last executing test programs: 3m0.560717692s ago: executing program 32 (id=4383): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x20050800) 2m15.801008886s ago: executing program 1 (id=5581): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 2m15.740681997s ago: executing program 1 (id=5582): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), &(0x7f00000002c0)=@v2={0x2000000, [{0x6, 0xd62e}, {0x5, 0x1}]}, 0x14, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0xee01) 2m15.687873198s ago: executing program 1 (id=5583): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02"], 0x120}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r0, &(0x7f00000000c0)="822a0a65", 0x5ac) 2m15.646869978s ago: executing program 1 (id=5584): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$eJzs3b9rO2UYAPDn0jQJOiSCkwge6OD05dvv6pIiLRQzKRnUQYttQZogtFDwB8ZOri6Ori6C4OY/4eJ/ILgKbhYsnNzlrklqGpPatP74fJa+fe953nve69uWDvf03eeHxwdpHJ1/8lO0WknUutGNiyQ6UYvKZzGj+0UAAP9mF1kWv2Zjq+QlEdFaX1kAwBqt/Pv/u7WXBACs2RtvvvXadq+383qatmJ3+PlZP//LPv84vr59FO/HIA7jcbTjMiK7Mh7vZlk2qqe5Trw0HJ3188zhOz+U62//ElHkb0U7OsXUbP5eb2crHZvKH+V1PFXev5vnP4l2PDvn/nu9nSdz8qPfiJdfnKr/UbTjx/figxjEQVHEOD9qEZ9upemr2Ze/ffx2Xl6en4zO+s0ibiLbuOcvDQAAAAAAAAAAAAAAAAAAAAAA/2GPyt45zSj69+RTZf+djcv8k81IK53Z/jzj/KRa6Fp/oFEWX1X9eR6naZqVgZP8ejxXj/rD7BoAAAAAAAAAAAAAAAAAAAD+WU4//Oh4fzA4PLmTQdUNoHqt/7brdKdmXojFwc3JvWrlcMHKsVHFJBELy8g3sXTNv5dtD2736J65qeZvvl16na//eu/lYHOJmL85qE7X8X4y/xk2o5ppVYfk++mYRix5r8ZNl7KVjl9j7qX2yntvPF0MRgtiIllU2Cs/j59cOZNc30WjeKpz0zfLwVT6bExr+fOcf6f8SXLVrSO52x9CAAAAAAAAAAAAAAAAAABAYfLS75yL5wtTa1lzbWUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL2a/P//FQajMnmJ4EacnD7wFgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgf+CMAAP//SfdjDw==") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x20100, 0x10b) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) 2m15.349884092s ago: executing program 1 (id=5592): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) 2m14.85202256s ago: executing program 1 (id=5597): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x1000000, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x0, 0x4}, {0x3d, 0x0, 0x5}, {0xfffe}, {0x0, 0x1, 0x0, 0x7a3a}, {}, {}, {0x3}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3349, 0x0, 0x0, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 2m14.84565536s ago: executing program 33 (id=5597): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x1000000, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x0, 0x4}, {0x3d, 0x0, 0x5}, {0xfffe}, {0x0, 0x1, 0x0, 0x7a3a}, {}, {}, {0x3}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3349, 0x0, 0x0, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 1m17.097792873s ago: executing program 5 (id=7452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0) 1m16.965650886s ago: executing program 5 (id=7455): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000580)=""/119, 0x77}], 0x1}, 0x0) 1m16.144928727s ago: executing program 5 (id=7478): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r0) 1m16.061317839s ago: executing program 5 (id=7481): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m15.954047311s ago: executing program 5 (id=7485): r0 = creat(&(0x7f0000000600)='./file0\x00', 0xe5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) write$qrtrtun(r0, &(0x7f0000001880)="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", 0x45c) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r3, 0x0, 0x0}, 0x10) 1m15.915384961s ago: executing program 5 (id=7489): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2c) 1m15.865452222s ago: executing program 34 (id=7489): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2c) 58.8608144s ago: executing program 2 (id=7943): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) io_submit(r1, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r0}, 0x0]) 58.567028434s ago: executing program 2 (id=7951): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r2) 58.469047136s ago: executing program 2 (id=7954): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0), 0x4) 57.548522739s ago: executing program 2 (id=7978): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 57.210435894s ago: executing program 2 (id=7982): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket(0x10, 0x803, 0x0) r2 = openat$rfkill(0xffffff9c, &(0x7f0000000180), 0xc81, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1}, 0x8) 56.182378139s ago: executing program 2 (id=8005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 56.162790579s ago: executing program 35 (id=8005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 51.153926152s ago: executing program 8 (id=8113): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="4a05d7748f6d54268c128e916453be81e4217cd1ce0405d1012cf966f6f429690f265f86cb1a6b264b5a02a40ddfdcb8c416ab848fc18bcd54b381725e14baf8195514179b70dc543bc71c1d7ad3644fceb4bc1ab70352685040e120eb5406360b0c48e678f1de0003f50dd72ef172134533fee4fbf6be83faee83242d7ad91c20ca301ea964d4693c7c420ac44f3a582c1771d5e1653ef09bc2e3eff030246552a56cb4e601ac83ced563dc4e945fb95d36bcadedbb3d0645a0", 0xba}, {&(0x7f0000000f00)="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", 0xb47}], 0x2}}], 0x1, 0x800) sendto$inet6(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0xa0, 0x0) 51.029218695s ago: executing program 8 (id=8116): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 50.998641925s ago: executing program 8 (id=8118): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x7, 0x30}, 0xc) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x8081, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0xc080}, 0x4bf1ee75127f9ce6) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 50.929886766s ago: executing program 8 (id=8120): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18004, &(0x7f0000000400), 0x3, 0x4cd, &(0x7f0000001180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0xb, 0x6, 0xfffffff0, 0x9}) 50.736833439s ago: executing program 8 (id=8123): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) close(r0) 49.454049778s ago: executing program 8 (id=8160): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 49.453645958s ago: executing program 36 (id=8160): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 41.249885797s ago: executing program 3 (id=8371): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgctl$IPC_RMID(0x0, 0x0) 41.190859298s ago: executing program 3 (id=8373): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') mkdir(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 40.951597651s ago: executing program 3 (id=8376): ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) openat$sysfs(0xffffffffffffff9c, 0x0, 0x27f8e39913961d64, 0x0) unshare(0x28000600) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) 40.822572613s ago: executing program 3 (id=8377): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 40.701751645s ago: executing program 3 (id=8379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@remote, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 40.657269476s ago: executing program 3 (id=8381): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c001}, 0x4004110) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) dup2(r2, r3) 40.656940186s ago: executing program 37 (id=8381): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c001}, 0x4004110) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) dup2(r2, r3) 3.474839869s ago: executing program 6 (id=9086): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x5) r3 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x3, 0x2}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 3.353286011s ago: executing program 6 (id=9090): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 2.811346349s ago: executing program 6 (id=9095): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2.539135053s ago: executing program 6 (id=9096): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x4, 0x7, 0x4, @private0, @dev={0xfe, 0x80, '\x00', 0x24}, 0x7, 0x8000, 0x10000, 0xa}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=@getlink={0x16c, 0x12, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x41080, 0x1200}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xaba9}, @IFLA_VFINFO_LIST={0x12c, 0x16, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x3ff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x1000}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1ff, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x248, 0x1}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffffa, @remote}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4dd3, 0x645}}]}, {0xa0, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x9}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3, 0x4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6, 0x8}}, @IFLA_VF_MAC={0x28, 0x1, {0xfffffffe, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x700d, 0x10d4}}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0x6, 0xfff}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x62bc4e50, 0x1}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0x59c, 0x8, 0x8100}}]}]}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}, @IFLA_LINKMODE={0x5, 0x11, 0xab}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x10}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.370255666s ago: executing program 4 (id=9100): r0 = dup(0xffffffffffffffff) write$binfmt_elf64(r0, 0x0, 0x7c8) mount$9p_fd(0x0, 0x0, 0x0, 0x8080, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0]) mq_timedreceive(r0, 0x0, 0x0, 0x100000000, 0x0) socket(0x2, 0x80805, 0x0) capget(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r3, r2, r2, 0x0) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x5b0) 2.322273436s ago: executing program 4 (id=9103): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 2.189527618s ago: executing program 7 (id=9107): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88240, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5211eb8e5ce6935e9bbd76e32c4c956e"}, 0x11, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 2.189114948s ago: executing program 6 (id=9108): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 2.174591468s ago: executing program 4 (id=9109): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) syz_clone(0x4080, &(0x7f0000000280), 0x0, 0x0, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 2.029998281s ago: executing program 0 (id=9111): socket(0x2, 0x80805, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$kcm(0x11, 0x200000000000002, 0x300) sendmmsg$inet(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7c7370978389366174db5fbc99dbe958f8c1690cd695dfbe6c", 0x181}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.02898701s ago: executing program 7 (id=9112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 1.965267431s ago: executing program 0 (id=9113): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r1, &(0x7f0000000f40)=[{&(0x7f0000000400)="2e9b3d93dfb6c575963f88640000000000", 0x11}, {&(0x7f0000000180)='d', 0x1}, {0x0}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1.805898933s ago: executing program 7 (id=9115): r0 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r0, r0, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)="05", 0x1}]) 1.713461035s ago: executing program 7 (id=9118): setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, &(0x7f0000000880)="22cff58056ac", 0x6, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f0000000280)=""/155}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffafff, 0x1000, 0x2, 0x33d}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.466032838s ago: executing program 7 (id=9119): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_usbip_server_init(0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 1.465160118s ago: executing program 9 (id=9120): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) lseek(0xffffffffffffffff, 0xffffff7f00000000, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) futex(&(0x7f0000002e80), 0x80, 0x0, &(0x7f0000002ec0), 0x0, 0x1) 1.294857871s ago: executing program 9 (id=9121): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000", @ANYRES32=r3], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x420, 0x0, 0x2b8, 0x25c, 0x0, 0x7, 0x350, 0x3a8, 0x3a8, 0x350, 0x3a8, 0x7fffffe, 0x0, {[{{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macvlan1\x00', 'dvmrp0\x00'}, 0x16c, 0x218, 0x260, 0xa010000, {}, [@common=@unspec=@quota={{0x38}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0xc, [@dev, @dev, @empty, @remote, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @rand_addr=' \x01\x00', @private1, @remote, @loopback, @empty, @private2, @dev, @mcast1, @rand_addr=' \x01\x00']}}]}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) 1.193516373s ago: executing program 4 (id=9122): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x41, 0x553, &(0x7f0000000c80)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x16, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000b400000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @loopback}, 0x3, 0x1}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="a1ff5ecf002394c26f198932a0f1968488b6a7c0814318cb5c676ebb737b163d8fa07f33a8a65e41e0b8c45a24c4181ab2221f2a696e86651915e2a14c3a2b5366459d1cb4bcc1ae5ba4fda704eed3313d9d17431e61ea50b66d0cde7c94b8bd", 0x60}, {&(0x7f0000000480)="e8e644a64f6e11e0e183eea09b813056de25919494760220debdee2cd0bc1d5e2261f07b3d708931d9f3d932d53cb4e1d79a5c85385716200e39cac1d9d35b963a9da4ad9068b0a10fb45f0faca09bc603ede0093fb5765eec18dd333a195ea7eadb307be4c4819e69c5154b358c5e2b5a50a87c2020feb68b6db487b3", 0xfffffffffffffcaf}, {&(0x7f0000000300)="8b67bc3bc3686025b3884fda58760e4137e2bece4a43954279b6215aab8b4eff580f469d51c793fc306b755eb0de0293cf203f4785a66757e7e7d1017681e011e10ce3c77cc8e27e5350aa4bc627acb2b8ad8095dc30afa24140f027e68f335c4b81f2d72f4eb39d5fa74372d19a22870e03139bd4", 0x75}, {&(0x7f0000000380)="44ef8b90eab7af23234ceee202ec6c95d5c7f2d438b31d25dd013f7c1dbc00cd86f1feea916da48c903c592774336f1281489c6a64573d8f76ae5ef31cd5410b2d1c1b0fa9eb3a8abc5e3b1693d05b3268bb832764b9ffd1ce7557a6d9a7877904f3e3555f39294acc4f299f60b131d8d91a04bad7b77f3dd142a0f392e1b85e89fb4e9dc961ce4c4f0366ae96a9e2b38d8129c4", 0x94}], 0x4}, 0x8050) ftruncate(r0, 0x2007ffc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0xb2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.026024655s ago: executing program 9 (id=9123): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0) close(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev, @mcast2, {[], @ndisc_rs}}}}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)) 1.022135145s ago: executing program 0 (id=9124): shutdown(0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0xfc}}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 970.193106ms ago: executing program 0 (id=9125): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 862.129377ms ago: executing program 0 (id=9126): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) sendto$inet6(r3, &(0x7f0000000480)="aa", 0x1, 0x20000000, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="b0", 0x1}], 0x1}, 0x4) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 846.334228ms ago: executing program 6 (id=9127): ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, 0x0) setresuid(0x0, 0xffffffffffffffff, 0xee00) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0xb) 685.07438ms ago: executing program 4 (id=9128): r0 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x10440, 0x0, 0x4, 0x0, 0xfff}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r3) close(r3) 527.962932ms ago: executing program 4 (id=9129): setgid(0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(0x0, 0xd931d3864d39ddd8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x7, 0x7, 0x91, 0x7, {{0x18, 0x4, 0x0, 0x26, 0x60, 0x67, 0x0, 0x2, 0x2f, 0x0, @broadcast, @private=0xa010102, {[@cipso={0x86, 0x1a, 0x1, [{0x1, 0xb, "22a37cc0f830a804cc"}, {0x2, 0x2}, {0x6, 0x7, "e4aa94cbf3"}]}, @ssrr={0x89, 0x13, 0x87, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010100]}, @lsrr={0x83, 0x1f, 0x7, [@broadcast, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast1]}]}}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) sendfile(r1, r0, 0x0, 0x7ffff000) 219.169526ms ago: executing program 9 (id=9130): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = dup3(r0, r2, 0x80000) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x800) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 138.629278ms ago: executing program 7 (id=9131): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) munmap(&(0x7f0000002000/0x3000)=nil, 0x3000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r1, 0x4b72, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) unshare(0x8000000) r3 = mq_open(&(0x7f00000000c0)='${$\x00', 0x40, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x80, 0x5, 0x1}]}) socket$nl_route(0x10, 0x3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 53.859659ms ago: executing program 9 (id=9132): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x0, 0x0, 0x220, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x88000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x10}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@private=0xa010102, @rand_addr, 0x0, 0x0, 'bridge_slave_0\x00', 'gretap0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x122}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x5]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x10) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 7.21676ms ago: executing program 0 (id=9133): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="757466382c626c6f636b3d307830303030303030303030303030323030006e6f726f636b2c63727566742c6d61703d6f66662c646d6f64653d3078303430303030303030303030303063664173657373696f6e3d3078303030303030303030303030303033382c756e686964652c756e686964652c6769643d29e0cd5c372ab078c28fb05c6421428d066455368833565fd726743513f4466efa8d4fba06d57341875f5775ab343c0f6bc59fbde784ec3597e0e286d8d0dbf360afa3bc5c145b6e4f8b0305932fb55ff13f9fcb5035769f5fca33ac02bdeacb24c58103edc3d8b46df7614aa493952584ee662174309b11a4ad19e64dcdeeca1c148170b8d1aaf26082364b0d90d63d8502ffa63dde945e4612ac134315f389af667a04931ad25ff10b9b5107e517dbbcf5dcb60f564f54b344218d9325b53e829c38c96c69adc9e745202923a1b8124333cce0a8f1c748d42a272eb3e5502051090f1ac34fe5e8f038", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x696, &(0x7f0000000140)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000c00) 0s ago: executing program 9 (id=9134): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) unshare(0x64000600) kernel console output (not intermixed with test programs): -000000000000 r/w without journal. Quota mode: writeback. [ 344.018840][T22623] loop6: detected capacity change from 0 to 8192 [ 344.030673][T22619] EXT4-fs warning (device loop8): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 344.254490][T22634] loop6: detected capacity change from 0 to 128 [ 344.302684][T22636] pim6reg: entered allmulticast mode [ 344.311928][T22636] pim6reg: left allmulticast mode [ 344.442946][T22642] loop7: detected capacity change from 0 to 1024 [ 344.470085][T22642] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 344.493769][T22642] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.516862][T22642] EXT4-fs error (device loop7): ext4_map_blocks:816: inode #15: block 1: comm syz.7.8130: lblock 1 mapped to illegal pblock 1 (length 4) [ 344.531594][T22642] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 4 with error 117 [ 344.532452][T22647] vhci_hcd: default hub control req: 230a v0006 i0006 l0 [ 344.543944][T22642] EXT4-fs (loop7): This should not happen!! Data will be lost [ 344.543944][T22642] [ 344.619772][T21071] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 345.082036][T22689] SELinux: ebitmap: truncated map [ 345.088282][T22689] SELinux: failed to load policy [ 345.167120][T22512] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 345.207715][T22624] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 345.220107][T22624] EXT4-fs (loop8): This should not happen!! Data will be lost [ 345.220107][T22624] [ 345.229787][T22624] EXT4-fs (loop8): Total free blocks count 0 [ 345.235794][T22624] EXT4-fs (loop8): Free/Dirty block details [ 345.241702][T22624] EXT4-fs (loop8): free_blocks=0 [ 345.246708][T22624] EXT4-fs (loop8): dirty_blocks=5717 [ 345.252331][T22624] EXT4-fs (loop8): Block reservation details [ 345.258438][T22624] EXT4-fs (loop8): i_reserved_data_blocks=5717 [ 345.278213][T20079] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.296831][T22624] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.362901][T20079] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.419858][T20079] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.435745][T22709] loop3: detected capacity change from 0 to 8192 [ 345.460393][T20079] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.565729][T20079] bridge_slave_1: left allmulticast mode [ 345.571534][T20079] bridge_slave_1: left promiscuous mode [ 345.577307][T20079] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.593985][T20079] bridge_slave_0: left allmulticast mode [ 345.599805][T20079] bridge_slave_0: left promiscuous mode [ 345.605646][T20079] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.700635][T20079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.711745][T20079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.729100][T20079] bond0 (unregistering): Released all slaves [ 345.858228][T20079] hsr_slave_0: left promiscuous mode [ 345.865879][T20079] hsr_slave_1: left promiscuous mode [ 345.878389][T20079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.885911][T20079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.936440][T20079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.944092][T20079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.960144][T20079] veth1_macvtap: left promiscuous mode [ 345.965773][T20079] veth0_macvtap: left promiscuous mode [ 345.972572][T20079] veth1_vlan: left promiscuous mode [ 345.978121][T20079] veth0_vlan: left promiscuous mode [ 346.159759][T20079] team0 (unregistering): Port device team_slave_1 removed [ 346.170082][T20079] team0 (unregistering): Port device team_slave_0 removed [ 346.223182][T22710] lo speed is unknown, defaulting to 1000 [ 346.330383][T22763] loop0: detected capacity change from 0 to 2048 [ 346.378336][T22763] Alternate GPT is invalid, using primary GPT. [ 346.384679][T22763] loop0: p1 p2 p3 [ 346.420761][T22710] chnl_net:caif_netlink_parms(): no params data found [ 346.514964][T22710] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.522325][T22710] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.532116][T22710] bridge_slave_0: entered allmulticast mode [ 346.546487][T22710] bridge_slave_0: entered promiscuous mode [ 346.555057][T22710] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.562260][T22710] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.569553][T22710] bridge_slave_1: entered allmulticast mode [ 346.576146][T22710] bridge_slave_1: entered promiscuous mode [ 346.595685][T22710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.606590][T22710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.632898][T22710] team0: Port device team_slave_0 added [ 346.649137][T22710] team0: Port device team_slave_1 added [ 346.680250][T22710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.687276][T22710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.713307][T22710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.733192][T22791] loop7: detected capacity change from 0 to 512 [ 346.745000][T22710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.752050][T22710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.778159][T22710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.802769][T22791] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.823779][T22791] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.839398][T22710] hsr_slave_0: entered promiscuous mode [ 346.845698][T22710] hsr_slave_1: entered promiscuous mode [ 346.853073][T22710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.861656][T22710] Cannot create hsr debugfs directory [ 346.871260][T21071] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.883802][ T29] kauditd_printk_skb: 1542 callbacks suppressed [ 346.883818][ T29] audit: type=1400 audit(1751853190.251:68101): avc: denied { module_request } for pid=22710 comm="syz-executor" kmod="rtnl-link-virt_wifi" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 346.916244][ T29] audit: type=1400 audit(1751853190.261:68102): avc: denied { create } for pid=22799 comm="syz.6.8196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 346.936171][ T29] audit: type=1400 audit(1751853190.281:68103): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=10.128.0.163 src=30036 daddr=10.128.0.208 dest=54406 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 346.961619][ T29] audit: type=1400 audit(1751853190.281:68104): avc: denied { recv } for pid=3797 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.208 dest=54406 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 346.989063][ T29] audit: type=1400 audit(1751853190.291:68105): avc: denied { read write } for pid=21071 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 347.013522][ T29] audit: type=1400 audit(1751853190.291:68106): avc: denied { open } for pid=21071 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 347.037849][ T29] audit: type=1400 audit(1751853190.291:68107): avc: denied { ioctl } for pid=21071 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 347.063893][ T29] audit: type=1400 audit(1751853190.291:68108): avc: denied { prog_load } for pid=22799 comm="syz.6.8196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 347.083244][ T29] audit: type=1400 audit(1751853190.291:68109): avc: denied { bpf } for pid=22799 comm="syz.6.8196" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 347.104064][ T29] audit: type=1400 audit(1751853190.291:68110): avc: denied { perfmon } for pid=22799 comm="syz.6.8196" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 347.185883][T22809] loop3: detected capacity change from 0 to 164 [ 347.189860][T22808] loop7: detected capacity change from 0 to 2048 [ 347.218967][T22809] syz.3.8199: attempt to access beyond end of device [ 347.218967][T22809] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 347.243830][T22808] Alternate GPT is invalid, using primary GPT. [ 347.250590][T22808] loop7: p1 p2 p3 [ 347.279148][T22710] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 347.286050][T22809] syz.3.8199: attempt to access beyond end of device [ 347.286050][T22809] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 347.308083][T22710] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 347.320250][T22710] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 347.333111][T22710] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 347.518768][T22710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.540287][T22710] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.560420][T20056] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.567583][T20056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.585791][T20056] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.592962][T20056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.894340][T22860] loop3: detected capacity change from 0 to 512 [ 347.902603][T22860] EXT4-fs: Ignoring removed bh option [ 347.909562][T22860] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 347.918745][T22860] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 347.970984][T22860] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 347.986959][T22710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.994867][T22860] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 348.013325][T22860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.104175][ T3797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.198145][T22886] loop3: detected capacity change from 0 to 1024 [ 348.206272][T22886] EXT4-fs: Ignoring removed nobh option [ 348.236762][T22886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.290875][T22886] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.8221: Allocating blocks 385-513 which overlap fs metadata [ 348.375923][T22886] EXT4-fs (loop3): pa ffff888106e8bb60: logic 16, phys. 129, len 24 [ 348.376967][T22894] loop7: detected capacity change from 0 to 8192 [ 348.384087][T22886] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 348.420204][T22894] loop7: p2 p3 p4 [ 348.424036][T22894] loop7: p2 start 452985600 is beyond EOD, truncated [ 348.430869][T22894] loop7: p3 size 33554432 extends beyond EOD, truncated [ 348.446058][T22894] loop7: p4 start 8388607 is beyond EOD, truncated [ 348.467587][ T3797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.621939][T22710] veth0_vlan: entered promiscuous mode [ 348.664277][T22710] veth1_vlan: entered promiscuous mode [ 348.775045][T22710] veth0_macvtap: entered promiscuous mode [ 348.786924][T22924] loop6: detected capacity change from 0 to 8192 [ 348.803891][T22710] veth1_macvtap: entered promiscuous mode [ 348.823907][T22710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.835680][T22710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.848039][T22710] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.856817][T22710] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.865721][T22710] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.874560][T22710] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.924257][T22924] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 348.932856][T22924] FAT-fs (loop6): Filesystem has been set read-only [ 349.195959][T22954] netlink: 7 bytes leftover after parsing attributes in process `syz.7.8246'. [ 349.205134][T22954] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8246'. [ 349.364317][T22966] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8252'. [ 349.613994][T22986] loop9: detected capacity change from 0 to 512 [ 349.623171][T22986] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 349.633047][T22986] EXT4-fs (loop9): orphan cleanup on readonly fs [ 349.635842][T22984] loop6: detected capacity change from 0 to 8192 [ 349.640817][T22986] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.8262: Failed to acquire dquot type 1 [ 349.660893][T22986] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.8262: bg 0: block 40: padding at end of block bitmap is not set [ 349.675385][T22986] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 349.684558][T22986] EXT4-fs (loop9): 1 truncate cleaned up [ 349.692233][T22986] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 349.723382][T22710] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.782326][T22988] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 349.790219][T22988] FAT-fs (loop6): Filesystem has been set read-only [ 349.825002][T22984] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 349.836741][T22984] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 349.885364][T16736] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 349.921781][T22992] loop9: detected capacity change from 0 to 512 [ 349.974936][T22992] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 350.004475][T22992] EXT4-fs (loop9): orphan cleanup on readonly fs [ 350.030470][T22992] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 350.052367][T22992] EXT4-fs (loop9): 1 truncate cleaned up [ 350.064491][T22992] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.133156][T22710] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.233829][T23018] loop9: detected capacity change from 0 to 512 [ 350.245508][T23018] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 350.258362][T23020] loop6: detected capacity change from 0 to 512 [ 350.268554][T23018] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 350.280598][T23018] EXT4-fs error (device loop9): ext4_iget_extra_inode:5035: inode #15: comm syz.9.8276: corrupted in-inode xattr: e_value size too large [ 350.282089][T23020] EXT4-fs (loop6): too many log groups per flexible block group [ 350.300094][T23018] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.8276: couldn't read orphan inode 15 (err -117) [ 350.302531][T23020] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 350.318862][T23018] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.334830][T23020] EXT4-fs (loop6): mount failed [ 350.400417][T22710] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.531939][T23044] loop9: detected capacity change from 0 to 128 [ 350.563602][T20104] FAT-fs (loop9): error, invalid FAT chain (i_pos 548, last_block 8) [ 350.571902][T20104] FAT-fs (loop9): Filesystem has been set read-only [ 350.593148][T20104] FAT-fs (loop9): error, corrupted file size (i_pos 548, 522) [ 350.664268][T23047] loop7: detected capacity change from 0 to 8192 [ 350.741988][T23059] can0: slcan on ttyS3. [ 350.788627][T23059] can0 (unregistered): slcan off ttyS3. [ 350.855510][T23065] loop7: detected capacity change from 0 to 1024 [ 350.866822][T23065] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 350.881592][T23065] EXT4-fs error (device loop7): ext4_map_blocks:816: inode #3: block 1: comm syz.7.8296: lblock 1 mapped to illegal pblock 1 (length 1) [ 350.897231][T23065] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.8296: Failed to acquire dquot type 0 [ 350.910489][T23065] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.8296: Freeing blocks not in datazone - block = 0, count = 4096 [ 350.924300][T23065] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.8296: Invalid inode bitmap blk 0 in block_group 0 [ 350.937682][T20104] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:60: lblock 1 mapped to illegal pblock 1 (length 1) [ 350.955898][T20104] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:60: Failed to release dquot type 0 [ 350.971560][T23065] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 350.983574][T23065] EXT4-fs (loop7): 1 orphan inode deleted [ 350.995756][T23065] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.024118][T23065] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.193504][T23092] loop6: detected capacity change from 0 to 2048 [ 351.231196][T23092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.308170][T16736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.586331][T23131] loop6: detected capacity change from 0 to 8192 [ 351.868172][T23162] syzkaller1: entered promiscuous mode [ 351.873789][T23162] syzkaller1: entered allmulticast mode [ 351.887729][ T29] kauditd_printk_skb: 1802 callbacks suppressed [ 351.887744][ T29] audit: type=1400 audit(1751853195.251:69908): avc: denied { recv } for pid=23161 comm="syz.6.8336" saddr=10.128.0.163 src=30036 daddr=10.128.0.208 dest=54406 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 351.926793][ T29] audit: type=1400 audit(1751853195.291:69909): avc: denied { load_policy } for pid=23166 comm="syz.7.8338" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 351.927105][T23167] SELinux: failed to load policy [ 351.966445][ T29] audit: type=1400 audit(1751853195.331:69910): avc: denied { read write } for pid=3797 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 351.990900][ T29] audit: type=1400 audit(1751853195.331:69911): avc: denied { open } for pid=3797 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 352.030754][ T29] audit: type=1400 audit(1751853195.341:69912): avc: denied { ioctl } for pid=21071 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 352.056594][ T29] audit: type=1400 audit(1751853195.371:69913): avc: denied { prog_load } for pid=23168 comm="syz.7.8340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 352.075855][ T29] audit: type=1400 audit(1751853195.371:69914): avc: denied { bpf } for pid=23168 comm="syz.7.8340" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 352.096751][ T29] audit: type=1400 audit(1751853195.371:69915): avc: denied { perfmon } for pid=23168 comm="syz.7.8340" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 352.118494][ T29] audit: type=1400 audit(1751853195.371:69916): avc: denied { prog_run } for pid=23168 comm="syz.7.8340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 352.137866][ T29] audit: type=1400 audit(1751853195.381:69917): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.0.208 dest=54406 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 352.211035][T23175] loop6: detected capacity change from 0 to 128 [ 352.225749][T23175] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 352.233695][T23175] FAT-fs (loop6): Filesystem has been set read-only [ 352.241575][T23175] syz.6.8342: attempt to access beyond end of device [ 352.241575][T23175] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 352.265696][T23175] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 352.273625][T23175] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 352.287998][T23175] syz.6.8342: attempt to access beyond end of device [ 352.287998][T23175] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 352.297009][T23184] tipc: Started in network mode [ 352.303368][T23175] syz.6.8342: attempt to access beyond end of device [ 352.303368][T23175] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 352.306178][T23184] tipc: Node identity 4, cluster identity 4711 [ 352.306190][T23184] tipc: Node number set to 4 [ 352.319707][T23175] syz.6.8342: attempt to access beyond end of device [ 352.319707][T23175] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 352.344916][T23175] syz.6.8342: attempt to access beyond end of device [ 352.344916][T23175] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 352.359315][T23175] syz.6.8342: attempt to access beyond end of device [ 352.359315][T23175] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 352.373976][T23175] syz.6.8342: attempt to access beyond end of device [ 352.373976][T23175] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 352.409892][T23175] syz.6.8342: attempt to access beyond end of device [ 352.409892][T23175] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 352.423848][T23175] syz.6.8342: attempt to access beyond end of device [ 352.423848][T23175] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 352.438382][T23175] syz.6.8342: attempt to access beyond end of device [ 352.438382][T23175] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 352.444856][T23189] loop7: detected capacity change from 0 to 1024 [ 352.483950][T23189] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.516653][T23189] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 15 with error 28 [ 352.529211][T23189] EXT4-fs (loop7): This should not happen!! Data will be lost [ 352.529211][T23189] [ 352.538908][T23189] EXT4-fs (loop7): Total free blocks count 0 [ 352.544923][T23189] EXT4-fs (loop7): Free/Dirty block details [ 352.550936][T23189] EXT4-fs (loop7): free_blocks=0 [ 352.555968][T23189] EXT4-fs (loop7): dirty_blocks=0 [ 352.561133][T23189] EXT4-fs (loop7): Block reservation details [ 352.567148][T23189] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 352.670441][T21071] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.749629][T23205] loop0: detected capacity change from 0 to 2048 [ 352.780548][T23205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.808038][T23205] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #2: comm syz.0.8354: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 352.856279][T23205] EXT4-fs (loop0): Remounting filesystem read-only [ 352.939489][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.115701][T23226] pim6reg1: entered promiscuous mode [ 353.121192][T23226] pim6reg1: entered allmulticast mode [ 353.142199][T23224] loop9: detected capacity change from 0 to 8192 [ 353.273107][T23236] loop6: detected capacity change from 0 to 512 [ 353.321275][T23236] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.334927][T23236] ext4 filesystem being mounted at /571/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.378913][T23236] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm +}[@: corrupted inode contents [ 353.394984][T23236] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #18: comm +}[@: mark_inode_dirty error [ 353.408070][T23236] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm +}[@: corrupted inode contents [ 353.421865][T23236] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #18: comm +}[@: mark_inode_dirty error [ 353.436628][T23236] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #18: comm +}[@: mark inode dirty (error -117) [ 353.449515][T23236] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 353.482588][T16736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.530177][T23246] loop6: detected capacity change from 0 to 512 [ 353.539479][T23246] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 353.554826][T23246] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 353.571084][T23246] EXT4-fs (loop6): 1 truncate cleaned up [ 353.577152][T23246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.616134][T16736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.674719][T23253] loop3: detected capacity change from 0 to 512 [ 353.683176][T23253] EXT4-fs: Ignoring removed orlov option [ 353.689543][T23253] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 353.700938][T23253] EXT4-fs (loop3): orphan cleanup on readonly fs [ 353.708920][T23253] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8373: bg 0: block 248: padding at end of block bitmap is not set [ 353.724132][T23253] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.8373: Failed to acquire dquot type 1 [ 353.736744][T23253] EXT4-fs (loop3): 1 truncate cleaned up [ 353.743130][T23253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 353.763129][T23253] EXT4-fs: Ignoring removed orlov option [ 353.769260][T23253] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 353.778406][T23253] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 353.811860][T23253] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.8373: Abort forced by user [ 353.822573][T23253] EXT4-fs (loop3): Remounting filesystem read-only [ 353.829248][T23253] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 353.837921][T23253] ext4 filesystem being remounted at /1655/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.885430][ T3797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.008773][T23260] netlink: 'syz.7.8375': attribute type 10 has an invalid length. [ 354.032292][T23264] loop3: detected capacity change from 0 to 1024 [ 354.043847][T23264] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.8377: Failed to acquire dquot type 0 [ 354.055986][T23260] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 354.058228][T23264] EXT4-fs (loop3): 1 truncate cleaned up [ 354.105101][ T3797] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz-executor: Failed to acquire dquot type 0 [ 354.282153][T23280] loop9: detected capacity change from 0 to 1024 [ 354.291064][T23280] ext4: Unknown parameter 'subj_role' [ 354.399856][T23272] lo speed is unknown, defaulting to 1000 [ 354.535990][T23291] syzkaller1: entered promiscuous mode [ 354.541599][T23291] syzkaller1: entered allmulticast mode [ 354.566456][T23292] tipc: Started in network mode [ 354.571472][T23292] tipc: Node identity 8ee05c6b391f, cluster identity 4711 [ 354.578828][T23292] tipc: Enabled bearer , priority 0 [ 354.598487][T23292] tipc: Disabling bearer [ 354.666211][T23305] loop9: detected capacity change from 0 to 256 [ 354.824022][T23272] chnl_net:caif_netlink_parms(): no params data found [ 354.940924][T23316] loop7: detected capacity change from 0 to 1024 [ 354.965474][T23316] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 355.002554][T23316] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.8396: Invalid block bitmap block 0 in block_group 0 [ 355.033911][T23325] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8398'. [ 355.047808][T23272] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.054957][T23272] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.068320][T23316] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.8396: Failed to acquire dquot type 0 [ 355.090273][T23327] loop9: detected capacity change from 0 to 128 [ 355.098784][T23327] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 355.110991][T23272] bridge_slave_0: entered allmulticast mode [ 355.117595][T23272] bridge_slave_0: entered promiscuous mode [ 355.119459][T23316] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.8396: Freeing blocks not in datazone - block = 0, count = 4096 [ 355.129446][T23272] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.144003][T23272] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.151183][T23327] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 355.164919][T23316] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.8396: Invalid inode bitmap blk 0 in block_group 0 [ 355.174623][T23272] bridge_slave_1: entered allmulticast mode [ 355.177987][T20079] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:36: Failed to release dquot type 0 [ 355.184602][T23272] bridge_slave_1: entered promiscuous mode [ 355.212623][T23316] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 355.226549][T23316] EXT4-fs (loop7): 1 orphan inode deleted [ 355.283072][T23272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.299309][T23272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.365350][T23272] team0: Port device team_slave_0 added [ 355.383663][T23272] team0: Port device team_slave_1 added [ 355.418525][T23344] loop6: detected capacity change from 0 to 1024 [ 355.445812][T23272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.452840][T23272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.478840][T23272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.495748][T23348] loop9: detected capacity change from 0 to 1024 [ 355.513438][T23348] EXT4-fs: Ignoring removed nomblk_io_submit option [ 355.528193][T23344] ext4 filesystem being mounted at /579/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.540712][T23348] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 355.545921][T23272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.556549][T23272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.582747][T23272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.616262][T23344] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 355.650055][T23344] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 355.662594][T23344] EXT4-fs (loop6): This should not happen!! Data will be lost [ 355.662594][T23344] [ 355.672315][T23344] EXT4-fs (loop6): Total free blocks count 0 [ 355.678390][T23344] EXT4-fs (loop6): Free/Dirty block details [ 355.684379][T23344] EXT4-fs (loop6): free_blocks=4293918720 [ 355.690186][T23344] EXT4-fs (loop6): dirty_blocks=80 [ 355.695383][T23344] EXT4-fs (loop6): Block reservation details [ 355.701440][T23344] EXT4-fs (loop6): i_reserved_data_blocks=5 [ 355.721533][T23272] hsr_slave_0: entered promiscuous mode [ 355.748744][T23272] hsr_slave_1: entered promiscuous mode [ 355.772602][T23272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.796685][T23272] Cannot create hsr debugfs directory [ 355.812052][T23359] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.8411'. [ 355.885898][T23368] loop7: detected capacity change from 0 to 512 [ 355.906142][T23368] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 355.947485][T23368] EXT4-fs (loop7): 1 truncate cleaned up [ 355.989540][T23375] loop9: detected capacity change from 0 to 2048 [ 356.097318][T23376] loop6: detected capacity change from 0 to 8192 [ 356.139172][T23376] loop6: p2 p3 p4 [ 356.142995][T23376] loop6: p2 start 452985600 is beyond EOD, truncated [ 356.149859][T23376] loop6: p3 size 33554432 extends beyond EOD, truncated [ 356.167950][T23376] loop6: p4 start 8388607 is beyond EOD, truncated [ 356.233618][T23272] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 356.280463][T23272] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 356.298307][T23272] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 356.312018][T23272] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 356.332319][T23391] loop6: detected capacity change from 0 to 512 [ 356.343624][T23391] EXT4-fs: Ignoring removed mblk_io_submit option [ 356.357376][T23391] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 356.385102][T23391] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 356.409257][T23391] EXT4-fs (loop6): orphan cleanup on readonly fs [ 356.420344][T23391] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.8424: Invalid block bitmap block 0 in block_group 0 [ 356.435596][T23272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.448041][T23391] EXT4-fs (loop6): Remounting filesystem read-only [ 356.455642][T23391] EXT4-fs (loop6): 1 orphan inode deleted [ 356.467004][T23272] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.489603][T20079] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.496729][T20079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.512512][T20079] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.519670][T20079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.668334][T23415] loop7: detected capacity change from 0 to 512 [ 356.690280][T23415] EXT4-fs (loop7): orphan cleanup on readonly fs [ 356.696548][T23272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.704368][T23415] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.8430: Failed to acquire dquot type 1 [ 356.728997][T23415] EXT4-fs (loop7): 1 truncate cleaned up [ 356.790147][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.798113][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.805561][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.813062][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.820511][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.828033][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.835458][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.843038][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.850536][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.857997][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.865438][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.872952][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.880559][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.888078][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.895493][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.902975][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.910418][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.914056][ T29] kauditd_printk_skb: 1317 callbacks suppressed [ 356.914077][ T29] audit: type=1400 audit(1751853200.280:71221): avc: denied { module_request } for pid=23272 comm="syz-executor" kmod="netdev-virt_wifi0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 356.917857][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.934435][ T29] audit: type=1400 audit(1751853200.290:71222): avc: denied { prog_load } for pid=23426 comm="syz.0.8433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 356.946693][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.946781][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.946807][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.946834][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.946858][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.946906][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.954376][ T29] audit: type=1400 audit(1751853200.290:71223): avc: denied { bpf } for pid=23426 comm="syz.0.8433" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 356.973664][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 356.981046][ T29] audit: type=1400 audit(1751853200.290:71224): avc: denied { perfmon } for pid=23426 comm="syz.0.8433" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 356.981119][ T29] audit: type=1400 audit(1751853200.300:71225): avc: denied { create } for pid=23426 comm="syz.0.8433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 356.988528][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.002516][ T29] audit: type=1400 audit(1751853200.370:71226): avc: denied { map_create } for pid=23426 comm="syz.0.8433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.003316][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.010811][ T29] audit: type=1400 audit(1751853200.370:71227): avc: denied { bpf } for pid=23426 comm="syz.0.8433" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 357.010843][ T29] audit: type=1400 audit(1751853200.370:71228): avc: denied { map_read map_write } for pid=23426 comm="syz.0.8433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.011699][ T29] audit: type=1400 audit(1751853200.380:71229): avc: denied { recv } for pid=23 comm="kworker/1:0" saddr=10.128.0.163 src=30036 daddr=10.128.0.208 dest=54406 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 357.018509][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.060644][ T29] audit: type=1400 audit(1751853200.430:71230): avc: denied { sys_module } for pid=23272 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 357.067619][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.067649][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.067700][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.067778][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.091411][T23429] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 357.094843][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.262982][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.270468][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.277946][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.285421][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.292860][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.300331][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.307922][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.315320][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.322782][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.330200][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.337589][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.345005][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.352463][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.359897][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.367284][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.374736][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.382176][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 357.391620][ T23] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 357.424792][T23272] veth0_vlan: entered promiscuous mode [ 357.442666][T23272] veth1_vlan: entered promiscuous mode [ 357.457380][T23272] veth0_macvtap: entered promiscuous mode [ 357.464946][T23272] veth1_macvtap: entered promiscuous mode [ 357.481321][T23272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.499948][T23272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.509398][T23443] tipc: Started in network mode [ 357.514325][T23443] tipc: Node identity ac14140f, cluster identity 4711 [ 357.522815][T23443] tipc: New replicast peer: 255.255.255.255 [ 357.529172][T23443] tipc: Enabled bearer , priority 10 [ 357.539914][T23272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.548890][T23272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.557712][T23272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.566490][T23272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.589285][T23449] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8435'. [ 357.640139][T23448] tipc: Enabled bearer , priority 0 [ 357.661881][T23448] tipc: Disabling bearer [ 357.690485][T23454] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 357.815113][T23466] wg2: entered promiscuous mode [ 357.820199][T23466] wg2: entered allmulticast mode [ 358.183510][T23496] loop7: detected capacity change from 0 to 512 [ 358.192760][T23496] EXT4-fs: Ignoring removed orlov option [ 358.199125][T23496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 358.215616][T23496] EXT4-fs (loop7): orphan cleanup on readonly fs [ 358.222711][T23496] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8457: bg 0: block 248: padding at end of block bitmap is not set [ 358.241678][T23496] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.8457: Failed to acquire dquot type 1 [ 358.248248][T23500] loop9: detected capacity change from 0 to 256 [ 358.253928][T23496] EXT4-fs (loop7): 1 truncate cleaned up [ 358.281262][T23496] EXT4-fs: Ignoring removed orlov option [ 358.287141][T23496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 358.297016][T23496] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 358.319953][T23496] EXT4-fs error (device loop7): __ext4_remount:6736: comm syz.7.8457: Abort forced by user [ 358.330823][T23496] EXT4-fs (loop7): Remounting filesystem read-only [ 358.337388][T23496] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 358.346975][T23496] ext4 filesystem being remounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 358.496982][T23511] loop7: detected capacity change from 0 to 2048 [ 358.506283][T23511] EXT4-fs: Ignoring removed orlov option [ 358.510964][T23513] loop9: detected capacity change from 0 to 512 [ 358.532006][T23513] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.549375][T23513] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 358.564084][T23513] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 358.576677][T23513] EXT4-fs (loop9): This should not happen!! Data will be lost [ 358.576677][T23513] [ 358.586428][T23513] EXT4-fs (loop9): Total free blocks count 0 [ 358.592507][T23513] EXT4-fs (loop9): Free/Dirty block details [ 358.598454][T23513] EXT4-fs (loop9): free_blocks=65280 [ 358.603805][T23513] EXT4-fs (loop9): dirty_blocks=33 [ 358.608984][T23513] EXT4-fs (loop9): Block reservation details [ 358.615076][T23513] EXT4-fs (loop9): i_reserved_data_blocks=33 [ 358.667843][ T23] tipc: Node number set to 2886997007 [ 358.898604][T23538] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.8470'. [ 359.035171][T23547] loop0: detected capacity change from 0 to 2048 [ 359.078468][T23557] loop9: detected capacity change from 0 to 1024 [ 359.096360][T23557] EXT4-fs: Ignoring removed orlov option [ 359.102756][T23562] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8478'. [ 359.112426][T23552] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8478'. [ 359.236856][T23576] tipc: Enabled bearer , priority 0 [ 359.245224][T23576] tipc: Disabling bearer [ 359.294612][T23581] vcan0: entered allmulticast mode [ 359.302896][T23581] vcan0: left allmulticast mode [ 359.368739][T23586] vhci_hcd: invalid port number 96 [ 359.373956][T23586] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 359.470004][T23597] loop4: detected capacity change from 0 to 1024 [ 359.557136][T23606] loop4: detected capacity change from 0 to 256 [ 359.597405][T23606] FAT-fs (loop4): codepage cp932 not found [ 359.727317][T23613] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.771496][T23613] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.841312][T23613] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.889113][T23616] loop7: detected capacity change from 0 to 128 [ 359.899541][T23616] ext4 filesystem being mounted at /221/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 359.912561][T23613] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.957622][T23619] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8504'. [ 359.978016][T23613] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.991720][T23613] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.003967][T23613] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.019513][T23613] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.089146][T23625] loop9: detected capacity change from 0 to 1024 [ 360.107215][T23625] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 15 with error 28 [ 360.119747][T23625] EXT4-fs (loop9): This should not happen!! Data will be lost [ 360.119747][T23625] [ 360.129504][T23625] EXT4-fs (loop9): Total free blocks count 0 [ 360.135560][T23625] EXT4-fs (loop9): Free/Dirty block details [ 360.141585][T23625] EXT4-fs (loop9): free_blocks=0 [ 360.146538][T23625] EXT4-fs (loop9): dirty_blocks=0 [ 360.151591][T23625] EXT4-fs (loop9): Block reservation details [ 360.157617][T23625] EXT4-fs (loop9): i_reserved_data_blocks=0 [ 360.315265][T23642] loop4: detected capacity change from 0 to 7 [ 360.321890][T23642] Buffer I/O error on dev loop4, logical block 0, async page read [ 360.330126][T23642] Buffer I/O error on dev loop4, logical block 0, async page read [ 360.338138][T23642] loop4: unable to read partition table [ 360.344037][T23642] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 360.344037][T23642] ) failed (rc=-5) [ 360.528394][T23659] loop9: detected capacity change from 0 to 128 [ 360.574825][T23659] bio_check_eod: 14975 callbacks suppressed [ 360.574842][T23659] syz.9.8524: attempt to access beyond end of device [ 360.574842][T23659] loop9: rw=0, sector=121, nr_sectors = 920 limit=128 [ 360.582789][T23656] loop0: detected capacity change from 0 to 8192 [ 360.603990][T23663] loop6: detected capacity change from 0 to 128 [ 360.611643][T23663] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 360.623901][T23663] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 360.714946][T23668] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8527'. [ 360.730589][T23668] team0 (unregistering): Port device team_slave_0 removed [ 360.741246][T23668] team0 (unregistering): Port device team_slave_1 removed [ 361.462734][T23680] loop4: detected capacity change from 0 to 512 [ 361.472267][T23680] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 361.496175][T23680] EXT4-fs mount: 32 callbacks suppressed [ 361.496197][T23680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.516266][T23680] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.553448][T23272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.638075][T23686] Falling back ldisc for ttyS3. [ 361.678211][T23691] loop4: detected capacity change from 0 to 1024 [ 361.690332][T23691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.725957][T23272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.894847][T23699] loop7: detected capacity change from 0 to 8192 [ 361.939290][T23699] loop7: p2 p3 p4 [ 361.943172][T23699] loop7: p2 start 452985600 is beyond EOD, truncated [ 361.949969][T23699] loop7: p3 size 33554432 extends beyond EOD, truncated [ 361.957792][T23699] loop7: p4 start 8388607 is beyond EOD, truncated [ 361.966019][ T29] kauditd_printk_skb: 1390 callbacks suppressed [ 361.966035][ T29] audit: type=1400 audit(1751853205.330:72619): avc: denied { setopt } for pid=23698 comm="syz.7.8538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 361.992567][ T29] audit: type=1400 audit(1751853205.330:72620): avc: denied { write } for pid=23698 comm="syz.7.8538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 362.012492][ T29] audit: type=1400 audit(1751853205.340:72621): avc: denied { egress } for pid=3385 comm="kworker/0:3" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 362.036436][ T29] audit: type=1400 audit(1751853205.340:72622): avc: denied { sendto } for pid=3385 comm="kworker/0:3" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 362.060750][ T29] audit: type=1400 audit(1751853205.360:72623): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.163 src=30036 daddr=10.128.0.208 dest=54406 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 362.100586][ T29] audit: type=1400 audit(1751853205.460:72624): avc: denied { read write } for pid=21071 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 362.125092][ T29] audit: type=1400 audit(1751853205.460:72625): avc: denied { open } for pid=21071 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 362.149767][ T29] audit: type=1400 audit(1751853205.470:72626): avc: denied { recv } for pid=20079 comm="kworker/u8:36" saddr=10.128.0.163 src=30036 daddr=10.128.0.208 dest=54406 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 362.178426][ T29] audit: type=1400 audit(1751853205.470:72627): avc: denied { ioctl } for pid=21071 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 362.204442][ T29] audit: type=1400 audit(1751853205.520:72628): avc: denied { name_bind } for pid=23700 comm="syz.7.8539" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 362.299606][T23706] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8541'. [ 362.308764][T23706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.316264][T23706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.324262][T23706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.331763][T23706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.405024][T23708] loop6: detected capacity change from 0 to 128 [ 362.465499][T23710] tipc: Enabled bearer , priority 0 [ 362.473285][T23710] tipc: Disabling bearer [ 362.517535][T23715] loop7: detected capacity change from 0 to 1024 [ 362.525905][T23715] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 362.539974][T23715] EXT4-fs error (device loop7): ext4_map_blocks:816: inode #3: block 1: comm syz.7.8546: lblock 1 mapped to illegal pblock 1 (length 1) [ 362.554317][T23715] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.8546: Failed to acquire dquot type 0 [ 362.566167][T23715] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.8546: Freeing blocks not in datazone - block = 0, count = 4096 [ 362.580994][T23715] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.8546: Invalid inode bitmap blk 0 in block_group 0 [ 362.597874][T23715] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 362.606849][T23715] EXT4-fs (loop7): 1 orphan inode deleted [ 362.614135][T23715] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.616745][T20056] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 362.644703][T20056] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:19: Failed to release dquot type 0 [ 362.659922][T23715] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.672115][T23722] tipc: Started in network mode [ 362.677061][T23722] tipc: Node identity 4e3a2b9bb75, cluster identity 4711 [ 362.684269][T23722] tipc: Enabled bearer , priority 0 [ 362.695276][T23722] tipc: Resetting bearer [ 362.707762][T23720] tipc: Disabling bearer [ 363.371334][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.378943][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.386363][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.393831][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.401389][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.408913][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.416384][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.423822][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.431261][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.438786][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.446194][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.453635][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.461228][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.468629][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.476221][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.483732][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.491182][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.498750][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.506158][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.513615][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.521487][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.528992][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.536421][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.543845][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.551261][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.558706][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.566186][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.573737][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.581163][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.588588][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.596013][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.603479][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.610877][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.618295][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.625707][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.633199][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.640635][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.648480][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.656189][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.663656][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.671091][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.678655][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.686097][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 363.694993][ T23] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz1 [ 363.715381][T23747] random: crng reseeded on system resumption [ 363.767912][T23751] loop6: detected capacity change from 0 to 512 [ 363.785393][T23751] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 363.810869][T23751] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 363.819034][T23751] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 363.838132][T23751] System zones: 0-1, 15-15, 18-18, 34-34 [ 363.844015][T23751] EXT4-fs (loop6): orphan cleanup on readonly fs [ 363.858150][T23751] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 363.872916][T23751] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 363.887179][T23751] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8561: bg 0: block 40: padding at end of block bitmap is not set [ 363.922019][T23751] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 363.949509][T23751] EXT4-fs (loop6): 1 truncate cleaned up [ 363.972278][T23751] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 364.082970][T23760] loop0: detected capacity change from 0 to 8192 [ 364.096624][T23751] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 364.104700][T23751] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 364.143056][T23760] loop0: p2 p3 p4 [ 364.152170][T16736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.162504][T23760] loop0: p2 start 452985600 is beyond EOD, truncated [ 364.169393][T23760] loop0: p3 size 33554432 extends beyond EOD, truncated [ 364.210207][T23760] loop0: p4 start 8388607 is beyond EOD, truncated [ 364.438249][T23777] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8571'. [ 364.462083][T23781] loop9: detected capacity change from 0 to 512 [ 364.481340][T23781] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.481751][T23781] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.560227][T22710] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.645793][T23792] loop0: detected capacity change from 0 to 512 [ 364.649528][T23792] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.8576: casefold flag without casefold feature [ 364.667694][T23792] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.8576: couldn't read orphan inode 15 (err -117) [ 364.668662][T23792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.779054][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.859598][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.859639][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.859661][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.859685][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.859712][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.859811][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.859907][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.859939][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.860033][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.860056][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.860076][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.860182][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.860223][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.860247][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.860268][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.860335][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.860361][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.860388][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.860415][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.860442][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.860481][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.860502][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.860525][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.860553][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.860655][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.860678][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.861549][ T10] hid-generic 0000:0000:0000.0018: hidraw0: HID v8.00 Device [syz1] on syz0 [ 364.878407][T23798] Falling back ldisc for ttyS3. [ 364.955333][T23804] loop0: detected capacity change from 0 to 512 [ 364.957533][T23804] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 364.988962][T23804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.192971][T23804] ext4 filesystem being mounted at /1678/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.212155][T23804] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.8580: corrupted xattr block 19: overlapping e_value [ 365.250340][T23810] loop7: detected capacity change from 0 to 128 [ 365.259047][T23804] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 365.282345][T23804] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.8580: corrupted xattr block 19: overlapping e_value [ 365.297144][T23810] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 365.301284][T23804] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 365.318600][T23804] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.8580: corrupted xattr block 19: overlapping e_value [ 365.336211][T23810] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.410703][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.482317][T21071] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.560083][T23823] loop7: detected capacity change from 0 to 1024 [ 365.569109][T23823] EXT4-fs: Ignoring removed orlov option [ 365.578786][T23823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.871498][T23834] loop9: detected capacity change from 0 to 512 [ 365.891199][T23834] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 365.908181][T23834] EXT4-fs (loop9): orphan cleanup on readonly fs [ 365.917062][T23834] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #16: comm syz.9.8592: corrupted inode contents [ 365.917799][T21071] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.935991][T23834] EXT4-fs (loop9): Remounting filesystem read-only [ 365.944874][T23834] EXT4-fs (loop9): 1 truncate cleaned up [ 365.951431][T20046] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 365.962138][T20046] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 365.991385][T20046] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 366.013466][T23834] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 366.056981][T23841] loop4: detected capacity change from 0 to 8192 [ 366.071675][T22710] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.108375][T23845] loop7: detected capacity change from 0 to 2048 [ 366.131259][T23845] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.229700][T23854] loop6: detected capacity change from 0 to 164 [ 366.261268][T23845] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8597: bg 0: block 234: padding at end of block bitmap is not set [ 366.277606][T23845] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 422 with error 117 [ 366.290322][T23845] EXT4-fs (loop7): This should not happen!! Data will be lost [ 366.290322][T23845] [ 366.390759][T21071] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.462598][T23866] pimreg: entered allmulticast mode [ 366.480609][T23866] pimreg: left allmulticast mode [ 366.719664][T23874] syzkaller0: entered promiscuous mode [ 366.725250][T23874] syzkaller0: entered allmulticast mode [ 366.790175][T23879] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8610'. [ 366.808536][T23884] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 366.966062][T23892] loop6: detected capacity change from 0 to 512 [ 366.977824][ T29] kauditd_printk_skb: 1026 callbacks suppressed [ 366.977843][ T29] audit: type=1400 audit(1751853210.340:73645): avc: denied { unmount } for pid=23272 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 367.004634][ T29] audit: type=1400 audit(1751853210.340:73646): avc: denied { recv } for pid=23889 comm="syz.7.8615" saddr=10.128.0.163 src=30036 daddr=10.128.0.208 dest=54406 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 367.032763][ T29] audit: type=1400 audit(1751853210.350:73647): avc: denied { prog_load } for pid=23887 comm="syz.0.8613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 367.052217][ T29] audit: type=1400 audit(1751853210.350:73648): avc: denied { bpf } for pid=23887 comm="syz.0.8613" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 367.073602][ T29] audit: type=1400 audit(1751853210.350:73649): avc: denied { perfmon } for pid=23887 comm="syz.0.8613" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 367.094759][ T29] audit: type=1400 audit(1751853210.350:73650): avc: denied { prog_run } for pid=23887 comm="syz.0.8613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 367.114242][ T29] audit: type=1400 audit(1751853210.350:73651): avc: denied { mounton } for pid=23891 comm="syz.6.8616" path="/618/bus" dev="tmpfs" ino=3208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 367.136981][ T29] audit: type=1400 audit(1751853210.370:73652): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.0.208 dest=54406 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 367.165151][ T29] audit: type=1400 audit(1751853210.460:73653): avc: denied { read write } for pid=23272 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 367.189658][ T29] audit: type=1400 audit(1751853210.460:73654): avc: denied { open } for pid=23272 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 367.223913][T23892] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.247026][T23892] ext4 filesystem being mounted at /618/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 367.287084][T23892] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.8616: corrupted inode contents [ 367.300508][T23892] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.8616: mark_inode_dirty error [ 367.312892][T23892] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.8616: corrupted inode contents [ 367.330453][T23892] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.8616: corrupted inode contents [ 367.342595][T23892] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.8616: mark_inode_dirty error [ 367.349950][T23904] loop7: detected capacity change from 0 to 1024 [ 367.356869][T23892] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.8616: corrupted inode contents [ 367.374281][T23892] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.8616: mark_inode_dirty error [ 367.389139][T23904] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #2: comm syz.7.8620: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 1025, max 0(0), depth 0(0) [ 367.406957][T23892] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.8616: corrupted inode contents [ 367.420995][T23904] EXT4-fs (loop7): get root inode failed [ 367.426714][T23904] EXT4-fs (loop7): mount failed [ 367.432040][T23892] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.8616: mark_inode_dirty error [ 367.493623][T16736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.511118][T23904] loop7: detected capacity change from 0 to 2048 [ 367.544671][T23904] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.721202][T21071] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.865610][T23941] loop7: detected capacity change from 0 to 128 [ 367.881460][T23941] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 367.894264][T23941] ext4 filesystem being mounted at /252/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 367.907283][T23943] lo speed is unknown, defaulting to 1000 [ 367.979590][T23948] loop9: detected capacity change from 0 to 164 [ 367.981724][T21071] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 367.996922][T23948] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 368.036260][T23948] lo speed is unknown, defaulting to 1000 [ 368.547419][T23976] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8646'. [ 369.090568][T24001] loop4: detected capacity change from 0 to 512 [ 369.122320][T24001] EXT4-fs (loop4): too many log groups per flexible block group [ 369.130175][T24001] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 369.148466][T24001] EXT4-fs (loop4): mount failed [ 369.602260][T24026] lo speed is unknown, defaulting to 1000 [ 370.085730][ T3385] kernel write not supported for file bpf-prog (pid: 3385 comm: kworker/0:3) [ 370.093421][T24057] netlink: '¬í': attribute type 10 has an invalid length. [ 370.124096][T24057] team0: Port device dummy0 added [ 370.151455][T24057] netlink: '¬í': attribute type 10 has an invalid length. [ 370.176254][T24057] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 370.202480][T24057] team0: Failed to send options change via netlink (err -105) [ 370.218564][T24057] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 370.240050][T24057] team0: Port device dummy0 removed [ 370.264281][T24057] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 370.298917][T24061] loop6: detected capacity change from 0 to 512 [ 370.336872][T24061] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.370468][T24061] ext4 filesystem being mounted at /633/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 370.407174][T24061] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm +}[@: corrupted inode contents [ 370.437989][T24061] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm +}[@: mark_inode_dirty error [ 370.468991][T24061] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm +}[@: corrupted inode contents [ 370.518095][T24074] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.8681: corrupted inode contents [ 370.559777][T24074] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.8681: mark_inode_dirty error [ 370.589548][T24074] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.8681: corrupted inode contents [ 370.614597][T24074] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.8681: mark_inode_dirty error [ 370.656662][T24074] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.8681: corrupted inode contents [ 370.687079][T24074] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.8681: mark_inode_dirty error [ 370.738052][T16736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.738800][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x7 [ 370.754582][ T10] hid-generic 0000:0000:0000.0019: ignoring exceeding usage max [ 370.766522][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 370.859972][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 370.867437][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 370.874958][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 370.882457][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 370.889893][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 370.897297][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 370.904754][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 370.912206][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 370.919639][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 370.927148][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 370.935342][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 370.943099][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 370.943131][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 370.943232][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 370.943260][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 370.943285][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 370.943311][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 370.943333][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 370.943423][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 370.943452][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 371.029674][ T10] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 371.295131][T24094] syz_tun: entered allmulticast mode [ 371.329210][T24094] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 371.337900][T24094] mroute: pending queue full, dropping entries [ 371.349254][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 371.357833][ C1] mroute: pending queue full, dropping entries [ 371.416287][T24093] syz_tun: left allmulticast mode [ 371.623803][T24115] loop0: detected capacity change from 0 to 2048 [ 371.661740][T24115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.715806][T24126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8704'. [ 371.848307][T24132] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8705'. [ 371.984243][ T29] kauditd_printk_skb: 1356 callbacks suppressed [ 371.984325][ T29] audit: type=1400 audit(1751853215.349:75011): avc: denied { create } for pid=24142 comm="syz.4.8710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 372.010367][ T29] audit: type=1400 audit(1751853215.349:75012): avc: denied { read write } for pid=21071 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 372.034850][ T29] audit: type=1400 audit(1751853215.349:75013): avc: denied { read write open } for pid=21071 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 372.060554][ T29] audit: type=1400 audit(1751853215.349:75014): avc: denied { ioctl } for pid=21071 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 372.086367][ T29] audit: type=1400 audit(1751853215.349:75015): avc: denied { bpf } for pid=24138 comm="syz.9.8708" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 372.107161][ T29] audit: type=1400 audit(1751853215.349:75016): avc: denied { perfmon } for pid=24138 comm="syz.9.8708" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 372.150395][T24145] tap0: tun_chr_ioctl cmd 1074025673 [ 372.166572][T24143] loop4: detected capacity change from 0 to 128 [ 372.180297][ T29] audit: type=1400 audit(1751853215.379:75017): avc: denied { prog_run } for pid=24138 comm="syz.9.8708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 372.199563][ T29] audit: type=1400 audit(1751853215.429:75018): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.0.208 dest=54406 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 372.225201][ T29] audit: type=1400 audit(1751853215.499:75019): avc: denied { create } for pid=24142 comm="syz.4.8710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 372.245113][ T29] audit: type=1400 audit(1751853215.509:75020): avc: denied { getopt } for pid=24142 comm="syz.4.8710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 372.356344][T24154] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8713'. [ 372.375963][T24155] loop7: detected capacity change from 0 to 1024 [ 372.385717][T24155] ext4: Unknown parameter 'nouser_xattr' [ 372.396759][T24154] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8713'. [ 372.467810][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.563118][T24170] lo speed is unknown, defaulting to 1000 [ 372.618269][T24172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8721'. [ 372.897611][T24188] lo speed is unknown, defaulting to 1000 [ 373.010741][T24193] syzkaller0: entered promiscuous mode [ 373.016383][T24193] syzkaller0: entered allmulticast mode [ 373.227227][T24203] lo speed is unknown, defaulting to 1000 [ 373.525754][T24223] lo: entered allmulticast mode [ 373.564324][T24222] lo: left allmulticast mode [ 373.763483][T24233] loop0: detected capacity change from 0 to 512 [ 373.791966][T24233] EXT4-fs: test_dummy_encryption option not supported [ 373.831359][T24233] loop0: detected capacity change from 0 to 256 [ 373.849410][T24233] msdos: Unknown parameter 'ÿÿÿÿ0xffffffffffffffff01777777777777777777777' [ 374.021318][T24238] loop0: detected capacity change from 0 to 1024 [ 374.031813][T24238] EXT4-fs: Ignoring removed orlov option [ 374.053129][T24238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.301814][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.404876][T24250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8751'. [ 374.464835][T24252] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8752'. [ 374.474211][T24252] bridge_slave_1: left allmulticast mode [ 374.479926][T24252] bridge_slave_1: left promiscuous mode [ 374.485710][T24252] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.501775][T24252] bridge_slave_0: left allmulticast mode [ 374.507498][T24252] bridge_slave_0: left promiscuous mode [ 374.513244][T24252] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.586844][T24261] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8755'. [ 374.612440][T24257] netlink: 'syz.4.8754': attribute type 4 has an invalid length. [ 374.688672][T24264] loop7: detected capacity change from 0 to 512 [ 374.716611][T24264] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 374.738600][T24264] EXT4-fs (loop7): 1 truncate cleaned up [ 374.763587][T24264] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.836356][T21071] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.905907][T24281] : renamed from bond0 (while UP) [ 374.980431][T24290] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8770'. [ 375.006398][T24291] loop0: detected capacity change from 0 to 764 [ 375.037898][T24291] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 375.152966][T24302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8774'. [ 375.169819][T24304] sg_write: process 134 (syz.4.8775) changed security contexts after opening file descriptor, this is not allowed. [ 375.171166][T24302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8774'. [ 375.302156][T24312] loop6: detected capacity change from 0 to 512 [ 375.310447][T24312] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 375.322638][T24312] EXT4-fs error (device loop6): xattr_find_entry:333: inode #15: comm syz.6.8778: corrupted xattr entries [ 375.335427][T24312] EXT4-fs (loop6): Remounting filesystem read-only [ 375.342060][T24312] EXT4-fs (loop6): 1 truncate cleaned up [ 375.348144][T24312] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.460469][T16736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.954703][T24327] loop7: detected capacity change from 0 to 128 [ 375.962180][T24327] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 375.974756][T24327] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 376.382959][T24352] loop0: detected capacity change from 0 to 2048 [ 376.420131][T24352] loop0: p1 < > p4 [ 376.424736][T24352] loop0: p4 size 8388608 extends beyond EOD, truncated [ 376.921813][T24376] tipc: Enabled bearer , priority 0 [ 376.931950][T24376] tipc: Disabling bearer [ 376.990691][ T29] kauditd_printk_skb: 1212 callbacks suppressed [ 376.990748][ T29] audit: type=1400 audit(1751853220.359:76233): avc: denied { create } for pid=24382 comm="syz.7.8807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 377.028077][ T29] audit: type=1400 audit(1751853220.359:76234): avc: denied { recv } for pid=24370 comm="syz.0.8813" saddr=10.128.0.163 src=30036 daddr=10.128.0.208 dest=54406 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 377.053866][ T29] audit: type=1400 audit(1751853220.359:76235): avc: denied { recv } for pid=24370 comm="syz.0.8813" saddr=10.128.0.163 src=30036 daddr=10.128.0.208 dest=54406 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 377.079533][ T29] audit: type=1400 audit(1751853220.389:76236): avc: denied { write } for pid=24382 comm="syz.7.8807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 377.100172][ T29] audit: type=1400 audit(1751853220.389:76237): avc: denied { read } for pid=24382 comm="syz.7.8807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 377.120673][ T29] audit: type=1400 audit(1751853220.389:76238): avc: denied { prog_load } for pid=24382 comm="syz.7.8807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 377.139989][ T29] audit: type=1400 audit(1751853220.389:76239): avc: denied { bpf } for pid=24382 comm="syz.7.8807" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 377.160829][ T29] audit: type=1400 audit(1751853220.389:76240): avc: denied { prog_load } for pid=24382 comm="syz.7.8807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 377.180148][ T29] audit: type=1400 audit(1751853220.389:76241): avc: denied { bpf } for pid=24382 comm="syz.7.8807" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 377.201084][ T29] audit: type=1400 audit(1751853220.389:76242): avc: denied { perfmon } for pid=24382 comm="syz.7.8807" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 377.394384][T24398] batadv_slave_0: entered promiscuous mode [ 377.403366][T24398] __nla_validate_parse: 1 callbacks suppressed [ 377.403404][T24398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8814'. [ 377.429999][T24398] batadv_slave_0 (unregistering): left promiscuous mode [ 377.507002][T24403] lo speed is unknown, defaulting to 1000 [ 377.675952][T24410] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8818'. [ 377.791244][T24419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24419 comm=syz.0.8820 [ 377.848502][T24422] loop6: detected capacity change from 0 to 512 [ 377.860896][T24422] EXT4-fs: Ignoring removed nomblk_io_submit option [ 377.875012][T24422] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 377.882998][T24423] loop4: detected capacity change from 0 to 2048 [ 377.894796][T24422] EXT4-fs (loop6): 1 truncate cleaned up [ 377.902606][T24422] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.915783][T24426] loop0: detected capacity change from 0 to 128 [ 377.924960][T24423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.941029][T24426] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 377.966660][T24426] ext4 filesystem being mounted at /1721/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 378.000373][T16736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.030454][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 378.130693][T24438] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8828'. [ 378.151808][T23272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.225276][T24447] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8829'. [ 378.268168][T24446] hub 8-0:1.0: USB hub found [ 378.273031][T24446] hub 8-0:1.0: 8 ports detected [ 378.344953][T24455] futex_wake_op: syz.0.8835 tries to shift op by -1; fix this program [ 378.430024][T24460] wg2: entered promiscuous mode [ 378.434972][T24460] wg2: entered allmulticast mode [ 379.004286][T24491] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.8846' sets config #0 [ 379.074297][T24494] loop6: detected capacity change from 0 to 512 [ 379.092557][T24494] EXT4-fs (loop6): 1 orphan inode deleted [ 379.098748][T24494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.111611][ T162] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 379.111929][T24494] ext4 filesystem being mounted at /661/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.256288][T24505] netlink: 'syz.0.8849': attribute type 4 has an invalid length. [ 379.266316][T24505] netlink: 'syz.0.8849': attribute type 4 has an invalid length. [ 379.305159][T16736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.355864][T24509] bridge0: port 3(batadv1) entered blocking state [ 379.362396][T24509] bridge0: port 3(batadv1) entered disabled state [ 379.369247][T24509] batadv1: entered allmulticast mode [ 379.375477][T24509] batadv1: entered promiscuous mode [ 379.384109][T24509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8851'. [ 379.393689][T24509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.401196][T24509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.411368][T24509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.418883][T24509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.521386][T24519] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 379.603237][T24525] loop6: detected capacity change from 0 to 512 [ 379.628411][T24525] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 379.661648][T24525] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 379.701595][T24525] ext4 filesystem being mounted at /664/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.802929][T16736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 379.826833][T24537] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8861'. [ 379.869608][T20089] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 379.879080][T20089] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 380.053602][T24548] loop6: detected capacity change from 0 to 128 [ 380.126165][T24548] syz.6.8863: attempt to access beyond end of device [ 380.126165][T24548] loop6: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 380.141236][T24548] syz.6.8863: attempt to access beyond end of device [ 380.141236][T24548] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 380.155008][T24548] syz.6.8863: attempt to access beyond end of device [ 380.155008][T24548] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 380.169624][T24548] syz.6.8863: attempt to access beyond end of device [ 380.169624][T24548] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 380.195269][T24548] syz.6.8863: attempt to access beyond end of device [ 380.195269][T24548] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 380.240166][T24548] syz.6.8863: attempt to access beyond end of device [ 380.240166][T24548] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 380.288617][T24548] syz.6.8863: attempt to access beyond end of device [ 380.288617][T24548] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 380.340557][T24548] syz.6.8863: attempt to access beyond end of device [ 380.340557][T24548] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 380.355544][T24548] syz.6.8863: attempt to access beyond end of device [ 380.355544][T24548] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 380.369506][T24548] syz.6.8863: attempt to access beyond end of device [ 380.369506][T24548] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 380.553497][T24533] 9pnet_fd: p9_fd_create_tcp (24533): problem connecting socket to 127.0.0.1 [ 380.560738][T24571] lo speed is unknown, defaulting to 1000 [ 380.823249][T24594] loop0: detected capacity change from 0 to 512 [ 380.919260][T24594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.947001][T24594] ext4 filesystem being mounted at /1734/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.016815][T24601] loop4: detected capacity change from 0 to 2048 [ 381.049583][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.069725][T24601] loop4: p1 < > p4 [ 381.074627][T24601] loop4: p4 size 8388608 extends beyond EOD, truncated [ 381.126055][T24610] tipc: Enabled bearer , priority 0 [ 381.134855][T24609] tipc: Resetting bearer [ 381.173225][T24609] tipc: Disabling bearer [ 381.183798][T24612] loop4: detected capacity change from 0 to 512 [ 381.192855][T24612] EXT4-fs: Ignoring removed nomblk_io_submit option [ 381.201264][T24612] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 381.211230][T24612] EXT4-fs (loop4): #clusters per group too big: 401408 [ 381.279121][T24616] geneve1: entered promiscuous mode [ 381.290264][T24616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8895'. [ 381.314013][T24619] syz_tun: entered allmulticast mode [ 381.321776][T24619] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 381.330438][T24619] mroute: pending queue full, dropping entries [ 381.375659][T24621] xt_CT: You must specify a L4 protocol and not use inversions on it [ 381.493289][T24628] loop0: detected capacity change from 0 to 512 [ 381.503617][T24628] EXT4-fs: Ignoring removed nomblk_io_submit option [ 381.510935][T24628] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 381.522978][T24628] EXT4-fs (loop0): 1 truncate cleaned up [ 381.528987][T24628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.546538][T24628] rdma_op ffff88810c366180 conn xmit_rdma 0000000000000000 [ 381.566375][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.864955][T24644] syzkaller0: entered promiscuous mode [ 381.870631][T24644] syzkaller0: entered allmulticast mode [ 381.968556][T24651] loop7: detected capacity change from 0 to 512 [ 381.968639][T24650] loop6: detected capacity change from 0 to 1024 [ 381.982867][T24651] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 381.995960][T24651] EXT4-fs (loop7): 1 truncate cleaned up [ 382.004509][T24651] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.018181][T24650] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.032159][T24651] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.041366][ T29] kauditd_printk_skb: 1421 callbacks suppressed [ 382.041382][ T29] audit: type=1400 audit(1751853225.399:77663): avc: denied { mount } for pid=24648 comm="syz.7.8909" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 382.069953][ T29] audit: type=1400 audit(1751853225.399:77664): avc: denied { map_create } for pid=24641 comm="syz.0.8905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 382.089704][ T29] audit: type=1400 audit(1751853225.399:77665): avc: denied { bpf } for pid=24641 comm="syz.0.8905" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 382.110596][ T29] audit: type=1400 audit(1751853225.399:77666): avc: denied { map_read map_write } for pid=24641 comm="syz.0.8905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 382.130655][ T29] audit: type=1400 audit(1751853225.399:77667): avc: denied { prog_load } for pid=24641 comm="syz.0.8905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 382.150227][ T29] audit: type=1400 audit(1751853225.409:77668): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.0.208 dest=54406 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 382.175318][ T29] audit: type=1400 audit(1751853225.439:77669): avc: denied { mount } for pid=24649 comm="syz.6.8908" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 382.197260][ T29] audit: type=1400 audit(1751853225.439:77670): avc: denied { read write } for pid=24649 comm="syz.6.8908" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 382.221487][ T29] audit: type=1400 audit(1751853225.439:77671): avc: denied { open } for pid=24649 comm="syz.6.8908" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 382.245637][ T29] audit: type=1400 audit(1751853225.479:77672): avc: denied { read write } for pid=24648 comm="syz.7.8909" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 382.444940][T24663] wg2: left promiscuous mode [ 382.450099][T24663] wg2: left allmulticast mode [ 382.468668][T24663] wg2: entered promiscuous mode [ 382.473736][T24663] wg2: entered allmulticast mode [ 382.638677][T16736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.702945][T24676] loop6: detected capacity change from 0 to 128 [ 382.720919][T24676] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 382.761816][T24676] ext4 filesystem being mounted at /675/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 382.842630][T16736] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 382.932458][ T10] Process accounting resumed [ 383.033342][T24695] loop0: detected capacity change from 0 to 2048 [ 383.041894][T24698] loop6: detected capacity change from 0 to 2048 [ 383.062634][T24695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.069992][T24698] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.174802][T24706] netlink: 'syz.9.8928': attribute type 13 has an invalid length. [ 383.229213][T24706] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.236577][T24706] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.325095][T16736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.347082][T24706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.362911][T24706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.414278][T24706] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.417146][T24713] loop7: detected capacity change from 0 to 512 [ 383.422826][T24706] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.437650][T24706] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.446165][T24706] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.447849][T24713] EXT4-fs (loop7): orphan cleanup on readonly fs [ 383.462024][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.473065][T24713] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8931: bg 0: block 248: padding at end of block bitmap is not set [ 383.488594][T24713] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.8931: Failed to acquire dquot type 1 [ 383.505352][T24713] EXT4-fs (loop7): 1 truncate cleaned up [ 383.511875][T24713] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 383.588906][T21071] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.644658][T24723] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.692736][T24723] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.753026][T24723] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.783031][T24723] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.848698][T24723] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.861818][T24737] 9pnet_fd: Insufficient options for proto=fd [ 383.862663][T24723] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.878433][T24737] loop6: detected capacity change from 0 to 512 [ 383.881313][T24723] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.896852][T24723] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.907739][T24737] EXT4-fs (loop6): required journal recovery suppressed and not mounted read-only [ 384.013821][T24749] loop7: detected capacity change from 0 to 512 [ 384.032446][T24749] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 384.705620][T24764] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 384.736322][T24771] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8953'. [ 384.755212][T24771] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8953'. [ 384.768629][T24771] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 384.777050][T24771] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 384.793268][T24771] bond0 (unregistering): (slave batadv1): Releasing backup interface [ 384.803190][T24771] bond0 (unregistering): Released all slaves [ 384.924621][T24779] tipc: Enabling of bearer rejected, failed to enable media [ 385.003081][T24782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8956'. [ 385.013546][T24782] veth1_macvtap: left promiscuous mode [ 385.215409][T24787] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8958'. [ 385.659250][T24810] loop0: detected capacity change from 0 to 8192 [ 385.689656][T24810] loop0: p1 p2 [ 385.693638][T24810] loop0: p2 start 3506442254 is beyond EOD, truncated [ 386.079029][T24822] 9pnet_virtio: no channels available for device 127.0.0.1 [ 386.260910][T24834] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8979'. [ 386.277692][T24834] macvtap1: entered promiscuous mode [ 386.283103][T24834] syz_tun: entered promiscuous mode [ 386.288471][T24834] macvtap1: entered allmulticast mode [ 386.307920][T24834] syz_tun: left promiscuous mode [ 386.534585][T24850] loop4: detected capacity change from 0 to 128 [ 386.572488][T24850] bio_check_eod: 62 callbacks suppressed [ 386.572507][T24850] syz.4.8984: attempt to access beyond end of device [ 386.572507][T24850] loop4: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 386.591665][T24850] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 386.614490][T24850] syz.4.8984: attempt to access beyond end of device [ 386.614490][T24850] loop4: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 386.628099][T24850] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 386.639111][T24850] syz.4.8984: attempt to access beyond end of device [ 386.639111][T24850] loop4: rw=2049, sector=139, nr_sectors = 1 limit=128 [ 386.652633][T24850] Buffer I/O error on dev loop4, logical block 139, lost async page write [ 386.675751][T24850] syz.4.8984: attempt to access beyond end of device [ 386.675751][T24850] loop4: rw=2049, sector=140, nr_sectors = 1 limit=128 [ 386.689319][T24850] Buffer I/O error on dev loop4, logical block 140, lost async page write [ 386.726142][T24852] syzkaller0: entered promiscuous mode [ 386.731736][T24852] syzkaller0: entered allmulticast mode [ 386.748772][T24850] syz.4.8984: attempt to access beyond end of device [ 386.748772][T24850] loop4: rw=2049, sector=141, nr_sectors = 1 limit=128 [ 386.762328][T24850] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 386.771631][T24850] syz.4.8984: attempt to access beyond end of device [ 386.771631][T24850] loop4: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 386.785693][T24850] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 386.808335][T24850] syz.4.8984: attempt to access beyond end of device [ 386.808335][T24850] loop4: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 386.822000][T24850] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 386.843255][T24864] tipc: Enabling of bearer rejected, failed to enable media [ 386.854274][T24850] syz.4.8984: attempt to access beyond end of device [ 386.854274][T24850] loop4: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 386.867744][T24850] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 386.907187][T24850] syz.4.8984: attempt to access beyond end of device [ 386.907187][T24850] loop4: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 386.920801][T24850] Buffer I/O error on dev loop4, logical block 147, lost async page write [ 386.930713][T24850] syz.4.8984: attempt to access beyond end of device [ 386.930713][T24850] loop4: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 386.944227][T24850] Buffer I/O error on dev loop4, logical block 148, lost async page write [ 386.988020][T24872] loop6: detected capacity change from 0 to 1024 [ 386.998927][T24868] macsec0: entered promiscuous mode [ 387.001641][T24872] EXT4-fs: Ignoring removed nomblk_io_submit option [ 387.052486][ T29] kauditd_printk_skb: 1316 callbacks suppressed [ 387.052503][ T29] audit: type=1400 audit(1751853230.418:78987): avc: denied { recv } for pid=24875 comm="+}[@" saddr=10.128.0.163 src=30036 daddr=10.128.0.208 dest=54406 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 387.114484][ T29] audit: type=1400 audit(1751853230.418:78988): avc: denied { map_create } for pid=24880 comm="syz.0.8998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 387.133952][ T29] audit: type=1400 audit(1751853230.418:78989): avc: denied { create } for pid=24880 comm="syz.0.8998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 387.154845][ T29] audit: type=1400 audit(1751853230.418:78990): avc: denied { prog_load } for pid=24880 comm="syz.0.8998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 387.165131][T24885] lo speed is unknown, defaulting to 1000 [ 387.174334][ T29] audit: type=1400 audit(1751853230.418:78991): avc: denied { bpf } for pid=24880 comm="syz.0.8998" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 387.200855][ T29] audit: type=1400 audit(1751853230.418:78992): avc: denied { perfmon } for pid=24880 comm="syz.0.8998" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 387.221963][ T29] audit: type=1400 audit(1751853230.418:78993): avc: denied { prog_run } for pid=24880 comm="syz.0.8998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 387.241555][ T29] audit: type=1400 audit(1751853230.448:78994): avc: denied { read } for pid=24880 comm="syz.0.8998" dev="nsfs" ino=4026532628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 387.263208][ T29] audit: type=1400 audit(1751853230.448:78995): avc: denied { open } for pid=24880 comm="syz.0.8998" path="net:[4026532628]" dev="nsfs" ino=4026532628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 387.286654][ T29] audit: type=1400 audit(1751853230.448:78996): avc: denied { create } for pid=24880 comm="syz.0.8998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 387.318771][T24872] EXT4-fs error (device loop6): __ext4_remount:6736: comm syz.6.8995: Abort forced by user [ 387.336865][T24872] EXT4-fs (loop6): Remounting filesystem read-only [ 387.343553][T24872] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 387.738491][T24914] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9009'. [ 387.750470][T24914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.828894][T24920] netlink: 'syz.6.9012': attribute type 12 has an invalid length. [ 387.907826][T24923] ÿÿÿÿÿÿ: renamed from vlan1 [ 387.999335][T24927] pim6reg1: entered promiscuous mode [ 388.005202][T24927] pim6reg1: entered allmulticast mode [ 388.042185][T24933] netlink: 204 bytes leftover after parsing attributes in process `syz.4.9017'. [ 388.057133][T24933] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9017'. [ 388.225436][T24952] loop7: detected capacity change from 0 to 128 [ 388.236431][T24952] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 388.250725][T24951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9025'. [ 388.271422][T24952] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 388.379618][T24961] lo speed is unknown, defaulting to 1000 [ 388.485911][T24966] loop7: detected capacity change from 0 to 8192 [ 388.592186][T21071] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 388.600157][T21071] FAT-fs (loop7): Filesystem has been set read-only [ 388.783813][T24991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9042'. [ 389.046572][T25002] loop0: detected capacity change from 0 to 512 [ 389.055432][T25002] EXT4-fs: Ignoring removed mblk_io_submit option [ 389.072972][T25002] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 389.131103][T25002] EXT4-fs (loop0): 1 truncate cleaned up [ 389.251866][T25002] netlink: 'syz.0.9047': attribute type 13 has an invalid length. [ 389.721048][T25002] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.730128][T25002] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.739021][T25002] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.748017][T25002] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.157151][T25041] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9055'. [ 390.166128][T25041] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9055'. [ 390.594509][T25077] loop6: detected capacity change from 0 to 512 [ 390.606478][T25079] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9069'. [ 390.619182][T25077] EXT4-fs: Ignoring removed oldalloc option [ 390.626514][T25077] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 390.672066][T25077] EXT4-fs (loop6): 1 truncate cleaned up [ 390.703688][T25087] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9071'. [ 390.952480][T25112] loop7: detected capacity change from 0 to 512 [ 390.987935][T25112] EXT4-fs (loop7): orphan cleanup on readonly fs [ 390.998623][T25112] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.9077: bg 0: block 248: padding at end of block bitmap is not set [ 391.018422][T25112] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.9077: Failed to acquire dquot type 1 [ 391.037565][T25112] EXT4-fs (loop7): 1 truncate cleaned up [ 391.059286][T25112] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 391.102966][T25112] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 391.171064][T25135] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9083'. [ 391.191557][T25135] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9083'. [ 391.260133][T25138] tipc: Started in network mode [ 391.265228][T25138] tipc: Node identity 5aa8ff678af6, cluster identity 4711 [ 391.272604][T25138] tipc: Enabled bearer , priority 0 [ 391.288740][T25137] tipc: Resetting bearer [ 391.311468][T25137] tipc: Disabling bearer [ 391.523682][T25164] lo: entered allmulticast mode [ 391.528687][T25164] tunl0: entered allmulticast mode [ 391.534005][T25164] gre0: entered allmulticast mode [ 391.539284][T25164] gretap0: entered allmulticast mode [ 391.544797][T25164] erspan0: entered allmulticast mode [ 391.550355][T25164] ip_vti0: entered allmulticast mode [ 391.555901][T25164] ip6_vti0: entered allmulticast mode [ 391.561488][T25164] sit0: entered allmulticast mode [ 391.566583][T25164] ip6tnl0: entered allmulticast mode [ 391.572008][T25164] ip6gre0: entered allmulticast mode [ 391.577510][T25164] ip6gretap0: entered allmulticast mode [ 391.583221][T25164] vcan0: entered allmulticast mode [ 391.588403][T25164] $Hÿ: entered allmulticast mode [ 391.593661][T25164] bond_slave_0: entered allmulticast mode [ 391.599468][T25164] bond_slave_1: entered allmulticast mode [ 391.655040][T25164] team0: entered allmulticast mode [ 391.656240][T25172] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9091'. [ 391.666212][T25164] team_slave_0: entered allmulticast mode [ 391.675037][T25164] team_slave_1: entered allmulticast mode [ 391.689130][T25164] dummy0: entered allmulticast mode [ 391.694617][T25164] nlmon0: entered allmulticast mode [ 391.699949][T25164] caif0: entered allmulticast mode [ 391.705177][T25164] batadv0: entered allmulticast mode [ 391.710752][T25164] vxcan0: entered allmulticast mode [ 391.716191][T25164] vxcan1: entered allmulticast mode [ 391.721513][T25164] veth0: entered allmulticast mode [ 391.726740][T25164] veth1: entered allmulticast mode [ 391.732117][T25164] wg0: entered allmulticast mode [ 391.737279][T25164] wg1: entered allmulticast mode [ 391.742356][T25164] wg2: entered allmulticast mode [ 391.747379][T25164] veth0_to_bridge: entered allmulticast mode [ 391.753552][T25164] bridge_slave_0: entered allmulticast mode [ 391.759662][T25164] veth1_to_bridge: entered allmulticast mode [ 391.765763][T25164] bridge_slave_1: entered allmulticast mode [ 391.771846][T25164] veth0_to_bond: entered allmulticast mode [ 391.777951][T25164] veth1_to_bond: entered allmulticast mode [ 391.784124][T25164] veth0_to_team: entered allmulticast mode [ 391.790596][T25164] veth1_to_team: entered allmulticast mode [ 391.796995][T25164] veth0_to_batadv: entered allmulticast mode [ 391.803113][T25164] batadv_slave_0: entered allmulticast mode [ 391.809126][T25164] xfrm0: entered allmulticast mode [ 391.814449][T25164] veth0_to_hsr: entered allmulticast mode [ 391.820330][T25164] hsr_slave_0: entered allmulticast mode [ 391.826078][T25164] veth1_to_hsr: entered allmulticast mode [ 391.831978][T25164] hsr_slave_1: entered allmulticast mode [ 391.837802][T25164] hsr0: entered allmulticast mode [ 391.843320][T25164] veth1_virt_wifi: entered allmulticast mode [ 391.849394][T25164] veth0_virt_wifi: entered allmulticast mode [ 391.855571][T25164] veth1_vlan: entered allmulticast mode [ 391.861292][T25164] veth0_vlan: entered allmulticast mode [ 391.866964][T25164] ÿÿÿÿÿÿ: entered allmulticast mode [ 391.872400][T25164] macvlan0: entered allmulticast mode [ 391.877930][T25164] macvlan1: entered allmulticast mode [ 391.883485][T25164] ipvlan0: entered allmulticast mode [ 391.888929][T25164] ipvlan1: entered allmulticast mode [ 391.894594][T25164] geneve0: entered allmulticast mode [ 391.900010][T25164] geneve1: entered allmulticast mode [ 391.905429][T25164] erspan1: entered allmulticast mode [ 391.911235][T25164] gre1: entered allmulticast mode [ 391.916888][T25164] bond0: entered allmulticast mode [ 391.922197][T25164] netdevsim netdevsim6 eth0: entered allmulticast mode [ 391.929274][T25164] netdevsim netdevsim6 eth1: entered allmulticast mode [ 391.939552][T25164] netdevsim netdevsim6 eth2: entered allmulticast mode [ 391.959793][T25164] netdevsim netdevsim6 eth3: entered allmulticast mode [ 391.966846][T25164] ip6_vti1: entered allmulticast mode [ 392.011532][T25169] lo speed is unknown, defaulting to 1000 [ 392.060056][ T29] kauditd_printk_skb: 1453 callbacks suppressed [ 392.060075][ T29] audit: type=1400 audit(1751853235.428:80447): avc: denied { mount } for pid=25196 comm="syz.6.9095" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 392.098199][ T29] audit: type=1400 audit(1751853235.428:80448): avc: denied { map_create } for pid=25193 comm="syz.0.9094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 392.117743][ T29] audit: type=1400 audit(1751853235.428:80449): avc: denied { map_read map_write } for pid=25193 comm="syz.0.9094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 392.137852][ T29] audit: type=1400 audit(1751853235.428:80450): avc: denied { prog_load } for pid=25193 comm="syz.0.9094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 392.157184][ T29] audit: type=1400 audit(1751853235.428:80451): avc: denied { bpf } for pid=25193 comm="syz.0.9094" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 392.177956][ T29] audit: type=1400 audit(1751853235.428:80452): avc: denied { perfmon } for pid=25193 comm="syz.0.9094" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 392.199125][ T29] audit: type=1400 audit(1751853235.428:80453): avc: denied { recv } for pid=25166 comm="syz.7.9091" saddr=10.128.0.163 src=30036 daddr=10.128.0.208 dest=54406 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 392.224794][ T29] audit: type=1400 audit(1751853235.428:80454): avc: denied { perfmon } for pid=25193 comm="syz.0.9094" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 392.245900][ T29] audit: type=1400 audit(1751853235.428:80455): avc: denied { bpf } for pid=25193 comm="syz.0.9094" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 392.266728][ T29] audit: type=1400 audit(1751853235.458:80456): avc: denied { module_request } for pid=24995 comm="syz.4.9044" kmod="crypto-cbc(sm4)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 392.629080][T25230] netlink: 'syz.0.9105': attribute type 4 has an invalid length. [ 392.665155][T25230] netlink: 'syz.0.9105': attribute type 4 has an invalid length. [ 392.673768][T25236] loop7: detected capacity change from 0 to 1024 [ 392.682443][T25236] EXT4-fs: Ignoring removed nomblk_io_submit option [ 392.715509][T25236] EXT4-fs mount: 10 callbacks suppressed [ 392.715531][T25236] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.776301][T21071] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.787865][T25243] batman_adv: batadv0: Adding interface: dummy0 [ 392.794260][T25243] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.819695][T25243] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 393.389641][T25268] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 393.396249][T25268] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 393.399135][T25270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25270 comm=syz.9.9120 [ 393.403968][T25268] vhci_hcd vhci_hcd.0: Device attached [ 393.573779][T25271] vhci_hcd: connection closed [ 393.574214][T20091] vhci_hcd: stop threads [ 393.583320][T20091] vhci_hcd: release socket [ 393.587769][T20091] vhci_hcd: disconnect device [ 393.601091][ T3385] vhci_hcd: vhci_device speed not set [ 393.683243][T25279] loop4: detected capacity change from 0 to 1024 [ 393.723483][T25279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.848776][T25279] lo speed is unknown, defaulting to 1000 [ 394.151646][T23272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.268807][T25300] loop4: detected capacity change from 0 to 1024 [ 394.278196][T25300] EXT4-fs: Ignoring removed orlov option [ 394.287020][T25300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.899172][T25300] ================================================================== [ 394.907313][T25300] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 394.915318][T25300] [ 394.917646][T25300] write to 0xffff88811a038f94 of 4 bytes by task 25303 on cpu 1: [ 394.925381][T25300] xas_set_mark+0x12b/0x140 [ 394.929915][T25300] __folio_start_writeback+0x1dd/0x440 [ 394.935413][T25300] ext4_bio_write_folio+0x5ad/0x9f0 [ 394.940635][T25300] mpage_submit_folio+0xe4/0x170 [ 394.945597][T25300] mpage_process_page_bufs+0x39b/0x4a0 [ 394.951075][T25300] mpage_prepare_extent_to_map+0x741/0xaa0 [ 394.956901][T25300] ext4_do_writepages+0xa1a/0x21c0 [ 394.962021][T25300] ext4_writepages+0x176/0x300 [ 394.966802][T25300] do_writepages+0x1c6/0x310 [ 394.971398][T25300] file_write_and_wait_range+0x156/0x2c0 [ 394.977050][T25300] generic_buffers_fsync_noflush+0x45/0x120 [ 394.982956][T25300] ext4_sync_file+0x1ab/0x690 [ 394.987657][T25300] vfs_fsync_range+0x10d/0x130 [ 394.992458][T25300] ext4_buffered_write_iter+0x34f/0x3c0 [ 394.998026][T25300] ext4_file_write_iter+0x383/0xf00 [ 395.003253][T25300] iter_file_splice_write+0x5f2/0x970 [ 395.008652][T25300] direct_splice_actor+0x156/0x2a0 [ 395.013788][T25300] splice_direct_to_actor+0x312/0x680 [ 395.019172][T25300] do_splice_direct+0xda/0x150 [ 395.023951][T25300] do_sendfile+0x380/0x650 [ 395.028373][T25300] __x64_sys_sendfile64+0x105/0x150 [ 395.033579][T25300] x64_sys_call+0xb39/0x2fb0 [ 395.038174][T25300] do_syscall_64+0xd2/0x200 [ 395.042710][T25300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.048631][T25300] [ 395.050963][T25300] read to 0xffff88811a038f94 of 4 bytes by task 25300 on cpu 0: [ 395.058618][T25300] __writeback_single_inode+0x1f9/0x7c0 [ 395.064186][T25300] writeback_single_inode+0x167/0x3e0 [ 395.069569][T25300] sync_inode_metadata+0x5b/0x90 [ 395.074532][T25300] generic_buffers_fsync_noflush+0xd9/0x120 [ 395.080448][T25300] ext4_sync_file+0x1ab/0x690 [ 395.085155][T25300] vfs_fsync_range+0x10d/0x130 [ 395.089935][T25300] ext4_buffered_write_iter+0x34f/0x3c0 [ 395.095505][T25300] ext4_file_write_iter+0x383/0xf00 [ 395.100718][T25300] iter_file_splice_write+0x5f2/0x970 [ 395.106136][T25300] direct_splice_actor+0x156/0x2a0 [ 395.111265][T25300] splice_direct_to_actor+0x312/0x680 [ 395.116660][T25300] do_splice_direct+0xda/0x150 [ 395.121447][T25300] do_sendfile+0x380/0x650 [ 395.125879][T25300] __x64_sys_sendfile64+0x105/0x150 [ 395.131101][T25300] x64_sys_call+0xb39/0x2fb0 [ 395.135716][T25300] do_syscall_64+0xd2/0x200 [ 395.140242][T25300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.146150][T25300] [ 395.148474][T25300] value changed: 0x0a000021 -> 0x04000021 [ 395.154206][T25300] [ 395.156547][T25300] Reported by Kernel Concurrency Sanitizer on: [ 395.162720][T25300] CPU: 0 UID: 0 PID: 25300 Comm: syz.4.9129 Tainted: G W 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 395.175075][T25300] Tainted: [W]=WARN [ 395.178882][T25300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 395.188947][T25300] ================================================================== [ 395.212558][T25316] loop0: detected capacity change from 0 to 164 [ 395.244848][T25316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9133'. [ 395.263690][T23272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.418799][T25319] lo speed is unknown, defaulting to 1000