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.435517][T15563] wireguard1: entered promiscuous mode [ 438.475561][T15101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.486278][T15101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.498260][T15101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.509426][T15101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.518528][T15101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.527433][T15101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.536214][T15101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.700666][T15589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15589 comm=syz.6.12899 [ 438.748847][T15595] syz.0.12903: attempt to access beyond end of device [ 438.748847][T15595] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 438.783187][T15599] loop1: detected capacity change from 0 to 128 [ 438.790792][T15599] FAT-fs (loop1): Directory bread(block 162) failed [ 438.798646][T15599] FAT-fs (loop1): Directory bread(block 163) failed [ 438.805296][T15599] FAT-fs (loop1): Directory bread(block 164) failed [ 438.812292][T15599] FAT-fs (loop1): Directory bread(block 165) failed [ 438.819241][T15599] FAT-fs (loop1): Directory bread(block 166) failed [ 438.826144][T15599] FAT-fs (loop1): Directory bread(block 167) failed [ 438.838301][T15599] FAT-fs (loop1): Directory bread(block 168) failed [ 438.845004][T15599] FAT-fs (loop1): Directory bread(block 169) failed [ 438.864331][T15599] FAT-fs (loop1): Directory bread(block 162) failed [ 438.871280][T15599] FAT-fs (loop1): Directory bread(block 163) failed [ 438.878657][T15599] syz.1.12905: attempt to access beyond end of device [ 438.878657][T15599] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 438.892784][T15599] syz.1.12905: attempt to access beyond end of device [ 438.892784][T15599] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 438.928366][T15609] loop1: detected capacity change from 0 to 512 [ 438.951434][T15609] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.12907: corrupted in-inode xattr: invalid ea_ino [ 438.965495][T15609] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.12907: couldn't read orphan inode 15 (err -117) [ 438.982706][T15609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.083141][T14073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.113776][T15618] wireguard0: entered promiscuous mode [ 439.313061][T15637] dummy0: left allmulticast mode [ 439.313260][T15637] bridge0: port 1(dummy0) entered disabled state [ 439.340510][T15637] bond3: (slave batadv1): Releasing active interface [ 439.574309][T15668] sch_tbf: peakrate 64 is lower than or equals to rate 14020585672542658070 ! [ 439.618614][T15673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12931'. [ 439.650924][T15673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12931'. [ 439.768788][T15695] bridge_slave_0: left allmulticast mode [ 439.774572][T15695] bridge_slave_0: left promiscuous mode [ 439.780301][T15695] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.797261][T15695] bridge_slave_1: left allmulticast mode [ 439.803239][T15695] bridge_slave_1: left promiscuous mode [ 439.809145][T15695] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.848197][T15695] bond0: (slave bond_slave_0): Releasing backup interface [ 439.879150][T15695] bond0: (slave bond_slave_1): Releasing backup interface [ 439.895625][T15695] team0: Port device team_slave_0 removed [ 439.909963][T15695] team0: Port device team_slave_1 removed [ 439.968363][T15695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.975939][T15695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.024280][T15695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.031901][T15695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.043902][T15715] loop7: detected capacity change from 0 to 2048 [ 440.101837][T15715] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.248006][T15736] Invalid ELF header magic: != ELF [ 440.405495][T15745] loop0: detected capacity change from 0 to 1024 [ 440.451207][T15745] EXT4-fs: Ignoring removed mblk_io_submit option [ 440.553227][T15745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.579369][ T8980] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.675377][T15774] ALSA: seq fatal error: cannot create timer (-22) [ 440.757127][T15781] loop7: detected capacity change from 0 to 2048 [ 440.790331][T15781] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.792725][T15773] lo speed is unknown, defaulting to 1000 [ 440.829430][T15781] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.403629][T15827] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.12969: bg 0: block 345: padding at end of block bitmap is not set [ 441.964120][ T8980] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.034894][T15841] wireguard0: entered promiscuous mode [ 442.257583][T15870] loop7: detected capacity change from 0 to 512 [ 442.270873][T15870] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 442.287520][T15870] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 442.305421][T15875] syz_tun: left promiscuous mode [ 442.317283][T15870] System zones: 1-12 [ 442.327099][T15870] EXT4-fs (loop7): 1 truncate cleaned up [ 442.333257][T15870] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.355607][T15875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 442.592261][ T8980] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.666328][T15891] loop6: detected capacity change from 0 to 128 [ 442.722182][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 442.722200][ T29] audit: type=1400 audit(2000000130.710:13519): avc: denied { ioctl } for pid=15898 comm="syz.3.13001" path="socket:[116541]" dev="sockfs" ino=116541 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 442.802849][T15891] FAT-fs (loop6): Directory bread(block 162) failed [ 442.817346][T15904] only policy match revision 0 supported [ 442.817361][T15904] unable to load match [ 442.824010][T15891] FAT-fs (loop6): Directory bread(block 163) failed [ 442.853209][T15891] FAT-fs (loop6): Directory bread(block 164) failed [ 442.873062][T15891] FAT-fs (loop6): Directory bread(block 165) failed [ 442.889736][T15891] FAT-fs (loop6): Directory bread(block 166) failed [ 442.896654][T15891] FAT-fs (loop6): Directory bread(block 167) failed [ 442.903982][T15891] FAT-fs (loop6): Directory bread(block 168) failed [ 442.926579][T15891] FAT-fs (loop6): Directory bread(block 169) failed [ 442.971224][T15891] FAT-fs (loop6): Directory bread(block 162) failed [ 442.988459][T15891] FAT-fs (loop6): Directory bread(block 163) failed [ 442.995623][T15891] syz.6.12998: attempt to access beyond end of device [ 442.995623][T15891] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 443.045853][T15891] syz.6.12998: attempt to access beyond end of device [ 443.045853][T15891] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 443.445189][T15953] loop6: detected capacity change from 0 to 526 [ 443.459982][T15953] EXT4-fs (loop6): failed to parse options in superblock: gggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggg [ 443.473080][T15953] EXT4-fs (loop6): Unsupported encryption level 122 [ 443.579739][T15966] netlink: 596 bytes leftover after parsing attributes in process `syz.7.13024'. [ 443.627084][T15972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13026'. [ 443.636179][T15972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13026'. [ 443.645296][T15972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13026'. [ 443.666347][T15101] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.675682][T15973] loop7: detected capacity change from 0 to 128 [ 443.696166][T15972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13026'. [ 443.705385][T15972] netlink: 'syz.1.13026': attribute type 6 has an invalid length. [ 443.747080][T15973] FAT-fs (loop7): Directory bread(block 162) failed [ 443.753838][T15973] FAT-fs (loop7): Directory bread(block 163) failed [ 443.780934][T15973] FAT-fs (loop7): Directory bread(block 164) failed [ 443.801495][T15973] FAT-fs (loop7): Directory bread(block 165) failed [ 443.815596][ T29] audit: type=1400 audit(2000000131.800:13520): avc: denied { mount } for pid=15982 comm="syz.3.13030" name="/" dev="autofs" ino=117132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 443.818725][T15973] FAT-fs (loop7): Directory bread(block 166) failed [ 443.915366][T15973] FAT-fs (loop7): Directory bread(block 167) failed [ 443.925060][ T29] audit: type=1400 audit(2000000131.920:13521): avc: denied { create } for pid=15990 comm="syz.1.13034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 443.935268][T15973] FAT-fs (loop7): Directory bread(block 168) failed [ 443.969557][T15973] FAT-fs (loop7): Directory bread(block 169) failed [ 444.001462][ T29] audit: type=1400 audit(2000000131.940:13522): avc: denied { bind } for pid=15990 comm="syz.1.13034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 444.022468][ T29] audit: type=1400 audit(2000000131.940:13523): avc: denied { name_bind } for pid=15990 comm="syz.1.13034" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 444.044070][ T29] audit: type=1400 audit(2000000131.940:13524): avc: denied { node_bind } for pid=15990 comm="syz.1.13034" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 444.111241][T15973] FAT-fs (loop7): Directory bread(block 162) failed [ 444.138801][T15973] FAT-fs (loop7): Directory bread(block 163) failed [ 444.145912][T15973] syz.7.13025: attempt to access beyond end of device [ 444.145912][T15973] loop7: rw=3, sector=226, nr_sectors = 6 limit=128 [ 444.173030][T15973] syz.7.13025: attempt to access beyond end of device [ 444.173030][T15973] loop7: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 444.227856][T16009] pimreg: entered allmulticast mode [ 444.236005][T16009] pimreg: left allmulticast mode [ 444.472213][T16025] vhci_hcd: invalid port number 96 [ 444.477507][T16025] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 444.560751][T16048] Falling back ldisc for ttyS3. [ 444.612869][T16069] loop6: detected capacity change from 0 to 512 [ 444.647777][T16069] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 444.673112][T16069] EXT4-fs (loop6): 1 truncate cleaned up [ 444.679360][T16069] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.723256][ T29] audit: type=1400 audit(2000000132.710:13525): avc: denied { map } for pid=16068 comm="syz.6.13057" path="/2390/file2/memory.events" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 444.782937][ T29] audit: type=1326 audit(2000000132.770:13526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16089 comm="syz.1.13066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f65e2e969 code=0x7ffc0000 [ 444.807157][ T29] audit: type=1326 audit(2000000132.770:13527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16089 comm="syz.1.13066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f65e2e969 code=0x7ffc0000 [ 444.858736][ T29] audit: type=1400 audit(2000000132.780:13528): avc: denied { write } for pid=16087 comm="syz.0.13065" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 444.879039][ T6447] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.925195][T16101] loop6: detected capacity change from 0 to 128 [ 444.951551][T16101] syz.6.13068: attempt to access beyond end of device [ 444.951551][T16101] loop6: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 445.581673][T16191] openvswitch: netlink: Message has 6 unknown bytes. [ 445.617429][T16193] Falling back ldisc for ttyS3. [ 445.671991][T16210] IPv6: NLM_F_CREATE should be specified when creating new route [ 445.773263][T16228] geneve0: entered allmulticast mode [ 445.842291][T16237] Falling back ldisc for ttyS3. [ 445.917567][T16249] vhci_hcd: invalid port number 96 [ 445.922730][T16249] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 446.056926][T16261] Falling back ldisc for ttyS3. [ 446.171240][T16279] tipc: Started in network mode [ 446.176182][T16279] tipc: Node identity ac14140f, cluster identity 4711 [ 446.200322][T16279] tipc: New replicast peer: 10.1.1.2 [ 446.205726][T16279] tipc: Enabled bearer , priority 10 [ 446.343617][T16300] vhci_hcd: invalid port number 96 [ 446.348869][T16300] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 446.438096][T16310] loop1: detected capacity change from 0 to 512 [ 446.446111][T16310] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 446.485759][T16310] EXT4-fs (loop1): 1 truncate cleaned up [ 446.494954][T16310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.520664][T16319] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13143'. [ 446.564439][T14073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.788475][T16341] vhci_hcd: invalid port number 96 [ 446.793737][T16341] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 446.821089][T16344] netlink: 'syz.1.13161': attribute type 12 has an invalid length. [ 446.839303][T16344] netlink: 'syz.1.13161': attribute type 12 has an invalid length. [ 446.934656][T16350] lo speed is unknown, defaulting to 1000 [ 447.196862][T16113] tipc: Node number set to 2886997007 [ 447.324761][T16398] ref_ctr increment failed for inode: 0x7c0 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88813ed06e00 [ 447.350741][T16397] uprobe: syz.7.13165:16397 failed to unregister, leaking uprobe [ 447.377290][T16402] tipc: Started in network mode [ 447.382287][T16402] tipc: Node identity ac14140f, cluster identity 4711 [ 447.390452][T16402] tipc: New replicast peer: 10.1.1.2 [ 447.395857][T16402] tipc: Enabled bearer , priority 10 [ 448.411230][T16407] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13173'. [ 448.411996][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 448.412059][ T29] audit: type=1400 audit(2000000136.400:13607): avc: denied { read } for pid=16403 comm="syz.0.13171" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 448.506873][T31713] tipc: Node number set to 2886997007 [ 448.555472][T16418] SELinux: failed to load policy [ 448.606450][T16430] loop6: detected capacity change from 0 to 512 [ 448.626742][T16430] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 448.642553][T16429] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13181'. [ 448.653365][T16430] EXT4-fs (loop6): 1 truncate cleaned up [ 448.663992][T16430] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.665997][ T29] audit: type=1400 audit(2000000136.650:13608): avc: denied { execute } for pid=16439 comm="syz.7.13185" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=118157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 448.755404][ T6447] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.763268][T16457] loop0: detected capacity change from 0 to 2048 [ 448.776428][ T29] audit: type=1326 audit(2000000136.760:13609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16458 comm="syz.1.13187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f65e2e969 code=0x7ffc0000 [ 448.800384][ T29] audit: type=1326 audit(2000000136.760:13610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16458 comm="syz.1.13187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f65e2e969 code=0x7ffc0000 [ 448.867694][T16472] SELinux: syz.1.13193 (16472) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 448.881878][T16457] loop0: p1 < > p4 [ 448.891837][T16457] loop0: p4 size 8388608 extends beyond EOD, truncated [ 448.946442][ T29] audit: type=1326 audit(2000000136.760:13611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16458 comm="syz.1.13187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f3f65e2e969 code=0x7ffc0000 [ 448.970397][ T29] audit: type=1326 audit(2000000136.760:13612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16458 comm="syz.1.13187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f65e2e969 code=0x7ffc0000 [ 448.994282][ T29] audit: type=1326 audit(2000000136.760:13613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16458 comm="syz.1.13187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f65e2e969 code=0x7ffc0000 [ 449.016131][T16467] lo speed is unknown, defaulting to 1000 [ 449.018145][ T29] audit: type=1400 audit(2000000136.820:13614): avc: denied { bind } for pid=16465 comm="syz.6.13189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 449.018178][ T29] audit: type=1326 audit(2000000136.910:13615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16456 comm="syz.0.13188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d7c3e969 code=0x7ffc0000 [ 449.068586][ T29] audit: type=1326 audit(2000000136.910:13616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16456 comm="syz.0.13188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f65d7c3e969 code=0x7ffc0000 [ 449.226683][T16521] tmpfs: Bad value for 'mpol' [ 449.351762][T16543] ref_ctr increment failed for inode: 0x1a09 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881135a2c00 [ 449.402690][T16541] uprobe: syz.3.13207:16541 failed to unregister, leaking uprobe [ 449.417287][T16549] pimreg: entered allmulticast mode [ 449.428247][T16547] loop7: detected capacity change from 0 to 2048 [ 449.443377][T16549] pimreg: left allmulticast mode [ 449.467835][T16547] loop7: p1 < > p4 [ 449.472455][T16547] loop7: p4 size 8388608 extends beyond EOD, truncated [ 449.805620][T16595] lo speed is unknown, defaulting to 1000 [ 450.292907][T16639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13233'. [ 450.302166][T16639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13233'. [ 450.541954][T16687] openvswitch: netlink: Message has 6 unknown bytes. [ 450.583549][T16691] netlink: 'syz.1.13246': attribute type 29 has an invalid length. [ 450.602150][T16691] netlink: 'syz.1.13246': attribute type 29 has an invalid length. [ 450.621977][T16691] netlink: 500 bytes leftover after parsing attributes in process `syz.1.13246'. [ 450.754124][T16712] loop0: detected capacity change from 0 to 2048 [ 450.784788][T16712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.803993][T16725] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.821591][T16712] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 450.836984][T16712] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 450.849471][T16712] EXT4-fs (loop0): This should not happen!! Data will be lost [ 450.849471][T16712] [ 450.859356][T16712] EXT4-fs (loop0): Total free blocks count 0 [ 450.865532][T16712] EXT4-fs (loop0): Free/Dirty block details [ 450.871683][T16712] EXT4-fs (loop0): free_blocks=2415919104 [ 450.877481][T16712] EXT4-fs (loop0): dirty_blocks=48 [ 450.882700][T16712] EXT4-fs (loop0): Block reservation details [ 450.888970][T16712] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 450.894630][T16732] loop1: detected capacity change from 0 to 512 [ 450.903299][T16732] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 450.914109][T16725] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.934220][T16732] EXT4-fs (loop1): 1 truncate cleaned up [ 450.940427][T16732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.998420][T16725] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.026298][T14073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.048504][T16725] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.113772][T16725] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.136355][T16725] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.153127][T16725] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.171220][T16725] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.221041][T16756] pim6reg1: entered promiscuous mode [ 451.226426][T16756] pim6reg1: entered allmulticast mode [ 451.369575][T16730] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 451.643163][T16792] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13277'. [ 451.665742][T16797] ref_ctr increment failed for inode: 0x149 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881135a2100 [ 451.689419][T16796] uprobe: syz.0.13270:16796 failed to unregister, leaking uprobe [ 451.708360][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.716190][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.724027][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.731868][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.739783][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.748154][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.755970][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.763839][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.771643][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.779456][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.787319][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.795077][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.802873][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.810666][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.818555][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.826433][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.834367][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.842254][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.850118][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.857916][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.865680][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.873563][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.881535][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.889760][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.897635][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.905417][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.913391][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.921304][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.929105][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.936904][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.944739][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.952564][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.960435][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.968362][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.976149][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.983968][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.991742][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 451.999575][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 452.007388][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 452.015251][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 452.023157][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 452.031043][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 452.038912][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 452.046725][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 452.054785][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 452.062686][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 452.070463][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 452.078409][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 452.086223][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 452.094100][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 452.101889][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 452.109674][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 452.117468][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 452.125245][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 452.133127][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 452.140978][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 452.148818][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: unknown main item tag 0x0 [ 452.160273][ T8216] hid-generic 0000:0000:1FFFFFFE.0015: hidraw0: HID v100.00 Device [syz0] on syz1 [ 452.207772][T16809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13282'. [ 452.216987][T16809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13282'. [ 452.383611][T16842] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 452.604364][T16853] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13291'. [ 452.832595][T16879] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13303'. [ 452.893104][T16883] pim6reg1: entered promiscuous mode [ 452.898677][T16883] pim6reg1: entered allmulticast mode [ 453.466660][T16921] tipc: Failed to remove unknown binding: 66,3,3/2886997015:1606581645/1606581646 [ 453.710390][T16934] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.720866][T16934] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.810417][T16934] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.821216][T16934] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.923698][T16934] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.934168][T16934] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.014734][T16934] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.025186][T16934] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.071485][ T8216] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 454.080082][ T8216] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 454.106869][T16934] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.115542][T16934] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.144165][T16934] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.153530][T16934] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.182938][T16934] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.191612][T16934] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.200250][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 454.200266][ T29] audit: type=1326 audit(2000000142.170:13928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.0.13342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d7c3e969 code=0x7ffc0000 [ 454.230615][ T29] audit: type=1326 audit(2000000142.170:13929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.0.13342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d7c3e969 code=0x7ffc0000 [ 454.254601][ T29] audit: type=1326 audit(2000000142.180:13930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.0.13342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f65d7c3e969 code=0x7ffc0000 [ 454.278674][ T29] audit: type=1326 audit(2000000142.180:13931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.0.13342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d7c3e969 code=0x7ffc0000 [ 454.302539][ T29] audit: type=1326 audit(2000000142.180:13932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.0.13342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65d7c3e969 code=0x7ffc0000 [ 454.308302][T16934] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.326440][ T29] audit: type=1326 audit(2000000142.180:13933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.0.13342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d7c3e969 code=0x7ffc0000 [ 454.326480][ T29] audit: type=1326 audit(2000000142.180:13934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.0.13342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65d7c3e969 code=0x7ffc0000 [ 454.326514][ T29] audit: type=1326 audit(2000000142.180:13935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.0.13342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d7c3e969 code=0x7ffc0000 [ 454.334723][T16934] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.415380][ T29] audit: type=1326 audit(2000000142.180:13936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.0.13342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65d7c3e969 code=0x7ffc0000 [ 454.439716][ T29] audit: type=1326 audit(2000000142.180:13937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.0.13342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d7c3e969 code=0x7ffc0000 [ 454.822768][T17038] loop1: detected capacity change from 0 to 512 [ 454.884455][T17038] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 454.912639][T17038] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.13356: invalid block [ 454.983725][T17038] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.13356: invalid indirect mapped block 4294967295 (level 1) [ 455.062769][T17038] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.13356: invalid indirect mapped block 4294967295 (level 1) [ 455.118605][T17038] EXT4-fs (loop1): 2 truncates cleaned up [ 455.124978][T17038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.256132][T17038] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.1.13356: path /162/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 455.336842][T17038] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.1.13356: path /162/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 455.398565][T14073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.618230][T17086] netlink: 'syz.3.13378': attribute type 2 has an invalid length. [ 455.626100][T17086] netlink: 'syz.3.13378': attribute type 1 has an invalid length. [ 455.634127][T17086] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.13378'. [ 455.648404][T17094] loop1: detected capacity change from 0 to 1024 [ 455.659764][T17094] EXT4-fs: Ignoring removed orlov option [ 455.665524][T17094] /dev/loop1: Can't open blockdev [ 455.711777][T17101] netlink: 52 bytes leftover after parsing attributes in process `syz.7.13382'. [ 455.784587][T17112] netlink: 96 bytes leftover after parsing attributes in process `syz.7.13386'. [ 455.917931][T17118] vhci_hcd: invalid port number 96 [ 455.923112][T17118] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 456.025971][T17127] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13392'. [ 456.156284][T17130] dummy0: left promiscuous mode [ 456.174550][T17140] loop6: detected capacity change from 0 to 512 [ 456.186015][T17140] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 456.196289][T17130] wireguard0: left promiscuous mode [ 456.209231][T17130] syz_tun: left promiscuous mode [ 456.218771][T17130] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.227727][T17130] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.236196][T17130] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.245566][T17130] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.265804][T17130] bond3: left promiscuous mode [ 456.297465][T17130] batadv1: left promiscuous mode [ 456.337538][T17140] EXT4-fs (loop6): 1 truncate cleaned up [ 456.344137][T17140] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.385669][T17147] loop0: detected capacity change from 0 to 512 [ 456.411997][T17104] ================================================================== [ 456.420147][T17104] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 456.428822][T17104] [ 456.431264][T17104] write to 0xffff888107f9a3a8 of 8 bytes by task 17094 on cpu 0: [ 456.439020][T17104] shmem_file_splice_read+0x444/0x5d0 [ 456.444449][T17104] splice_direct_to_actor+0x26c/0x680 [ 456.449866][T17104] do_splice_direct+0xda/0x150 [ 456.454669][T17104] do_sendfile+0x380/0x640 [ 456.459138][T17104] __x64_sys_sendfile64+0x105/0x150 [ 456.464388][T17104] x64_sys_call+0xb39/0x2fb0 [ 456.469180][T17104] do_syscall_64+0xd0/0x1a0 [ 456.473712][T17104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.479627][T17104] [ 456.481962][T17104] write to 0xffff888107f9a3a8 of 8 bytes by task 17104 on cpu 1: [ 456.489704][T17104] shmem_file_splice_read+0x444/0x5d0 [ 456.495110][T17104] splice_direct_to_actor+0x26c/0x680 [ 456.500510][T17104] do_splice_direct+0xda/0x150 [ 456.505305][T17104] do_sendfile+0x380/0x640 [ 456.509752][T17104] __x64_sys_sendfile64+0x105/0x150 [ 456.514992][T17104] x64_sys_call+0xb39/0x2fb0 [ 456.519777][T17104] do_syscall_64+0xd0/0x1a0 [ 456.524327][T17104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.530328][T17104] [ 456.532713][T17104] value changed: 0x0000000000008153 -> 0x0000000000008156 [ 456.539842][T17104] [ 456.542176][T17104] Reported by Kernel Concurrency Sanitizer on: [ 456.548365][T17104] CPU: 1 UID: 0 PID: 17104 Comm: syz.1.13376 Tainted: G W 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(voluntary) [ 456.562562][T17104] Tainted: [W]=WARN [ 456.566386][T17104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 456.576559][T17104] ================================================================== [ 456.661329][T17154] lo speed is unknown, defaulting to 1000 [ 456.701967][ T6447] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.