last executing test programs: 1m27.864893861s ago: executing program 2 (id=67): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0xfd, 0x7ffc1ffb}]}) epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, 0x0, 0x4000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'geneve1\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1e, r3}) sendto$inet6(r2, &(0x7f0000000280)="0503092c8f0b480301020d00c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 1m27.784244712s ago: executing program 2 (id=69): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) timer_settime(0x0, 0x1, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r0}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00', r5, 0x0, 0x4}, 0x18) unshare(0x64000600) 1m27.595810955s ago: executing program 2 (id=74): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) getgid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) 1m27.441776627s ago: executing program 2 (id=77): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000340)={[{@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) write(r1, &(0x7f0000001000)='B', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) getrandom(0x0, 0x0, 0x2) clock_gettime(0x0, 0x0) mount(0x0, &(0x7f0000001200)='./file1\x00', &(0x7f0000001240)='omfs\x00', 0xa00008, &(0x7f0000001280)='\x00') 1m25.564810376s ago: executing program 4 (id=86): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) pipe(&(0x7f00000052c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r3}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000f80)=@delqdisc={0x324, 0x25, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xa, 0xfff3}, {0x7, 0xfff3}, {0x18, 0xfff2}}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7, 0x4, 0x9, 0x2, 0x5154a8bd, 0x6, 0x1}}, {0x6, 0x2, [0x15f]}}, {{0x1c, 0x1, {0x6, 0x6, 0x3, 0x9, 0x2, 0x2, 0xc, 0x1}}, {0x6, 0x2, [0x40]}}, {{0x1c, 0x1, {0x40, 0x1, 0x8, 0x5, 0x0, 0x1000, 0x0, 0x8}}, {0x14, 0x2, [0x3, 0x4, 0x7, 0x0, 0x4, 0xf291, 0x3, 0x7fff]}}]}, @TCA_RATE={0x6, 0x5, {0x7}}, @TCA_STAB={0x1a8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf9, 0x0, 0x6, 0x3, 0x2, 0x71220943, 0x8, 0x5}}, {0xe, 0x2, [0x6, 0x2, 0x4d32, 0xdf02, 0x75a]}}, {{0x1c, 0x1, {0x2, 0x5, 0x4, 0x400, 0x2, 0x4242, 0x37ae, 0x5}}, {0xe, 0x2, [0xfff8, 0x9, 0x54c, 0xc, 0x7]}}, {{0x1c, 0x1, {0xf4, 0x4, 0x6, 0x1, 0x2, 0x10001, 0xff, 0x6}}, {0x10, 0x2, [0x5, 0xe, 0x2, 0x8, 0x5, 0x41]}}, {{0x1c, 0x1, {0xff, 0x5, 0x3, 0x7, 0x0, 0x3, 0x7, 0x4}}, {0xc, 0x2, [0x6, 0x7, 0x5, 0x7fff]}}, {{0x1c, 0x1, {0x0, 0x7, 0x3, 0x7, 0x1, 0x3, 0x8cd, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0xfb, 0x8, 0x7, 0x9f, 0x0, 0x4032, 0x5, 0x4}}, {0xc, 0x2, [0xf9, 0x2, 0x0, 0x9]}}, {{0x1c, 0x1, {0xa, 0x7, 0x10, 0xc3b, 0x1, 0x8, 0x0, 0x7}}, {0x12, 0x2, [0x96e, 0x8, 0xa4f6, 0x8, 0x3, 0x0, 0x800]}}, {{0x1c, 0x1, {0x5, 0x4b, 0x1, 0x8001, 0x1, 0x9, 0x6, 0x3}}, {0xa, 0x2, [0x1, 0x8, 0x7fff]}}, {{0x1c, 0x1, {0x0, 0x6, 0x8, 0x40, 0x1, 0x0, 0x3, 0x6}}, {0x10, 0x2, [0x9, 0x1000, 0x0, 0xccac, 0x9, 0x3]}}, {{0x1c, 0x1, {0x8, 0x6, 0xbf3, 0x1, 0x0, 0x4, 0x9, 0x4}}, {0xc, 0x2, [0x100, 0xdd03, 0x0, 0x6]}}]}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_STAB={0xcc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x9, 0x5, 0x1, 0x0, 0x2, 0x2, 0x3}}, {0xa, 0x2, [0xfff0, 0x8, 0x0]}}, {{0x1c, 0x1, {0x4, 0x4a, 0x0, 0x5, 0x1, 0x6, 0x7fffffff, 0x7}}, {0x12, 0x2, [0x1, 0xa, 0x3, 0x5, 0x8, 0x4, 0x8]}}, {{0x1c, 0x1, {0x2, 0x52, 0x4, 0xffffffff, 0x2, 0x9, 0xfffffff3, 0x2}}, {0x8, 0x2, [0xe, 0x8000]}}, {{0x1c, 0x1, {0x4, 0x2, 0x400, 0xffffffff, 0x2, 0x7526, 0xf3ed3b4, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x7f, 0x3, 0x7f, 0x3ff, 0x1, 0xc7f, 0x3, 0x4}}, {0xc, 0x2, [0x0, 0x7, 0x7, 0xff]}}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x48041}, 0x4008891) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3, 0xfc, "0062ba7d820000000001001f820dac4eb71f11"}) r6 = syz_open_pts(r5, 0x0) r7 = dup(r6) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 1m25.537800727s ago: executing program 2 (id=87): socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x1114, 0x0, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, 0x0) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000009"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap(&(0x7f000054f000/0x2000)=nil, 0x2000, 0x2000003, 0x28012, r4, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1m25.468147978s ago: executing program 4 (id=88): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x1, 0x0, 0x30, 0xf}, {0x5, 0xd, 0x6, 0x1}, {0x82, 0x0, 0xff, 0x1}, {0xc5, 0x0, 0x7, 0xc}]}) r0 = socket(0x28, 0x5, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000540)={0x1, 0x2000000, 0x5, 0x9, 0x18e, 0x0}) r2 = socket(0x27, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) accept4$unix(r2, 0x0, 0x0, 0x0) 1m24.367707604s ago: executing program 4 (id=93): socketpair(0x21, 0xa, 0x7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x40000}, 0x18) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg(0xffffffffffffffff, 0x0, 0x4000004) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x84004) ptrace(0x10, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x40000) r1 = epoll_create1(0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) close_range(r1, 0xffffffffffffffff, 0x0) 1m24.076694949s ago: executing program 2 (id=95): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket(0x11, 0x800000003, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r2}, 0x10) sigaltstack(0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e22, @loopback}}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000100)) 1m24.076095349s ago: executing program 4 (id=96): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) r1 = syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRESHEX=r2, @ANYRES8=r1], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000540)}, 0x20) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x40000000000007b, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendto$inet6(r2, &(0x7f0000000500)="a4", 0xffe4, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r6 = syz_clone(0x8a22000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x40000000, 0x0) 1m24.019893599s ago: executing program 32 (id=95): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket(0x11, 0x800000003, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r2}, 0x10) sigaltstack(0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e22, @loopback}}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000100)) 1m23.516342087s ago: executing program 4 (id=104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000007c6e00000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) preadv2(r5, &(0x7f0000000200)=[{&(0x7f0000000380)=""/163, 0xa3}], 0x1, 0x9fffd, 0x3, 0x12) 1m22.580842771s ago: executing program 4 (id=111): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x408, 0xcd, 0x101, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b703000000f908008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) close(r5) 1m22.546839352s ago: executing program 33 (id=111): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x408, 0xcd, 0x101, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b703000000f908008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) close(r5) 3.776334883s ago: executing program 3 (id=758): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 3.28598648s ago: executing program 1 (id=761): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_clone(0x40200400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r4, r4, 0x0, 0x0) 3.120529703s ago: executing program 3 (id=763): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x7f) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r4) 2.63060583s ago: executing program 3 (id=767): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x210001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) pwritev2(r1, &(0x7f0000000240)=[{}], 0x1, 0x7a00, 0x0, 0x3) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x48}, 0x0) 2.62937615s ago: executing program 5 (id=768): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x40002) r0 = syz_io_uring_setup(0x516f, &(0x7f0000000140)={0x0, 0x5646, 0x80, 0x40000005, 0x3d6}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x25dfdbfd, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xe85e}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1de, 0x9, 0xc}}]}, {0x4}, {0xc}, {0xc, 0x4, {0x1, 0x1}}}}]}]}, 0x70}}, 0x0) io_uring_enter(r0, 0x124e, 0x400, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x80000000000000}, 0x18) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x10}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x0) 2.594896171s ago: executing program 6 (id=769): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f00000002c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x61b, &(0x7f0000000640)="$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") r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000540)) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x6) ioctl$MON_IOCX_GETX(r2, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 2.565014082s ago: executing program 3 (id=770): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000180)={0x80, 0x8, 0x2, 0x40000000, 0x23, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000040)={0x80, 0x8, 0x40002, 0xfffffffc}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) 2.517202552s ago: executing program 6 (id=771): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x15c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x104, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ENC_OPTS={0xc4, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xbd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xfe}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x10}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xe}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xb}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xa5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xd}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5f}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xfc}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x72}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x1c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffb}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x77ff}]}]}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffbffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syslog(0x2, &(0x7f0000001940)=""/87, 0x57) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcb2, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) 2.361173714s ago: executing program 1 (id=772): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, 0x0, 0x140) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xe7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r5], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 2.346517445s ago: executing program 3 (id=773): readv(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) rename(0x0, &(0x7f0000000140)='./file1\x00') rmdir(0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 2.203425457s ago: executing program 6 (id=774): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.870725782s ago: executing program 0 (id=776): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6002adf700383a00fe880000007411344389ad1049843a0000000000000000000001ff0200000000e1ffffff00000000000102fbf2aa4a174db3fcfd906300003a00ff010000000000000000000000000001ff0200"/110], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r0, 0xc0189436, 0x210020000005) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x38, r1, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}]}, 0x38}}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r4, &(0x7f0000000000)='.\x00', 0x0) 1.742058414s ago: executing program 5 (id=777): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="170000002b"], 0x20) r0 = socket(0x28, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, @perf_config_ext={0x2, 0xe23a}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) fgetxattr(r3, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r4 = socket(0x28, 0x5, 0x0) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000c00)='_', 0x1}], 0x1}}], 0x1, 0x24008094) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 1.723122874s ago: executing program 1 (id=778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003680)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x100) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) getsockname$tipc(r2, &(0x7f0000000280)=@id, &(0x7f00000002c0)=0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) listen(r3, 0x400) recvfrom$unix(r3, &(0x7f0000000140)=""/129, 0x81, 0x10120, 0x0, 0x0) 1.709146614s ago: executing program 6 (id=779): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x6, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x104040, 0x0, 0x0, 0x2, 0x5, 0x15, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x40df, 0x0, 0x4, 0x8, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x803, 0x0) syz_usb_connect(0x0, 0x5c, &(0x7f00000000c0)=ANY=[], 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x66010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8da}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x1, 0x6ed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 1.606534606s ago: executing program 0 (id=780): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 1.584637136s ago: executing program 1 (id=781): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x510, 0x0, 0x11, 0x148, 0x340, 0x0, 0x478, 0x2a8, 0x2a8, 0x478, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7, 0x0, 0x18}}}, @common=@unspec=@bpf0={{0x230}, {0x800, [{0xd, 0xc, 0x0, 0x9}, {0x3, 0x5, 0x4, 0x7}, {0x401, 0xff, 0x36, 0x9}, {0x9, 0x1, 0x4, 0xc1c}, {0xff, 0x8, 0x6, 0x6}, {0x800, 0x6, 0x1, 0x9}, {0x101, 0x1, 0x8, 0x1e2}, {0x9, 0x3, 0xf, 0xffffffff}, {0x9, 0x5, 0xd, 0x7}, {0x3, 0x3, 0x0, 0x1}, {0x4, 0xb5, 0x51, 0x8}, {0xaf, 0x2, 0xf, 0x1}, {0x80, 0x77, 0xd, 0x2}, {0x7, 0x4, 0x8, 0x649b00}, {0x7, 0x5, 0x4a, 0x10}, {0x8, 0x9, 0x29, 0x8000}, {0xbb, 0x7, 0x1, 0x3}, {0x81, 0x9, 0xa, 0x1}, {0x3, 0x6, 0x1, 0x5}, {0xfffe, 0xff, 0x1, 0x4}, {0x3, 0x4, 0xc7, 0x3}, {0x4, 0xeb, 0x6, 0xb263}, {0x0, 0x5, 0x4, 0xdc70}, {0x680, 0xc, 0x1a, 0x10000}, {0x40, 0x5, 0x7f, 0x4}, {0xfffa, 0xb, 0x6, 0x6}, {0x400, 0x1, 0x0, 0x200}, {0x4, 0x7, 0xf4, 0x1}, {0x5, 0x9, 0x2, 0xfffffffd}, {0x4, 0xe6, 0xff, 0x2}, {0x0, 0x39, 0x59, 0x400}, {0x3, 0x5, 0x6, 0x8}, {0x200, 0xb7, 0x1, 0x80}, {0x4, 0xc, 0xa, 0x6}, {0x32, 0x8, 0x1, 0x800}, {0x2, 0x1, 0x1, 0x4}, {0x800, 0xe, 0x7, 0x8}, {0x8, 0x80, 0xff, 0x1}, {0x6, 0xc, 0x4, 0x73fc6f11}, {0x4, 0x6, 0xd}, {0x6, 0xe9, 0x0, 0x3}, {0x6d5, 0x1, 0x1, 0xffffffff}, {0x0, 0x6, 0x0, 0x7}, {0xcdb, 0xd4, 0x81, 0x6}, {0x5, 0x49, 0xd, 0x9}, {0x7f, 0x7, 0x2, 0x80000001}, {0x5, 0x7f, 0x80, 0xe}, {0x2, 0xff, 0x3, 0x6}, {0x8000, 0x2, 0x9}, {0x9, 0x1, 0x2, 0x1}, {0x5, 0x2, 0xcd, 0xfff}, {0xa, 0x9, 0x5, 0x7}, {0x10, 0x2, 0x6, 0x4}, {0x5, 0xed, 0x7f, 0xff}, {0x81, 0x40, 0x10, 0x9}, {0x65d, 0x0, 0x0, 0x6}, {0x7, 0x3, 0xc, 0x145}, {0x5, 0x4, 0x7, 0x6}, {0x3, 0x7f, 0xf, 0x6f56}, {0x8, 0x7f, 0x3, 0x3}, {0x3, 0x3, 0x5}, {0x8, 0x4f, 0x9, 0x5}, {0x6, 0xe, 0x3, 0x351d}, {0x3ff, 0x2, 0x0, 0x8}], {0xe4}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'geneve0\x00', 'netdevsim0\x00', {}, {0xff}}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6963f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x6, 0x3, 0x1, 0x2], 0x3, 0x4}, {0x4, [0x5, 0x4, 0x2, 0x4, 0x6, 0x2], 0x6, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) listen(r3, 0x0) shutdown(r2, 0x0) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r5 = accept(r3, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000002240)='\x00', 0x1, 0x600448e9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="04000400000000003400128008000100677470002800028008000300010400001400080000000000000000000000ffff7f000001050005000000000008000a00", @ANYRES32=r1, @ANYBLOB="9f37ec3996b96ac22d3a411e21ce78263c72ce547906b4f55a4ceab338896554b8548335d39a722650f3ec8f643c0fe2"], 0x5c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)={0x1}) r6 = socket$caif_seqpacket(0x25, 0x5, 0x1) setsockopt$CAIFSO_LINK_SELECT(r6, 0x116, 0x7f, &(0x7f0000000040)=0x8001, 0x4) 1.510267577s ago: executing program 0 (id=782): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000900)='./bus\x00', 0x0, &(0x7f0000004080), 0x1, 0x76f, &(0x7f0000002080)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x19) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f0000000740)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec987ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad51300", 0x18}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) keyctl$KEYCTL_MOVE(0x4, r4, r3, 0x0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r3, r5, 0x0, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141142, 0x1) ftruncate(r6, 0x2007ffb) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendfile(r6, r6, 0x0, 0x800000009) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f00000006c0)="85be", 0x2}], 0x1, 0x1400, 0x0, 0xc) 648.007121ms ago: executing program 3 (id=783): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_clone(0x40200400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r4, r4, 0x0, 0x0) 647.701601ms ago: executing program 6 (id=784): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0, 0xffffffffffffffff}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}}}, 0x24}}, 0x0) r6 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1d, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@jmp={0x5, 0x1, 0xb, 0x1, 0x1, 0x50, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x6, 0x1000, &(0x7f0000000a00)=""/4096, 0x41100, 0x7c, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000640)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0xf, 0xa5, 0x4}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000800)=[{0x2, 0x5, 0x7, 0x4}, {0x4, 0x5, 0x3, 0xa}, {0x5, 0x4, 0xb, 0xc}], 0x10, 0x2c41523b, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x9403, 0x0, 0x2e0, 0x2c0, 0x410, 0x3d8, 0x3d8, 0x410, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0xffffffff, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@empty, @local, [], [], 'ip6erspan0\x00', 'bridge_slave_1\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 647.26205ms ago: executing program 0 (id=793): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1}, 0x20000000) io_setup(0x1, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$key(0xf, 0x3, 0x2) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2895018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 646.752921ms ago: executing program 1 (id=785): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0xa4f4d31) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f0000003fc0)}, 0xe) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000740)={'fscrypt:', @auto=[0x32, 0x62, 0x63, 0x36, 0x32, 0x33, 0x62, 0x33, 0x38, 0x66, 0x34, 0x65, 0x37, 0x30, 0x62, 0x30]}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000840)=@chain={'key_or_keyring:', r4}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x13, r5, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 646.589711ms ago: executing program 5 (id=786): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0xc2208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x2}, 0x10c18a, 0x2, 0x8000, 0x5, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 583.062581ms ago: executing program 0 (id=787): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x408, &(0x7f0000001180)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00'], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x311000, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getresgid(&(0x7f0000000c40), &(0x7f0000000140), &(0x7f0000000240)=0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX=r5, @ANYBLOB="00006b746769643d0092", @ANYRESDEC, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") statx(r2, &(0x7f0000000100)='./file0\x00', 0x4000, 0x884, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x4, &(0x7f00000003c0)=[r4, r5, r6, 0x0]) 580.346681ms ago: executing program 5 (id=788): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0xc2208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x2}, 0x10c18a, 0x2, 0x8000, 0x5, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000000)={0x1, 0x200, '\x00\b\x00', 0x0, 0x3}) 507.219823ms ago: executing program 0 (id=789): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0xc2208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x2}, 0x10c18a, 0x2, 0x8000, 0x5, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000000)={0x1, 0x200, '\x00\b\x00', 0x0, 0x3}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0xfe, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 439.685844ms ago: executing program 6 (id=790): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socket(0x18, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) mq_open(&(0x7f00000001c0)='(\x00', 0x40, 0x20, &(0x7f0000000200)={0xffffffffffffffff, 0x2, 0x6, 0x101}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) statx(r0, 0x0, 0x400, 0x400, 0x0) kexec_load(0x300, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0) 392.671254ms ago: executing program 5 (id=791): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 17.7956ms ago: executing program 1 (id=792): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000100)={[{@barrier_val={'barrier', 0x3d, 0x8000}}, {@i_version}]}, 0x6, 0x504, &(0x7f0000019940)="$eJzs3c9vG1kdAPDvOHGTZt1NF/YACNiyLBRU6vzobrRaDnQvILRaCbFCQuLQDYk3imLXUZwsTcghPXJHohIn+BO4cUDqiQM3bnDjUg5IBSJQg8Rh0IyniZvEdWiTeGt/PtJ45r1x/H3PznvP8xznBTC0rkTETkRciIgPI2KyyE+KLW62t+x+j3a3F/Z2txeSSNMP/pHk57O86PiZzEvFY45HxPe/E/Hj5Gjc1ubWyny9Xlsr0lPrjdWp1ubW9eVSkTM7NzM3/faNt2ZPra6vNX7z8NvL7/3gd7/9woM/7nz9p1mxKj+7lJ/rrMdpale9HJWOvNGIeO8sgvXJaPH7w4sna22fiojX8/Y/GSP5qwkADLI0nYx0sjMNAAy67Pq/EkmpWswFVKJUqlbbc3ivxkSp3mytX5tsbtxejHwO63KUSx8t12vTxVzh5SgnWXomPz5Izx5K34iIVyLi52MX83R1oVlf7OcbHwAYYi8dGv//PdYe/wGAATfe7wIAAOfO+A8Aw8f4DwDD5/8Y/307EAAGhOt/ABg+xn8AGD49x/+751MOAOBcfO/997Mt3Sv+//Xix5sb36x8fH2x1lqpNjYWqgvNtdXqUrO5VK9VF9K01+PVm83VmTf3k63NrVuN5sbt9VvLjfml2q1a+YzrAwD09spr9/+cRMTOOxfzLTrWcjBWw2ArPZE6ZqEeYGCN9LsAQN/4Pg8MrxNc45sGgAHX68q/658I3bP4K7yorn7W/D8Mq1K/CwD0zbPN/3/r1MsBnD/z/zC80jSx5j8ADBlz/MCzfP7/wyg+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVcm3pFTN1wLfyW5L1WrEpYi4HOXko+V6bToiXo6IP42Vx7L0TL8LDQA8p9LfkmL9r6uTb1QOn72Q/Gcs30fET375wS/uzK+vr81k+f/cz1+/V+TPXuhHBQCATjePZrXH6WLfcSH/aHd74fF2nkV8+G57cdEs7l6xtc+Mxmi+H49yREz8KynSbdn7lZFTiL9zNyI+c1D/Ox0RKvkcSHvl08Pxs9iXziD+wfOfRJqm6UH80hPxS3nZsn05fy4+fQplgWFz/912P5m1u4u721kTK9pfKa7k++Pb/3jeQz2/x/3f3pH+r7Tf/40ciZ/kbf7KfvrpJXn45u+/eyQznWyfuxvxudHj4if78ZMu/e8bJ6zjXz7/xde7nUt/FXE1jo/f1si72an1xupUa3Pr+nJjfqm2VLs9Ozs3Mzf99o23ZqfyOer27R+Oi/H3d6693C1+Vv+JLvHHe9T/Kyes/6//++GPvvSU+F/78vGv/6tPiZ+NiV89Yfz5iZvHLd+9H3+xS/17vf7XThj/wV+3Fk94VwDgHLQ2t1bm6/XaWo+D7L1mr/s4eDEPYifinIN+YzziE1F3B90O+t0zAWftoNH3uyQAAAAAAAAAAAAAAEA3rc2tlbE4268T9buOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADK7/BQAA//+TAtDE") bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00'], 0x48) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0_virt_wifi\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r3}, 0x10, &(0x7f0000000780)={&(0x7f0000000440)=@canfd={{}, 0x4c, 0x3, 0x0, 0x0, "0e7692fddc9d8ba5a0ac79669b0e47a81f2e3c8973fc2af2a7fa10b9126ea28baed9b57d82ab23db557c307ae88da9c6c68d8ceae8e69b06707297b87f8c925a"}, 0x48}, 0x2, 0x0, 0x0, 0x8180}, 0x20044010) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x3}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x34}}, 0x804) r7 = io_uring_setup(0x51d2, &(0x7f0000000400)={0x0, 0x631b, 0x1000, 0x1, 0x2d6, 0x0, r4}) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) 0s ago: executing program 5 (id=794): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000008011d0000000000000000020000080900010073797a310000000004000480050003001100000006000240001700"], 0x34}, 0x1, 0x0, 0x0, 0x4c40}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x478, &(0x7f0000000940)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x9135}, 0x18) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x4c810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r5, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r5}}, 0x18) kernel console output (not intermixed with test programs): e [ 64.955673][ T4438] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.203: bg 0: block 248: padding at end of block bitmap is not set [ 64.976585][ T4436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.016663][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 65.016679][ T29] audit: type=1326 audit(1742689832.565:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.6.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f253a8bbad0 code=0x7ffc0000 [ 65.022082][ T4438] Quota error (device loop5): write_blk: dquota write failed [ 65.023136][ T29] audit: type=1326 audit(1742689832.565:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.6.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f253a8bbeb7 code=0x7ffc0000 [ 65.023168][ T29] audit: type=1326 audit(1742689832.565:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.6.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f253a8bbad0 code=0x7ffc0000 [ 65.048683][ T4438] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 65.056228][ T29] audit: type=1326 audit(1742689832.565:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.6.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253a8bd169 code=0x7ffc0000 [ 65.082032][ T4438] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.203: Failed to acquire dquot type 1 [ 65.106467][ T29] audit: type=1326 audit(1742689832.565:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.6.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253a8bd169 code=0x7ffc0000 [ 65.160807][ T4438] EXT4-fs (loop5): 1 truncate cleaned up [ 65.232005][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.247811][ T4438] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.261744][ T29] audit: type=1400 audit(1742689832.795:919): avc: denied { read } for pid=4429 comm="syz.1.205" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 65.286731][ T29] audit: type=1400 audit(1742689832.795:920): avc: denied { open } for pid=4429 comm="syz.1.205" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 65.318263][ T4431] netlink: 'syz.1.205': attribute type 13 has an invalid length. [ 65.382278][ T29] audit: type=1400 audit(1742689832.865:921): avc: denied { ioctl } for pid=4429 comm="syz.1.205" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 65.418144][ T4431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 65.445669][ T4444] loop0: detected capacity change from 0 to 1024 [ 65.472359][ T4444] EXT4-fs: Ignoring removed orlov option [ 65.478877][ T4444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.502110][ T4438] syz.5.203 (4438) used greatest stack depth: 9272 bytes left [ 65.510786][ T3768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.541553][ T4444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.570738][ T4444] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.603789][ T4455] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 65.610863][ T4455] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 65.618945][ T4455] vhci_hcd vhci_hcd.0: Device attached [ 65.633679][ T4460] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 65.641661][ T4460] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 65.650163][ T4460] vhci_hcd vhci_hcd.0: Device attached [ 65.658047][ T4456] vhci_hcd: connection closed [ 65.659571][ T30] vhci_hcd: stop threads [ 65.670133][ T30] vhci_hcd: release socket [ 65.675568][ T30] vhci_hcd: disconnect device [ 65.891443][ T25] usb 3-1: new high-speed USB device number 2 using vhci_hcd [ 66.368555][ T4473] loop6: detected capacity change from 0 to 512 [ 66.384572][ T4473] loop6: detected capacity change from 0 to 512 [ 66.448782][ T4475] loop6: detected capacity change from 0 to 1024 [ 66.463581][ T4475] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.476900][ T4461] vhci_hcd: connection reset by peer [ 66.485210][ T3401] vhci_hcd: stop threads [ 66.489701][ T3401] vhci_hcd: release socket [ 66.494846][ T3401] vhci_hcd: disconnect device [ 66.503693][ T4475] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #11: comm syz.6.217: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 66.526045][ T4475] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.217: couldn't read orphan inode 11 (err -117) [ 66.539941][ T4475] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.074074][ T4533] loop0: detected capacity change from 0 to 1024 [ 68.125398][ T4533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.334498][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.346431][ T4554] SELinux: Context system_u:object_r:fixed_disk_device_t:s0 is not valid (left unmapped). [ 68.412488][ T4559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.233'. [ 68.664503][ T4601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.238'. [ 68.729295][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.743420][ T3377] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 68.759315][ T4611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.784913][ T4611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.154602][ T4631] loop3: detected capacity change from 0 to 128 [ 69.316994][ T4637] loop3: detected capacity change from 0 to 4096 [ 69.351755][ T4637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.493271][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.576753][ T4655] IPVS: stopping master sync thread 4656 ... [ 69.577358][ T4656] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 69.634889][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.664076][ T4655] syz.6.249 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 69.896494][ T4673] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.252'. [ 69.903837][ T4665] program syz.6.253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.936690][ T4660] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.252'. [ 70.209777][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 70.209794][ T29] audit: type=1400 audit(1742689837.755:1140): avc: denied { create } for pid=4681 comm="syz.6.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 70.253459][ T4684] loop5: detected capacity change from 0 to 512 [ 70.457436][ T4684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.478407][ T4684] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.501481][ T29] audit: type=1400 audit(1742689838.045:1141): avc: denied { connect } for pid=4693 comm="syz.6.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.582801][ T4689] ref_ctr_offset mismatch. inode: 0x101 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 70.589509][ T29] audit: type=1400 audit(1742689838.075:1142): avc: denied { read write } for pid=4683 comm="syz.5.255" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.617339][ T29] audit: type=1400 audit(1742689838.075:1143): avc: denied { open } for pid=4683 comm="syz.5.255" path="/31/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.642902][ T29] audit: type=1400 audit(1742689838.105:1144): avc: denied { create } for pid=4683 comm="syz.5.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.663107][ T29] audit: type=1400 audit(1742689838.115:1145): avc: denied { ioctl } for pid=4683 comm="syz.5.255" path="socket:[9358]" dev="sockfs" ino=9358 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.688650][ T29] audit: type=1400 audit(1742689838.125:1146): avc: denied { nlmsg_write } for pid=4683 comm="syz.5.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 70.710797][ T29] audit: type=1326 audit(1742689838.135:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4697 comm="syz.6.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253a8bd169 code=0x7ffc0000 [ 70.735101][ T29] audit: type=1326 audit(1742689838.135:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4697 comm="syz.6.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253a8bd169 code=0x7ffc0000 [ 70.760824][ T29] audit: type=1326 audit(1742689838.135:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4697 comm="syz.6.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f253a8bd169 code=0x7ffc0000 [ 70.857201][ T3768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.882657][ T4705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.262'. [ 70.893122][ T4698] 9pnet_fd: Insufficient options for proto=fd [ 70.942723][ T4713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.953649][ T4714] loop0: detected capacity change from 0 to 164 [ 70.964615][ T4714] Unable to read rock-ridge attributes [ 70.971595][ T25] vhci_hcd: vhci_device speed not set [ 70.973999][ T4714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'. [ 70.994625][ T4713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.014009][ T4713] bond0 (unregistering): Released all slaves [ 71.328086][ T4745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 71.373673][ T4745] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 72.224266][ T4767] loop6: detected capacity change from 0 to 2048 [ 72.458500][ T4767] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.292279][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.439707][ T4831] netlink: 4 bytes leftover after parsing attributes in process `syz.6.278'. [ 73.492716][ T4831] netlink: 4 bytes leftover after parsing attributes in process `syz.6.278'. [ 73.562651][ T4837] 9pnet_fd: Insufficient options for proto=fd [ 74.172146][ T4854] serio: Serial port ptm1 [ 74.230735][ T4854] process 'syz.0.282' launched './file1' with NULL argv: empty string added [ 74.276948][ T4864] loop6: detected capacity change from 0 to 2048 [ 74.294817][ T4864] EXT4-fs: Ignoring removed oldalloc option [ 74.355703][ T4874] sd 0:0:1:0: device reset [ 74.380411][ T4873] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.439901][ T4873] loop3: detected capacity change from 0 to 1024 [ 74.493042][ T4873] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 74.504754][ T4873] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 74.516632][ T4873] JBD2: no valid journal superblock found [ 74.519009][ T4864] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.523222][ T4873] EXT4-fs (loop3): Could not load journal inode [ 74.595139][ T4887] io-wq is not configured for unbound workers [ 74.978309][ T4873] loop3: detected capacity change from 0 to 512 [ 75.019364][ T4873] EXT4-fs: Ignoring removed nobh option [ 75.053430][ T4873] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 75.073205][ T4873] EXT4-fs (loop3): failed to open journal device unknown-block(8,0) -16 [ 75.123115][ T4864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.161560][ T4864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.281955][ T4901] netlink: 'syz.0.290': attribute type 4 has an invalid length. [ 75.318077][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 75.318094][ T29] audit: type=1400 audit(1742689842.865:1329): avc: denied { mount } for pid=4896 comm="syz.1.288" name="/" dev="ramfs" ino=9534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 75.384066][ T4914] random: crng reseeded on system resumption [ 75.433261][ T29] audit: type=1400 audit(1742689842.915:1330): avc: denied { execute } for pid=4896 comm="syz.1.288" path="/52/file0/bus" dev="ramfs" ino=9535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 75.458028][ T29] audit: type=1400 audit(1742689842.935:1331): avc: denied { append } for pid=4900 comm="syz.0.290" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 75.484044][ T29] audit: type=1400 audit(1742689842.935:1332): avc: denied { open } for pid=4900 comm="syz.0.290" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 75.512849][ T36] IPVS: starting estimator thread 0... [ 75.519728][ T4895] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 75.519922][ T4915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.289'. [ 75.561651][ T4922] loop5: detected capacity change from 0 to 1024 [ 75.570525][ T4922] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 75.601580][ T4919] IPVS: using max 2208 ests per chain, 110400 per kthread [ 75.654646][ T29] audit: type=1400 audit(1742689843.135:1333): avc: denied { bind } for pid=4921 comm="syz.5.291" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.677877][ T29] audit: type=1400 audit(1742689843.135:1334): avc: denied { name_bind } for pid=4921 comm="syz.5.291" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 75.702534][ T29] audit: type=1400 audit(1742689843.135:1335): avc: denied { node_bind } for pid=4921 comm="syz.5.291" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 75.726430][ T29] audit: type=1400 audit(1742689843.135:1336): avc: denied { create } for pid=4921 comm="syz.5.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.747298][ T29] audit: type=1400 audit(1742689843.165:1337): avc: denied { name_connect } for pid=4925 comm="syz.5.292" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 75.770797][ T29] audit: type=1400 audit(1742689843.165:1338): avc: denied { listen } for pid=4925 comm="syz.5.292" lport=47333 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.800145][ T4933] bond_slave_1: entered promiscuous mode [ 75.829356][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'. [ 75.867288][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.901811][ T4933] bond0: (slave bond_slave_1): Releasing backup interface [ 75.922288][ T4933] bond_slave_1 (unregistering): left promiscuous mode [ 75.989780][ T4956] netlink: 28 bytes leftover after parsing attributes in process `syz.6.299'. [ 76.037562][ T4942] loop5: detected capacity change from 0 to 8192 [ 76.244328][ T4976] loop6: detected capacity change from 0 to 512 [ 76.252740][ T4978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'. [ 76.289239][ T4976] EXT4-fs (loop6): orphan cleanup on readonly fs [ 76.300156][ T4978] bond1: entered promiscuous mode [ 76.305610][ T4978] bond1: entered allmulticast mode [ 76.317577][ T4976] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.299: bg 0: block 248: padding at end of block bitmap is not set [ 76.399923][ T4989] geneve2: entered promiscuous mode [ 76.406250][ T4989] geneve2: entered allmulticast mode [ 76.493883][ T4976] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.299: Failed to acquire dquot type 1 [ 76.530437][ T4989] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 76.553978][ T4976] EXT4-fs (loop6): 1 truncate cleaned up [ 76.576052][ T4976] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.634585][ T4978] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 76.748613][ T4978] geneve2: left promiscuous mode [ 76.755566][ T4978] geneve2: left allmulticast mode [ 76.836058][ T4978] bond1 (unregistering): Released all slaves [ 76.935967][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.999212][ T3377] IPVS: starting estimator thread 0... [ 77.106621][ T5026] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 77.106855][ T5014] IPVS: stopping master sync thread 5026 ... [ 77.124887][ T5013] IPVS: using max 2016 ests per chain, 100800 per kthread [ 77.138896][ T5028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 77.144658][ T5025] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 77.149172][ T5028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 77.216532][ T5028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 77.289104][ T5036] loop5: detected capacity change from 0 to 164 [ 77.308137][ T5028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 77.318094][ T5028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 77.350211][ T5036] Unable to read rock-ridge attributes [ 77.383465][ T5036] Unable to read rock-ridge attributes [ 77.407139][ T5036] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 77.418829][ T5036] Unable to read rock-ridge attributes [ 77.440966][ T5036] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 77.462636][ T5049] loop6: detected capacity change from 0 to 512 [ 77.478948][ T5050] Unable to read rock-ridge attributes [ 77.495321][ T5050] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 77.522960][ T5049] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 77.551301][ T5050] syz.5.313: attempt to access beyond end of device [ 77.551301][ T5050] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 77.565102][ T5049] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.694891][ T5073] EXT4-fs (loop6): shut down requested (0) [ 77.730904][ T5077] loop0: detected capacity change from 0 to 512 [ 77.744780][ T5076] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.760256][ T5077] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 77.770775][ T5077] EXT4-fs (loop0): SIPHASH is not a valid default hash value [ 77.824409][ T5076] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.884824][ T5076] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.955596][ T5076] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.000657][ T5076] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.055743][ T5076] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.081183][ T5076] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.112522][ T5076] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.281920][ T5083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 78.388716][ T5083] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.402073][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 78.492941][ T5083] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.674725][ T5083] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.756850][ T5083] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.034643][ T5095] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.355826][ T5102] loop5: detected capacity change from 0 to 512 [ 79.387551][ T5102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.489189][ T5105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.501795][ T5065] syz.0.317 (5065) used greatest stack depth: 7368 bytes left [ 79.520635][ T5105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.533090][ T3768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.549808][ T5105] bond0 (unregistering): Released all slaves [ 80.334579][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 80.334648][ T29] audit: type=1400 audit(1742689847.885:1488): avc: denied { read } for pid=5122 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.270816][ T29] audit: type=1400 audit(1742689848.815:1489): avc: denied { read } for pid=5148 comm="syz.5.337" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 81.313962][ T29] audit: type=1400 audit(1742689848.815:1490): avc: denied { open } for pid=5148 comm="syz.5.337" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 81.412406][ T5152] loop6: detected capacity change from 0 to 512 [ 81.439511][ T5152] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.470825][ T29] audit: type=1326 audit(1742689849.015:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.6.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253a8bd169 code=0x7ffc0000 [ 81.543806][ T29] audit: type=1400 audit(1742689849.025:1492): avc: denied { mount } for pid=5154 comm="syz.5.339" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 81.567329][ T29] audit: type=1326 audit(1742689849.045:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.6.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253a8bd169 code=0x7ffc0000 [ 81.592314][ T29] audit: type=1326 audit(1742689849.045:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.6.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f253a8bd169 code=0x7ffc0000 [ 81.616933][ T29] audit: type=1326 audit(1742689849.045:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.6.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253a8bd169 code=0x7ffc0000 [ 81.641644][ T29] audit: type=1326 audit(1742689849.045:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.6.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f253a8bd169 code=0x7ffc0000 [ 81.665499][ T29] audit: type=1326 audit(1742689849.045:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.6.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253a8bd169 code=0x7ffc0000 [ 81.694269][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.921886][ T5167] netlink: 'syz.6.341': attribute type 13 has an invalid length. [ 82.169238][ T5167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.750298][ T5183] loop5: detected capacity change from 0 to 8192 [ 82.840262][ T5190] loop0: detected capacity change from 0 to 512 [ 82.885748][ T5190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.938794][ T5195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.959114][ T5195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.984627][ T5195] loop3: detected capacity change from 0 to 512 [ 83.013177][ T5195] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.022446][ T5195] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 83.040747][ T5195] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 83.052837][ T5195] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 83.072713][ T5195] System zones: 0-2, 18-18, 34-35 [ 83.080752][ T5195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.116314][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.158108][ T5195] __nla_validate_parse: 3 callbacks suppressed [ 83.158128][ T5195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.353'. [ 83.203181][ T5198] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 83.216557][ T5198] bond0: (slave lo): Error: Device type is different from other slaves [ 83.233289][ T5198] loop0: detected capacity change from 0 to 1024 [ 83.241761][ T5198] journal_path: Lookup failure for './file0' [ 83.247819][ T5198] EXT4-fs: error: could not find journal device path [ 83.287669][ T5083] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.309698][ T5083] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.343647][ T5083] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.436396][ T5083] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.707103][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.796949][ T5210] pim6reg: entered allmulticast mode [ 83.805779][ T5210] pim6reg: left allmulticast mode [ 84.042263][ T5223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.361'. [ 84.052559][ T5223] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 84.191465][ T9] IPVS: starting estimator thread 0... [ 84.216437][ T5218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.362'. [ 84.301441][ T5222] IPVS: using max 2256 ests per chain, 112800 per kthread [ 84.489488][ T5229] netlink: 60 bytes leftover after parsing attributes in process `syz.1.366'. [ 84.499352][ T5229] netlink: 60 bytes leftover after parsing attributes in process `syz.1.366'. [ 84.685725][ T5240] loop3: detected capacity change from 0 to 256 [ 84.715781][ T5240] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.792011][ T5243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.372'. [ 84.897499][ T5240] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.913104][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.371'. [ 85.370293][ T5252] netlink: 24 bytes leftover after parsing attributes in process `syz.6.375'. [ 85.462018][ T5256] loop6: detected capacity change from 0 to 512 [ 85.482074][ T29] kauditd_printk_skb: 420 callbacks suppressed [ 85.482091][ T29] audit: type=1400 audit(1742689853.025:1918): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 85.527375][ T5256] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.538508][ T5263] loop3: detected capacity change from 0 to 512 [ 85.551136][ T29] audit: type=1326 audit(1742689853.105:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.6.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253a8bd169 code=0x7ffc0000 [ 85.576147][ T29] audit: type=1326 audit(1742689853.105:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.6.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253a8bd169 code=0x7ffc0000 [ 85.631073][ T29] audit: type=1326 audit(1742689853.105:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.6.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f253a8bd169 code=0x7ffc0000 [ 85.656519][ T29] audit: type=1326 audit(1742689853.105:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.6.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253a8bd169 code=0x7ffc0000 [ 85.682837][ T29] audit: type=1326 audit(1742689853.105:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.6.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f253a8bd169 code=0x7ffc0000 [ 85.708550][ T29] audit: type=1326 audit(1742689853.105:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.6.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253a8bd169 code=0x7ffc0000 [ 85.710672][ T5263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.733230][ T29] audit: type=1326 audit(1742689853.105:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.6.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f253a8bd169 code=0x7ffc0000 [ 85.773070][ T29] audit: type=1326 audit(1742689853.105:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.6.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253a8bd169 code=0x7ffc0000 [ 85.800588][ T29] audit: type=1326 audit(1742689853.105:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.6.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f253a8bd169 code=0x7ffc0000 [ 85.844678][ T5269] loop0: detected capacity change from 0 to 512 [ 85.865406][ T5268] loop5: detected capacity change from 0 to 512 [ 85.872235][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.887391][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.899713][ T5269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.923119][ T5268] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.963337][ T5272] netlink: 80 bytes leftover after parsing attributes in process `syz.1.384'. [ 85.976291][ T5269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.984160][ T5274] loop6: detected capacity change from 0 to 512 [ 85.999310][ T5276] loop3: detected capacity change from 0 to 512 [ 86.007224][ T5268] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.028981][ T5268] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.058926][ T5274] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.076555][ T5276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 86.139887][ T5276] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.165235][ T5269] loop0: detected capacity change from 0 to 256 [ 86.189465][ T5283] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 86.210988][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.224039][ T5269] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.226547][ T5283] netlink: 'syz.1.385': attribute type 10 has an invalid length. [ 86.245640][ T5283] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.254548][ T5283] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.262617][ T3768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.266958][ T5283] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.282920][ T5283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.293571][ T5283] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.302243][ T5283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.339513][ T5284] EXT4-fs (loop3): shut down requested (0) [ 86.349913][ T5283] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 86.393519][ T5286] loop0: detected capacity change from 0 to 2048 [ 86.459989][ T5286] loop0: p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 87.189958][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 87.514545][ T5310] netlink: 4 bytes leftover after parsing attributes in process `syz.6.395'. [ 87.556122][ T5310] bridge0: entered promiscuous mode [ 87.585541][ T5310] macvtap1: entered promiscuous mode [ 87.593227][ T5310] macvtap1: entered allmulticast mode [ 87.599598][ T5310] bridge0: entered allmulticast mode [ 87.696617][ T5314] bridge0: left allmulticast mode [ 87.702167][ T5314] bridge0: left promiscuous mode [ 89.850718][ T5348] delete_channel: no stack [ 89.903642][ T5354] loop3: detected capacity change from 0 to 512 [ 89.924760][ T5354] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.967780][ T5354] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002] [ 89.990239][ T5354] System zones: 0-2, 18-18, 34-35 [ 89.998225][ T5354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.024547][ T5354] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.406: path /69/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 90.076833][ T5354] EXT4-fs (loop3): Remounting filesystem read-only [ 90.331325][ T5369] loop5: detected capacity change from 0 to 1024 [ 90.344646][ T5369] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.417887][ T5373] netlink: 'syz.6.411': attribute type 10 has an invalid length. [ 90.450484][ T5369] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 90.464438][ T5373] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.472454][ T5373] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.496563][ T29] kauditd_printk_skb: 450 callbacks suppressed [ 90.496580][ T29] audit: type=1326 audit(1742689858.045:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbc776a4127 code=0x7ffc0000 [ 90.528721][ T29] audit: type=1326 audit(1742689858.045:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbc77649359 code=0x7ffc0000 [ 90.554098][ T29] audit: type=1326 audit(1742689858.045:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fbc776ad169 code=0x7ffc0000 [ 90.554353][ T5369] EXT4-fs (loop5): orphan cleanup on readonly fs [ 90.607980][ T4674] udevd[4674]: inotify_add_watch(7, /dev/loop0p20, 10) failed: No such file or directory [ 90.619495][ T29] audit: type=1326 audit(1742689858.135:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbc776a4127 code=0x7ffc0000 [ 90.624626][ T3483] udevd[3483]: inotify_add_watch(7, /dev/loop0p23, 10) failed: No such file or directory [ 90.646516][ T29] audit: type=1326 audit(1742689858.135:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbc77649359 code=0x7ffc0000 [ 90.660109][ T5337] udevd[5337]: inotify_add_watch(7, /dev/loop0p17, 10) failed: No such file or directory [ 90.685706][ T29] audit: type=1326 audit(1742689858.135:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fbc776ad169 code=0x7ffc0000 [ 90.698637][ T5332] udevd[5332]: inotify_add_watch(7, /dev/loop0p15, 10) failed: No such file or directory [ 90.721655][ T29] audit: type=1326 audit(1742689858.145:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbc776a4127 code=0x7ffc0000 [ 90.740643][ T5336] udevd[5336]: inotify_add_watch(7, /dev/loop0p21, 10) failed: No such file or directory [ 90.758725][ T29] audit: type=1326 audit(1742689858.145:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbc77649359 code=0x7ffc0000 [ 90.771602][ T5333] udevd[5333]: inotify_add_watch(7, /dev/loop0p24, 10) failed: No such file or directory [ 90.796107][ T29] audit: type=1326 audit(1742689858.145:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fbc776ad169 code=0x7ffc0000 [ 90.796145][ T29] audit: type=1326 audit(1742689858.155:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbc776a4127 code=0x7ffc0000 [ 90.811340][ T5334] udevd[5334]: inotify_add_watch(7, /dev/loop0p22, 10) failed: No such file or directory [ 90.863563][ T5335] udevd[5335]: inotify_add_watch(7, /dev/loop0p25, 10) failed: No such file or directory [ 90.880710][ T5343] udevd[5343]: inotify_add_watch(7, /dev/loop0p26, 10) failed: No such file or directory [ 90.908850][ T5333] udevd[5333]: inotify_add_watch(7, /dev/loop0p33, 10) failed: No such file or directory [ 90.945226][ T5369] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 90.974126][ T5369] EXT4-fs (loop5): Remounting filesystem read-only [ 90.989770][ T5369] EXT4-fs (loop5): 1 orphan inode deleted [ 91.009720][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.057206][ T5369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 91.114923][ T5369] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 91.153559][ T5369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.195371][ T5390] loop0: detected capacity change from 0 to 164 [ 91.228870][ T5390] ISOFS: unable to read i-node block [ 91.234726][ T5390] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 91.266055][ T5388] netlink: 80 bytes leftover after parsing attributes in process `syz.3.416'. [ 91.420731][ T5395] loop3: detected capacity change from 0 to 512 [ 91.460149][ T5395] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.522476][ T5395] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002] [ 91.539133][ T5395] System zones: 0-2, 18-18, 34-35 [ 91.575172][ T5395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.652570][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.005711][ T5411] loop0: detected capacity change from 0 to 1024 [ 92.021411][ T5410] netlink: 'syz.3.425': attribute type 4 has an invalid length. [ 92.037676][ T5411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.092822][ T5418] loop3: detected capacity change from 0 to 512 [ 92.103973][ T5418] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.153220][ T5418] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002] [ 92.181991][ T5418] System zones: 0-2, 18-18, 34-35 [ 92.182878][ T5418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.411250][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.749133][ T5434] loop3: detected capacity change from 0 to 512 [ 93.779130][ T5434] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.862194][ T5434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.878218][ T5434] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.984670][ T5441] netlink: 80 bytes leftover after parsing attributes in process `syz.5.431'. [ 94.084647][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.234245][ T5446] SELinux: ebitmap: truncated map [ 94.373279][ T5446] SELinux: failed to load policy [ 94.398140][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.410387][ T5453] loop0: detected capacity change from 0 to 512 [ 94.464949][ T5456] loop6: detected capacity change from 0 to 512 [ 94.488948][ T5453] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.503952][ T5459] $Hÿ: renamed from bond0 (while UP) [ 94.513458][ T5459] $Hÿ: entered promiscuous mode [ 94.519508][ T5459] bond_slave_0: entered promiscuous mode [ 94.526172][ T5459] bond_slave_1: entered promiscuous mode [ 94.570733][ T5456] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.593431][ T5453] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002] [ 94.605403][ T5453] System zones: 0-2, 18-18, 34-35 [ 94.623607][ T5453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.782129][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.816533][ T3305] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 94.880693][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.779614][ T5480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.444'. [ 95.799756][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 95.799796][ T29] audit: type=1400 audit(1742689863.345:2632): avc: denied { create } for pid=5477 comm="syz.1.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.828893][ T29] audit: type=1400 audit(1742689863.345:2633): avc: denied { read } for pid=5477 comm="syz.1.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.914174][ T5483] loop0: detected capacity change from 0 to 512 [ 95.927818][ T5480] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.973951][ T5483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.978702][ T29] audit: type=1400 audit(1742689863.405:2634): avc: denied { write } for pid=5477 comm="syz.1.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.042291][ T5480] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.064476][ T29] audit: type=1326 audit(1742689863.545:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.0.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 96.089515][ T29] audit: type=1326 audit(1742689863.545:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.0.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 96.113820][ T29] audit: type=1326 audit(1742689863.545:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.0.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 96.139189][ T29] audit: type=1326 audit(1742689863.545:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.0.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 96.164172][ T29] audit: type=1326 audit(1742689863.545:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.0.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 96.189802][ T29] audit: type=1326 audit(1742689863.545:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.0.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 96.215424][ T29] audit: type=1326 audit(1742689863.545:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.0.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 96.243489][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.303022][ T5480] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.308312][ T5487] loop0: detected capacity change from 0 to 512 [ 96.324829][ T5487] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.353119][ T5480] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.371063][ T5487] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002] [ 96.403620][ T5487] System zones: 0-2, 18-18, 34-35 [ 96.409931][ T5487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.449672][ T5480] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.485364][ T5480] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.509400][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.553291][ T5480] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.618967][ T5480] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.748837][ T5499] loop5: detected capacity change from 0 to 256 [ 96.792060][ T5499] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.830331][ T5491] loop3: detected capacity change from 0 to 128 [ 96.858380][ T5503] loop0: detected capacity change from 0 to 512 [ 96.859336][ T5499] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.883222][ T5501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.897297][ T5501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.900761][ T5499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.450'. [ 96.913908][ T5503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.932217][ T5506] loop6: detected capacity change from 0 to 512 [ 96.950277][ T5506] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.989185][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.023854][ T5510] loop0: detected capacity change from 0 to 256 [ 97.031723][ T5506] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002] [ 97.040897][ T5506] System zones: 0-2, 18-18, 34-35 [ 97.063923][ T5506] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.065831][ T5491] syz.3.448: attempt to access beyond end of device [ 97.065831][ T5491] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 97.115326][ T3840] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 97.133923][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.176603][ T5513] loop6: detected capacity change from 0 to 512 [ 97.191657][ T5491] syz.3.448: attempt to access beyond end of device [ 97.191657][ T5491] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 97.214038][ T5491] syz.3.448: attempt to access beyond end of device [ 97.214038][ T5491] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 97.228539][ T5491] syz.3.448: attempt to access beyond end of device [ 97.228539][ T5491] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 97.230615][ T5513] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.354350][ T5519] loop3: detected capacity change from 0 to 512 [ 97.366593][ T5520] loop5: detected capacity change from 0 to 512 [ 97.432865][ T5519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.448139][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.469937][ T5520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.511843][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.633341][ T5534] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.645617][ T3768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.701793][ T5538] team0: Failed to send options change via netlink (err -105) [ 97.743663][ T5538] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 97.783110][ T5538] team0: Port device team_slave_1 removed [ 97.821690][ T5534] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.878345][ T5585] netlink: 'syz.5.462': attribute type 4 has an invalid length. [ 97.934478][ T5534] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.964878][ T5595] loop5: detected capacity change from 0 to 512 [ 97.988754][ T5595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.162570][ T3768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.174807][ T5534] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.330566][ T5534] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.376229][ T5534] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.435544][ T5534] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.453249][ T5510] ( (5510) used greatest stack depth: 7272 bytes left [ 98.489225][ T5534] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.556656][ T5604] loop0: detected capacity change from 0 to 512 [ 98.584115][ T5604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.633078][ T5607] loop6: detected capacity change from 0 to 512 [ 98.658116][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.669057][ T5609] loop5: detected capacity change from 0 to 256 [ 98.684402][ T5611] loop3: detected capacity change from 0 to 512 [ 98.696972][ T5607] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.710712][ T5609] vfat: Unknown parameter 'ÿÿÿÿÿÿÿ' [ 98.739686][ T5611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.057301][ T5616] loop6: detected capacity change from 0 to 8192 [ 99.503611][ T5614] loop0: detected capacity change from 0 to 128 [ 99.864419][ T5621] syz.0.469: attempt to access beyond end of device [ 99.864419][ T5621] loop0: rw=2049, sector=145, nr_sectors = 816 limit=128 [ 100.162492][ T5614] syz.0.469: attempt to access beyond end of device [ 100.162492][ T5614] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 100.203511][ T5614] syz.0.469: attempt to access beyond end of device [ 100.203511][ T5614] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 100.232669][ T5614] syz.0.469: attempt to access beyond end of device [ 100.232669][ T5614] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 100.411538][ T5634] loop0: detected capacity change from 0 to 512 [ 100.464486][ T5640] netlink: 'syz.3.478': attribute type 21 has an invalid length. [ 100.472950][ T5640] netlink: 128 bytes leftover after parsing attributes in process `syz.3.478'. [ 100.492929][ T5640] netlink: 'syz.3.478': attribute type 4 has an invalid length. [ 100.575461][ T5640] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 100.583483][ T5640] vhci_hcd: invalid port number 253 [ 100.588829][ T5640] vhci_hcd: default hub control req: 6011 v8001 i00fd l0 [ 100.673540][ T5646] loop0: detected capacity change from 0 to 512 [ 100.682139][ T5646] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 101.668827][ T29] kauditd_printk_skb: 434 callbacks suppressed [ 101.668853][ T29] audit: type=1400 audit(1742689868.255:3076): avc: denied { create } for pid=5650 comm="syz.3.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.697913][ T5646] EXT4-fs (loop0): 1 orphan inode deleted [ 101.703984][ T5646] EXT4-fs (loop0): 1 truncate cleaned up [ 101.936784][ T29] audit: type=1326 audit(1742689869.485:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 101.960772][ T29] audit: type=1326 audit(1742689869.485:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 101.984784][ T29] audit: type=1326 audit(1742689869.485:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 102.008339][ T29] audit: type=1326 audit(1742689869.485:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 102.031952][ T29] audit: type=1326 audit(1742689869.485:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 102.055598][ T29] audit: type=1326 audit(1742689869.485:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 102.058938][ T5663] veth0_vlan: entered allmulticast mode [ 102.079804][ T29] audit: type=1326 audit(1742689869.485:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 102.079839][ T29] audit: type=1326 audit(1742689869.485:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 102.135332][ T29] audit: type=1326 audit(1742689869.495:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 102.175555][ T5664] ÿÿÿÿÿÿ: renamed from vlan1 [ 102.254818][ T5667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 102.278981][ T5661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.484'. [ 102.294319][ T5669] loop6: detected capacity change from 0 to 512 [ 102.366559][ T5669] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 102.400465][ T5669] EXT4-fs (loop6): failed to open journal device unknown-block(1,255) -6 [ 102.445245][ T5669] netlink: 56 bytes leftover after parsing attributes in process `syz.6.488'. [ 102.461567][ T5680] loop5: detected capacity change from 0 to 512 [ 102.494153][ T5680] EXT4-fs mount: 6 callbacks suppressed [ 102.494180][ T5680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.683191][ T3768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.869490][ T5692] loop5: detected capacity change from 0 to 512 [ 102.943754][ T5693] loop3: detected capacity change from 0 to 1024 [ 103.016478][ T5693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.035935][ T5692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.154749][ T3768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.728084][ T5702] loop0: detected capacity change from 0 to 512 [ 103.745615][ T5702] EXT4-fs (loop0): failed to initialize system zone (-117) [ 103.766557][ T5702] EXT4-fs (loop0): mount failed [ 104.096540][ T5714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.502'. [ 104.127132][ T5714] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.203739][ T5714] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.278198][ T5714] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.354574][ T5720] loop6: detected capacity change from 0 to 512 [ 104.371422][ T5714] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.399807][ T5720] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.529678][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.547786][ T5714] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.573348][ T5714] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.602735][ T5714] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.624508][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.644543][ T5714] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.663684][ T5729] loop6: detected capacity change from 0 to 512 [ 104.680497][ T5729] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.836999][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.992807][ T5762] netlink: 12 bytes leftover after parsing attributes in process `syz.6.516'. [ 106.066728][ T5765] loop6: detected capacity change from 0 to 512 [ 106.120837][ T5765] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.246331][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.256203][ T5769] loop3: detected capacity change from 0 to 512 [ 106.285506][ T5771] loop5: detected capacity change from 0 to 512 [ 106.318740][ T5771] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.347488][ T5769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.451235][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.511883][ T3768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.599773][ T5786] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 106.599773][ T5786] program syz.5.524 not setting count and/or reply_len properly [ 106.792419][ T5794] loop0: detected capacity change from 0 to 128 [ 106.849175][ T5791] bridge_slave_0: left allmulticast mode [ 106.855459][ T5791] bridge_slave_0: left promiscuous mode [ 106.861610][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.890945][ T5799] loop6: detected capacity change from 0 to 512 [ 106.897983][ T5799] EXT4-fs: Ignoring removed oldalloc option [ 106.920583][ T5799] EXT4-fs error (device loop6): ext4_xattr_inode_iget:436: comm syz.6.528: Parent and EA inode have the same ino 15 [ 106.934917][ T5799] EXT4-fs (loop6): Remounting filesystem read-only [ 106.941728][ T5799] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 106.955041][ T5799] EXT4-fs warning (device loop6): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 106.965121][ T5799] EXT4-fs (loop6): 1 orphan inode deleted [ 106.971440][ T5799] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.983597][ T5799] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 106.992450][ T5799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.170448][ T29] kauditd_printk_skb: 539 callbacks suppressed [ 107.170478][ T29] audit: type=1400 audit(1742689874.715:3625): avc: denied { create } for pid=5792 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.259470][ T5791] bridge_slave_1: left allmulticast mode [ 107.265363][ T5791] bridge_slave_1: left promiscuous mode [ 107.271403][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.281456][ T5794] syz.0.529: attempt to access beyond end of device [ 107.281456][ T5794] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 107.322939][ T29] audit: type=1400 audit(1742689874.745:3626): avc: denied { write } for pid=5792 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.343225][ T29] audit: type=1400 audit(1742689874.745:3627): avc: denied { nlmsg_write } for pid=5792 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.373772][ T5794] syz.0.529: attempt to access beyond end of device [ 107.373772][ T5794] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 107.406301][ T5794] syz.0.529: attempt to access beyond end of device [ 107.406301][ T5794] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 107.429587][ T5791] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 107.446444][ T5791] bond_slave_0: left promiscuous mode [ 107.452430][ T5794] syz.0.529: attempt to access beyond end of device [ 107.452430][ T5794] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 107.467497][ T29] audit: type=1400 audit(1742689874.905:3628): avc: denied { read } for pid=5790 comm="syz.3.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.531553][ T5794] syz.0.529: attempt to access beyond end of device [ 107.531553][ T5794] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 107.554512][ T5791] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 107.564991][ T5794] syz.0.529: attempt to access beyond end of device [ 107.564991][ T5794] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 107.581613][ T5794] syz.0.529: attempt to access beyond end of device [ 107.581613][ T5794] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 107.595202][ T5794] syz.0.529: attempt to access beyond end of device [ 107.595202][ T5794] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 107.609162][ T5794] syz.0.529: attempt to access beyond end of device [ 107.609162][ T5794] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 107.623020][ T5794] syz.0.529: attempt to access beyond end of device [ 107.623020][ T5794] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 107.657189][ T5791] bond_slave_1: left promiscuous mode [ 107.685129][ T5807] SELinux: syz.5.533 (5807) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 107.705437][ T5805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.532'. [ 107.719081][ T5791] team0: Port device team_slave_0 removed [ 107.744895][ T5791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.752772][ T5791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.763989][ T29] audit: type=1326 audit(1742689875.315:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc776ad169 code=0x7ffc0000 [ 107.789760][ T29] audit: type=1326 audit(1742689875.315:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc776ad169 code=0x7ffc0000 [ 107.795374][ T5811] loop0: detected capacity change from 0 to 512 [ 107.827765][ T5791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.835549][ T5791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.849112][ T29] audit: type=1326 audit(1742689875.315:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc776ad169 code=0x7ffc0000 [ 107.872660][ T29] audit: type=1326 audit(1742689875.315:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc776ad169 code=0x7ffc0000 [ 107.897424][ T29] audit: type=1326 audit(1742689875.315:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc776ad169 code=0x7ffc0000 [ 107.920885][ T29] audit: type=1326 audit(1742689875.315:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc776ad169 code=0x7ffc0000 [ 107.962574][ T5811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.039723][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.171177][ T5827] loop3: detected capacity change from 0 to 512 [ 108.187132][ T5812] infiniband syz!: set active [ 108.192001][ T5812] infiniband syz!: added team_slave_0 [ 108.204082][ T5827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.290821][ T5812] RDS/IB: syz!: added [ 108.298110][ T5833] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 108.313877][ T5833] loop0: detected capacity change from 0 to 512 [ 108.323126][ T5812] smc: adding ib device syz! with port count 1 [ 108.345768][ T5833] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.544: bg 0: block 35: padding at end of block bitmap is not set [ 108.361400][ T5833] EXT4-fs (loop0): Remounting filesystem read-only [ 108.374021][ T5812] smc: ib device syz! port 1 has pnetid [ 108.374587][ T5833] EXT4-fs (loop0): 1 truncate cleaned up [ 108.397806][ T5833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.464528][ T5833] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 108.479664][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.509528][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.573198][ T5833] loop0: detected capacity change from 0 to 512 [ 108.628860][ T5833] hub 4-0:1.0: USB hub found [ 108.633776][ T5833] hub 4-0:1.0: 8 ports detected [ 108.747927][ T5841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.761574][ T5841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.827095][ T5843] loop3: detected capacity change from 0 to 8192 [ 110.002359][ T5870] loop3: detected capacity change from 0 to 128 [ 110.014702][ T5867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.558'. [ 110.038832][ T5870] netlink: 'syz.3.557': attribute type 1 has an invalid length. [ 110.046665][ T5870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.557'. [ 110.070557][ T5867] vlan2: entered promiscuous mode [ 110.075709][ T5867] bond0: entered promiscuous mode [ 110.080816][ T5867] bond_slave_0: entered promiscuous mode [ 110.088099][ T5867] bond0: left promiscuous mode [ 110.092988][ T5867] bond_slave_0: left promiscuous mode [ 110.205176][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 110.214777][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 110.225768][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 110.344251][ T5887] loop0: detected capacity change from 0 to 512 [ 110.356385][ T5887] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.437803][ T5887] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002] [ 110.481281][ T5887] System zones: 0-2, 18-18, 34-35 [ 110.489839][ T5887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.544806][ T5887] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.564: path /126/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 110.574422][ T5887] EXT4-fs (loop0): Remounting filesystem read-only [ 110.617655][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.784462][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 110.794470][ T5897] netlink: 'syz.0.566': attribute type 13 has an invalid length. [ 110.827378][ T5901] loop6: detected capacity change from 0 to 1024 [ 110.835488][ T5901] EXT4-fs: Ignoring removed orlov option [ 110.841242][ T5901] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.853586][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.861147][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.867426][ T5901] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.884059][ T5897] batman_adv: batadv0: Interface deactivated: dummy0 [ 110.927530][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.939614][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.988240][ T5897] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.996935][ T5897] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.005360][ T5897] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.013803][ T5897] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.874843][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.234421][ T5942] loop6: detected capacity change from 0 to 512 [ 112.249057][ T5942] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.305743][ T29] kauditd_printk_skb: 912 callbacks suppressed [ 112.305761][ T29] audit: type=1326 audit(1742689879.855:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 112.352062][ T29] audit: type=1326 audit(1742689879.895:4548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 112.375539][ T29] audit: type=1326 audit(1742689879.895:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 112.399112][ T29] audit: type=1326 audit(1742689879.895:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 112.422678][ T29] audit: type=1326 audit(1742689879.895:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 112.446011][ T29] audit: type=1326 audit(1742689879.895:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 112.469355][ T29] audit: type=1326 audit(1742689879.895:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 112.492708][ T29] audit: type=1326 audit(1742689879.895:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 112.516048][ T29] audit: type=1326 audit(1742689879.895:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 112.539436][ T29] audit: type=1326 audit(1742689879.895:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7937d169 code=0x7ffc0000 [ 112.586073][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.656631][ T5954] loop6: detected capacity change from 0 to 128 [ 112.669758][ T5949] loop0: detected capacity change from 0 to 4096 [ 112.722774][ T5954] bio_check_eod: 5 callbacks suppressed [ 112.722819][ T5954] syz.6.586: attempt to access beyond end of device [ 112.722819][ T5954] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 112.745640][ T5964] loop3: detected capacity change from 0 to 512 [ 112.755327][ T5949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.775118][ T5954] syz.6.586: attempt to access beyond end of device [ 112.775118][ T5954] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 112.792525][ T5964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.805901][ T5949] EXT4-fs: Ignoring removed orlov option [ 112.813390][ T5954] syz.6.586: attempt to access beyond end of device [ 112.813390][ T5954] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 112.813688][ T5949] EXT4-fs: Ignoring sb option on remount [ 112.836991][ T5954] syz.6.586: attempt to access beyond end of device [ 112.836991][ T5954] loop6: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 112.854296][ T5949] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.862800][ T5949] EXT4-fs (loop0): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 112.895084][ T5954] syz.6.586: attempt to access beyond end of device [ 112.895084][ T5954] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 112.923288][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.939553][ T5975] bridge0: port 3(veth0_to_bond) entered blocking state [ 112.954553][ T5975] bridge0: port 3(veth0_to_bond) entered disabled state [ 112.973422][ T5949] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.595: Abort forced by user [ 112.973781][ T5954] syz.6.586: attempt to access beyond end of device [ 112.973781][ T5954] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 112.983798][ T5949] EXT4-fs (loop0): Remounting filesystem read-only [ 113.003545][ T5949] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 113.014137][ T5954] syz.6.586: attempt to access beyond end of device [ 113.014137][ T5954] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 113.018076][ T5975] veth0_to_bond: entered allmulticast mode [ 113.087058][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.088812][ T5975] veth0_to_bond: entered promiscuous mode [ 113.097910][ T5954] syz.6.586: attempt to access beyond end of device [ 113.097910][ T5954] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 113.098023][ T5954] syz.6.586: attempt to access beyond end of device [ 113.098023][ T5954] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 113.098062][ T5954] syz.6.586: attempt to access beyond end of device [ 113.098062][ T5954] loop6: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 113.157652][ T5975] bridge0: port 3(veth0_to_bond) entered blocking state [ 113.165174][ T5975] bridge0: port 3(veth0_to_bond) entered forwarding state [ 113.203951][ T5994] loop0: detected capacity change from 0 to 512 [ 113.211157][ T5994] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.215190][ T5992] bridge_slave_0: left allmulticast mode [ 113.226076][ T5992] bridge_slave_0: left promiscuous mode [ 113.232057][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.244835][ T5994] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002] [ 113.255882][ T5992] bridge_slave_1: left allmulticast mode [ 113.257799][ T5994] System zones: 0-2 [ 113.261581][ T5992] bridge_slave_1: left promiscuous mode [ 113.261717][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.265501][ T5994] , 18-18, 34-35 [ 113.282497][ T5994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.296499][ T5992] team0: Port device team_slave_0 removed [ 113.298247][ T5994] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.590: path /131/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 113.323223][ T5994] EXT4-fs (loop0): Remounting filesystem read-only [ 113.325572][ T5992] team0: Port device team_slave_1 removed [ 113.337147][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.344965][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.353789][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.361233][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.369355][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.462056][ T6006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.593'. [ 113.575750][ T6014] loop5: detected capacity change from 0 to 512 [ 113.611149][ T6014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.762995][ T3768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.797405][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.602'. [ 113.830500][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.602'. [ 114.034628][ T6032] rdma_op ffff888116f3a980 conn xmit_rdma 0000000000000000 [ 114.487454][ T6050] loop6: detected capacity change from 0 to 512 [ 114.533700][ T6050] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.670898][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.786176][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'. [ 114.841788][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'. [ 114.965075][ T6067] loop6: detected capacity change from 0 to 512 [ 115.011054][ T6067] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.052045][ T6067] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002] [ 115.060105][ T6067] System zones: 0-2, 18-18, 34-35 [ 115.076967][ T6067] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.112429][ T6067] EXT4-fs error (device loop6): ext4_readdir:261: inode #2: block 3: comm syz.6.619: path /102/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 115.145243][ T6067] EXT4-fs (loop6): Remounting filesystem read-only [ 115.224303][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.272559][ T6079] loop5: detected capacity change from 0 to 512 [ 115.319570][ T6079] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.425606][ T6073] lo speed is unknown, defaulting to 1000 [ 115.452724][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 115.460007][ T6073] lo speed is unknown, defaulting to 1000 [ 115.467534][ T6073] lo speed is unknown, defaulting to 1000 [ 115.485817][ T6086] loop6: detected capacity change from 0 to 256 [ 115.498396][ T6073] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 115.506062][ T3768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.518285][ T6073] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 115.568230][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.628'. [ 115.585220][ T6084] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.608305][ T6073] lo speed is unknown, defaulting to 1000 [ 115.614636][ T6073] lo speed is unknown, defaulting to 1000 [ 115.627328][ T6073] lo speed is unknown, defaulting to 1000 [ 115.638348][ T6073] lo speed is unknown, defaulting to 1000 [ 115.660358][ T6084] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.706212][ T6095] loop6: detected capacity change from 0 to 2048 [ 115.735553][ T6073] lo speed is unknown, defaulting to 1000 [ 115.741843][ T6073] lo speed is unknown, defaulting to 1000 [ 115.771852][ T6095] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.786910][ T6084] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.859825][ T6073] lo speed is unknown, defaulting to 1000 [ 115.866862][ T6106] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 115.896504][ T6095] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.942968][ T6095] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 960 with max blocks 32 with error 28 [ 115.955660][ T6095] EXT4-fs (loop6): This should not happen!! Data will be lost [ 115.955660][ T6095] [ 115.965341][ T6095] EXT4-fs (loop6): Total free blocks count 0 [ 115.971426][ T6095] EXT4-fs (loop6): Free/Dirty block details [ 115.977408][ T6095] EXT4-fs (loop6): free_blocks=2415919104 [ 115.983212][ T6095] EXT4-fs (loop6): dirty_blocks=32 [ 115.988352][ T6095] EXT4-fs (loop6): Block reservation details [ 115.994362][ T6095] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 116.042877][ T6084] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.054825][ T6073] lo speed is unknown, defaulting to 1000 [ 116.148052][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.160335][ T6084] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.204045][ T6084] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.219125][ T6118] loop6: detected capacity change from 0 to 512 [ 116.257701][ T6084] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.281486][ T6118] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.291538][ T6110] lo speed is unknown, defaulting to 1000 [ 116.315023][ T6084] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.326148][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.403998][ T6128] loop0: detected capacity change from 0 to 512 [ 116.421677][ T6132] loop5: detected capacity change from 0 to 128 [ 116.432144][ T6128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.506776][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.604737][ T6145] loop0: detected capacity change from 0 to 128 [ 116.690479][ T6145] netlink: 'syz.0.642': attribute type 1 has an invalid length. [ 116.698398][ T6145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.642'. [ 116.861842][ T6152] loop0: detected capacity change from 0 to 512 [ 116.898435][ T6154] ipip0: entered promiscuous mode [ 116.905759][ T6152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.952145][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.979142][ T6159] loop6: detected capacity change from 0 to 512 [ 117.006270][ T6161] block device autoloading is deprecated and will be removed. [ 117.015782][ T6159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.033573][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.648'. [ 117.077300][ T6164] SELinux: ebitmap: truncated map [ 117.085820][ T6164] SELinux: failed to load policy [ 117.109348][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.178962][ T6170] loop6: detected capacity change from 0 to 512 [ 117.188230][ T6170] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.202503][ T6170] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002] [ 117.210543][ T6170] System zones: 0-2, 18-18, 34-35 [ 117.226277][ T6170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.242529][ T6170] EXT4-fs error (device loop6): ext4_readdir:261: inode #2: block 3: comm syz.6.652: path /111/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 117.264993][ T6170] EXT4-fs (loop6): Remounting filesystem read-only [ 117.298331][ T3840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.318133][ T29] kauditd_printk_skb: 464 callbacks suppressed [ 117.318151][ T29] audit: type=1326 audit(1742689884.865:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz.3.654" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dd6f2d169 code=0x0 [ 117.364600][ T6180] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.431176][ T6186] loop5: detected capacity change from 0 to 512 [ 117.438612][ T6180] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.453202][ T6181] lo speed is unknown, defaulting to 1000 [ 117.462841][ T6186] EXT4-fs error (device loop5): ext4_quota_enable:7101: comm syz.5.655: inode #33554432: comm syz.5.655: iget: illegal inode # [ 117.487314][ T6186] EXT4-fs error (device loop5): ext4_quota_enable:7104: comm syz.5.655: Bad quota inode: 33554432, type: 2 [ 117.488412][ T6192] loop1: detected capacity change from 0 to 512 [ 117.508433][ T6186] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 117.524584][ T6186] EXT4-fs (loop5): mount failed [ 117.525045][ T6180] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.530335][ T6192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.566294][ T29] audit: type=1326 audit(1742689885.105:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.1.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc776ad169 code=0x7ffc0000 [ 117.589722][ T29] audit: type=1326 audit(1742689885.105:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.1.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc776ad169 code=0x7ffc0000 [ 117.613171][ T29] audit: type=1326 audit(1742689885.105:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.1.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc776ad169 code=0x7ffc0000 [ 117.636596][ T29] audit: type=1326 audit(1742689885.105:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.1.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc776ad169 code=0x7ffc0000 [ 117.659938][ T29] audit: type=1326 audit(1742689885.105:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.1.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc776ad169 code=0x7ffc0000 [ 117.683337][ T29] audit: type=1326 audit(1742689885.105:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.1.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc776ad169 code=0x7ffc0000 [ 117.706699][ T29] audit: type=1326 audit(1742689885.105:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.1.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc776ad169 code=0x7ffc0000 [ 117.730181][ T29] audit: type=1326 audit(1742689885.105:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.1.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc776ad169 code=0x7ffc0000 [ 117.753572][ T29] audit: type=1326 audit(1742689885.105:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.1.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc776ad169 code=0x7ffc0000 [ 117.778810][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.792325][ T6180] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.850489][ T6180] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.862463][ T6180] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.874355][ T6180] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.886333][ T6180] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.129159][ T6198] loop6: detected capacity change from 0 to 512 [ 118.165522][ T6198] EXT4-fs (loop6): 1 orphan inode deleted [ 118.171678][ T6198] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.184683][ T6198] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.185588][ T5587] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:58: Failed to release dquot type 1 [ 118.220710][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.670'. [ 118.237014][ T6208] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.254246][ T6197] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.265139][ T6208] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.276817][ T5588] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:59: Failed to release dquot type 1 [ 118.313474][ T6205] loop0: detected capacity change from 0 to 512 [ 118.320313][ T6205] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 118.329503][ T6208] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.341206][ T6205] netlink: 'syz.0.662': attribute type 13 has an invalid length. [ 118.364885][ T6205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.373085][ T6205] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.380945][ T6205] batman_adv: batadv0: Interface activated: dummy0 [ 118.389256][ T6205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.404861][ T10] lo speed is unknown, defaulting to 1000 [ 118.412384][ T6208] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.451694][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 118.477033][ T6208] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.489585][ T6208] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.513196][ T6216] loop1: detected capacity change from 0 to 512 [ 118.515591][ T6208] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.535060][ T6208] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.544744][ T6216] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.580551][ T6216] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002] [ 118.589643][ T6216] System zones: 0-2, 18-18, 34-35 [ 118.596343][ T6216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.622870][ T6216] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 3: comm syz.1.667: path /127/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 118.653385][ T3742] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 118.662847][ T6216] EXT4-fs (loop1): Remounting filesystem read-only [ 118.696465][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.801455][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 118.922538][ T6236] @: renamed from vlan0 (while UP) [ 118.965322][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.6.676'. [ 118.980007][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.6.676'. [ 119.067895][ T36] IPVS: starting estimator thread 0... [ 119.161704][ T6246] IPVS: using max 1968 ests per chain, 98400 per kthread [ 119.374424][ T6257] loop0: detected capacity change from 0 to 512 [ 119.394808][ T6257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.426401][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.562503][ T6259] lo speed is unknown, defaulting to 1000 [ 119.725032][ T5586] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 119.733035][ T5586] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 119.935645][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 119.936192][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 119.963328][ T6264] netlink: 'syz.3.683': attribute type 13 has an invalid length. [ 119.998471][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'. [ 120.077790][ T6264] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.086396][ T6264] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.094930][ T6264] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.103634][ T6264] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.148974][ T6266] veth0_to_bond: left allmulticast mode [ 120.154703][ T6266] veth0_to_bond: left promiscuous mode [ 120.160316][ T6266] bridge0: port 3(veth0_to_bond) entered disabled state [ 120.202021][ T6266] bridge_slave_1: left allmulticast mode [ 120.207832][ T6266] bridge_slave_1: left promiscuous mode [ 120.213579][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.231053][ T6266] bridge_slave_0: left allmulticast mode [ 120.236798][ T6266] bridge_slave_0: left promiscuous mode [ 120.242518][ T6266] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.254504][ T6266] bond0: (slave bridge0): Releasing backup interface [ 120.435028][ T6277] netlink: 'syz.5.689': attribute type 1 has an invalid length. [ 120.511798][ T3429] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 120.758050][ T6292] lo speed is unknown, defaulting to 1000 [ 123.281733][ T6321] loop5: detected capacity change from 0 to 512 [ 123.290808][ T6324] loop3: detected capacity change from 0 to 512 [ 123.310742][ T6324] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.321296][ T6321] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.388394][ T6324] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002] [ 123.402740][ T6321] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002] [ 123.410983][ T6324] System zones: 0-2, 18-18, 34-35 [ 123.423175][ T6321] System zones: 0-2, 18-18, 34-35 [ 123.430244][ T6324] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.704: path /123/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 123.541446][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 123.572101][ T6339] lo speed is unknown, defaulting to 1000 [ 123.632292][ T6339] loop1: detected capacity change from 0 to 512 [ 123.658989][ T6321] EXT4-fs error (device loop5): ext4_readdir:261: inode #2: block 3: comm syz.5.703: path /118/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 123.698160][ T6324] EXT4-fs (loop3): Remounting filesystem read-only [ 123.705988][ T6339] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #17: comm syz.1.702: iget: bogus i_mode (0) [ 123.717602][ T6339] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.702: couldn't read orphan inode 17 (err -117) [ 123.848613][ T6343] netlink: 20 bytes leftover after parsing attributes in process `syz.5.703'. [ 123.885121][ T6321] EXT4-fs (loop5): Remounting filesystem read-only [ 123.939032][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.6.706'. [ 123.952316][ T6338] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 123.958561][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.6.706'. [ 124.048880][ T6349] lo speed is unknown, defaulting to 1000 [ 124.103213][ T6353] vlan1: entered allmulticast mode [ 124.108974][ T6353] bridge_slave_0: entered allmulticast mode [ 124.168992][ T6353] bridge_slave_0: left allmulticast mode [ 124.239966][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 124.239984][ T29] audit: type=1400 audit(1742689891.785:5426): avc: denied { ioctl } for pid=6358 comm="syz.1.712" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 124.274092][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'. [ 124.336778][ T29] audit: type=1400 audit(1742689891.825:5427): avc: denied { bind } for pid=6358 comm="syz.1.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.357287][ T29] audit: type=1400 audit(1742689891.825:5428): avc: denied { setopt } for pid=6358 comm="syz.1.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.384535][ T6367] netlink: 'syz.3.715': attribute type 27 has an invalid length. [ 124.420870][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'. [ 124.430914][ T6367] lo: left promiscuous mode [ 124.435527][ T6367] lo: left allmulticast mode [ 124.440385][ T6367] gretap0: left promiscuous mode [ 124.446092][ T6367] $Hÿ: left promiscuous mode [ 124.450314][ T6368] loop0: detected capacity change from 0 to 8192 [ 124.453979][ T6367] ipip0: left promiscuous mode [ 124.480833][ T6368] netlink: 'syz.0.716': attribute type 1 has an invalid length. [ 124.488660][ T6368] netlink: 16 bytes leftover after parsing attributes in process `syz.0.716'. [ 124.502414][ T6369] netlink: 'syz.1.714': attribute type 13 has an invalid length. [ 124.537204][ T6373] loop5: detected capacity change from 0 to 512 [ 124.559990][ T6373] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.568864][ T6367] SELinux: Context system_u:object_r:kmsg_device_t:s0 is not valid (left unmapped). [ 124.579749][ T29] audit: type=1400 audit(1742689892.115:5429): avc: denied { mac_admin } for pid=6366 comm="syz.3.715" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 124.600997][ T29] audit: type=1400 audit(1742689892.135:5430): avc: denied { relabelto } for pid=6366 comm="syz.3.715" name="syz3" dev="cgroup2" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:kmsg_device_t:s0" [ 124.627501][ T29] audit: type=1400 audit(1742689892.135:5431): avc: denied { associate } for pid=6366 comm="syz.3.715" name="syz3" dev="cgroup2" ino=75 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:kmsg_device_t:s0" [ 124.669972][ T6373] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002] [ 124.683996][ T29] audit: type=1400 audit(1742689892.235:5432): avc: denied { create } for pid=6365 comm="syz.0.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.719709][ T6373] System zones: 0-2, 18-18, 34-35 [ 124.742309][ T6369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.764744][ T6383] siw: device registration error -23 [ 124.781954][ T29] audit: type=1400 audit(1742689892.255:5433): avc: denied { setopt } for pid=6365 comm="syz.0.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.802820][ T6373] EXT4-fs error (device loop5): ext4_readdir:261: inode #2: block 3: comm syz.5.717: path /120/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 124.804944][ T6369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.839184][ T6373] EXT4-fs (loop5): Remounting filesystem read-only [ 124.850829][ T6369] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.859319][ T6369] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.867742][ T6369] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.876183][ T6369] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.034264][ T6391] loop5: detected capacity change from 0 to 512 [ 125.094019][ T29] audit: type=1326 audit(1742689892.635:5434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.5.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861f00d169 code=0x7ffc0000 [ 125.117450][ T29] audit: type=1326 audit(1742689892.635:5435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.5.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861f00d169 code=0x7ffc0000 [ 125.225911][ T6400] loop3: detected capacity change from 0 to 2048 [ 125.245298][ T6376] lo speed is unknown, defaulting to 1000 [ 125.283188][ T6400] loop3: p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 125.317586][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.5.726'. [ 125.491266][ T6407] SELinux: ebitmap: truncated map [ 125.497295][ T6407] SELinux: failed to load policy [ 125.676105][ T6416] loop5: detected capacity change from 0 to 512 [ 125.684348][ T6416] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 125.816689][ T6417] lo speed is unknown, defaulting to 1000 [ 126.162348][ T6416] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002] [ 126.174422][ T6416] System zones: 0-2, 18-18, 34-35 [ 126.201705][ T6416] EXT4-fs error (device loop5): ext4_readdir:261: inode #2: block 3: comm syz.5.729: path /123/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 126.232752][ T6416] EXT4-fs (loop5): Remounting filesystem read-only [ 126.240381][ T6416] netlink: 20 bytes leftover after parsing attributes in process `syz.5.729'. [ 126.484133][ T6429] lo speed is unknown, defaulting to 1000 [ 126.653232][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.6.732'. [ 126.717502][ T6432] netlink: 'syz.6.732': attribute type 13 has an invalid length. [ 126.874201][ T6441] loop5: detected capacity change from 0 to 8192 [ 126.890148][ T6441] netlink: 'syz.5.733': attribute type 1 has an invalid length. [ 126.897942][ T6441] netlink: 16 bytes leftover after parsing attributes in process `syz.5.733'. [ 126.998284][ T6432] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.006940][ T6432] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.015654][ T6432] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.024117][ T6432] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.101548][ T6425] lo speed is unknown, defaulting to 1000 [ 127.178920][ T6449] loop3: detected capacity change from 0 to 512 [ 127.191840][ T6447] loop1: detected capacity change from 0 to 512 [ 127.277325][ T5332] udevd[5332]: inotify_add_watch(7, /dev/loop3p19, 10) failed: No such file or directory [ 127.293728][ T5331] udevd[5331]: inotify_add_watch(7, /dev/loop3p20, 10) failed: No such file or directory [ 127.313737][ T5333] udevd[5333]: inotify_add_watch(7, /dev/loop3p28, 10) failed: No such file or directory [ 127.325513][ T5343] udevd[5343]: inotify_add_watch(7, /dev/loop3p30, 10) failed: No such file or directory [ 127.372838][ T5334] udevd[5334]: inotify_add_watch(7, /dev/loop3p26, 10) failed: No such file or directory [ 127.384338][ T4674] udevd[4674]: inotify_add_watch(7, /dev/loop3p24, 10) failed: No such file or directory [ 127.398531][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p23, 10) failed: No such file or directory [ 127.402763][ T5332] udevd[5332]: inotify_add_watch(7, /dev/loop3p31, 10) failed: No such file or directory [ 127.421315][ T5336] udevd[5336]: inotify_add_watch(7, /dev/loop3p25, 10) failed: No such file or directory [ 127.472079][ T5331] udevd[5331]: inotify_add_watch(7, /dev/loop3p32, 10) failed: No such file or directory [ 127.517206][ T6463] loop1: detected capacity change from 0 to 512 [ 127.527503][ T6463] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.592622][ T6463] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002] [ 127.600702][ T6463] System zones: 0-2, 18-18, 34-35 [ 127.641121][ T6463] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 3: comm syz.1.739: path /141/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 127.744065][ T6463] EXT4-fs (loop1): Remounting filesystem read-only [ 127.771540][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 127.800868][ T6469] loop5: detected capacity change from 0 to 1024 [ 127.818222][ T6469] EXT4-fs: Ignoring removed orlov option [ 127.824044][ T6469] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.896136][ T6469] EXT4-fs (loop5): shut down requested (2) [ 127.905291][ T6469] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 127.921816][ T6469] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 127.938978][ T6469] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=13 [ 127.997607][ T6469] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 128.006923][ T6469] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 128.020089][ T6469] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 128.029162][ T6456] lo speed is unknown, defaulting to 1000 [ 128.081441][ T6469] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=13 [ 128.094041][ T6469] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 128.196558][ T6479] netlink: 'syz.5.745': attribute type 27 has an invalid length. [ 128.447825][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.455203][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.627665][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.645716][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.698489][ T6479] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.707212][ T6479] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.715629][ T6479] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.724097][ T6479] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.869020][ T6494] loop5: detected capacity change from 0 to 512 [ 128.869626][ T6485] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 128.887570][ T6490] bridge0: entered promiscuous mode [ 128.893645][ T6490] bridge0: port 3(macsec1) entered blocking state [ 128.900311][ T6490] bridge0: port 3(macsec1) entered disabled state [ 128.907174][ T6490] macsec1: entered allmulticast mode [ 128.912610][ T6490] bridge0: entered allmulticast mode [ 128.922268][ T6490] macsec1: left allmulticast mode [ 128.927386][ T6490] bridge0: left allmulticast mode [ 128.955298][ T6490] bridge0: left promiscuous mode [ 129.085826][ T6497] lo speed is unknown, defaulting to 1000 [ 129.211526][ T6508] loop1: detected capacity change from 0 to 128 [ 129.776426][ T6508] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.800870][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 129.800888][ T29] audit: type=1400 audit(1742689897.345:5635): avc: denied { write open } for pid=6499 comm="syz.1.752" path="/144/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 129.954528][ T29] audit: type=1400 audit(1742689897.415:5636): avc: denied { create } for pid=6499 comm="syz.1.752" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 130.262655][ T6515] loop3: detected capacity change from 0 to 512 [ 130.307455][ T6514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.327718][ T29] audit: type=1326 audit(1742689897.875:5637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd6f2d169 code=0x7ffc0000 [ 130.351246][ T29] audit: type=1326 audit(1742689897.875:5638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dd6f2d169 code=0x7ffc0000 [ 130.374647][ T29] audit: type=1326 audit(1742689897.875:5639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd6f2d169 code=0x7ffc0000 [ 130.398179][ T29] audit: type=1326 audit(1742689897.875:5640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dd6f2d169 code=0x7ffc0000 [ 130.421949][ T29] audit: type=1326 audit(1742689897.875:5641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd6f2d169 code=0x7ffc0000 [ 130.445365][ T29] audit: type=1326 audit(1742689897.875:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dd6f2d169 code=0x7ffc0000 [ 130.468692][ T29] audit: type=1326 audit(1742689897.875:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd6f2d169 code=0x7ffc0000 [ 130.492213][ T29] audit: type=1326 audit(1742689897.875:5644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2dd6f2d169 code=0x7ffc0000 [ 130.581613][ T6514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.635783][ T6521] loop0: detected capacity change from 0 to 2048 [ 130.672955][ T6514] vlan2: entered promiscuous mode [ 130.678966][ T6517] netlink: 'syz.6.756': attribute type 1 has an invalid length. [ 130.686670][ T6517] netlink: 16 bytes leftover after parsing attributes in process `syz.6.756'. [ 130.768238][ T6521] loop0: p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 130.857487][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.758'. [ 130.974159][ T6528] xt_hashlimit: max too large, truncated to 1048576 [ 131.381414][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 131.486273][ T3001] loop0: p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 131.548691][ T6543] lo speed is unknown, defaulting to 1000 [ 131.820711][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.768'. [ 131.829964][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.837720][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.006133][ T6558] netlink: 'syz.0.765': attribute type 27 has an invalid length. [ 132.059084][ T6561] loop1: detected capacity change from 0 to 1024 [ 132.066054][ T6561] EXT4-fs: Ignoring removed nobh option [ 132.071722][ T6561] EXT4-fs: Ignoring removed bh option [ 132.093108][ T6558] batman_adv: batadv0: Interface deactivated: dummy0 [ 132.110001][ T10] lo speed is unknown, defaulting to 1000 [ 132.248737][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.774'. [ 132.281715][ T5334] udevd[5334]: inotify_add_watch(7, /dev/loop0p57, 10) failed: No such file or directory [ 132.282760][ T5335] udevd[5335]: inotify_add_watch(7, /dev/loop0p63, 10) failed: No such file or directory [ 132.303456][ T5337] udevd[5337]: inotify_add_watch(7, /dev/loop0p64, 10) failed: No such file or directory [ 132.305102][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p66, 10) failed: No such file or directory [ 132.343988][ T5336] udevd[5336]: inotify_add_watch(7, /dev/loop0p56, 10) failed: No such file or directory [ 132.355687][ T3483] udevd[3483]: inotify_add_watch(7, /dev/loop0p68, 10) failed: No such file or directory [ 132.369647][ T5335] udevd[5335]: inotify_add_watch(7, /dev/loop0p74, 10) failed: No such file or directory [ 132.382120][ T5343] udevd[5343]: inotify_add_watch(7, /dev/loop0p60, 10) failed: No such file or directory [ 132.393230][ T6571] loop0: detected capacity change from 0 to 512 [ 132.401246][ T5332] udevd[5332]: inotify_add_watch(7, /dev/loop0p61, 10) failed: No such file or directory [ 132.413714][ T5331] udevd[5331]: inotify_add_watch(7, /dev/loop0p62, 10) failed: No such file or directory [ 132.470139][ T6567] loop3: detected capacity change from 0 to 8192 [ 132.519213][ T3305] EXT4-fs unmount: 28 callbacks suppressed [ 132.519311][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.667576][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.730658][ T6578] 8021q: VLANs not supported on vcan0 [ 132.772555][ T6567] bio_check_eod: 5 callbacks suppressed [ 132.772575][ T6567] syz.3.773: attempt to access beyond end of device [ 132.772575][ T6567] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 132.791574][ T6567] Buffer I/O error on dev loop3, logical block 57847, async page read [ 132.823667][ T6585] xt_hashlimit: max too large, truncated to 1048576 [ 132.938360][ T6588] loop0: detected capacity change from 0 to 2048 [ 132.974048][ T6588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.306308][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.737810][ T6564] syz.3.773 (6564) used greatest stack depth: 6208 bytes left [ 133.768212][ T6599] netlink: 24 bytes leftover after parsing attributes in process `syz.6.784'. [ 133.810128][ T6598] loop1: detected capacity change from 0 to 512 [ 133.825832][ T6599] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 133.840990][ T6598] EXT4-fs (loop1): orphan cleanup on readonly fs [ 133.857120][ T6598] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.785: bg 0: block 248: padding at end of block bitmap is not set [ 133.885703][ T6598] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.785: Failed to acquire dquot type 1 [ 133.900036][ T6598] EXT4-fs (loop1): 1 truncate cleaned up [ 133.908260][ T6599] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 133.921997][ T6598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.953793][ T6598] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 133.968840][ T6612] bridge0: port 3(macsec1) entered blocking state [ 133.975568][ T6612] bridge0: port 3(macsec1) entered disabled state [ 134.000218][ T6598] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 134.022012][ T6612] macsec1: entered allmulticast mode [ 134.027479][ T6612] bridge0: entered allmulticast mode [ 134.048450][ T6612] macsec1: left allmulticast mode [ 134.053615][ T6612] bridge0: left allmulticast mode [ 134.219864][ T6618] lo speed is unknown, defaulting to 1000 [ 134.376127][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.465108][ T6622] loop5: detected capacity change from 0 to 512 [ 134.480592][ T3001] ================================================================== [ 134.480664][ T6622] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 134.488720][ T3001] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 134.505747][ T3001] [ 134.508168][ T3001] read-write to 0xffff8881004c11f0 of 8 bytes by task 6622 on cpu 0: [ 134.516239][ T3001] __filemap_add_folio+0x430/0x6f0 [ 134.521384][ T3001] filemap_add_folio+0x9c/0x1b0 [ 134.526345][ T3001] __filemap_get_folio+0x346/0x690 [ 134.531464][ T3001] bdev_getblk+0x173/0x3b0 [ 134.535903][ T3001] __ext4_sb_bread_gfp+0x46/0x180 [ 134.540954][ T3001] ext4_fill_super+0x460/0x3630 [ 134.545824][ T3001] get_tree_bdev_flags+0x29f/0x310 [ 134.550948][ T3001] get_tree_bdev+0x1f/0x30 [ 134.555377][ T3001] ext4_get_tree+0x1c/0x30 [ 134.559813][ T3001] vfs_get_tree+0x56/0x1e0 [ 134.564254][ T3001] do_new_mount+0x227/0x690 [ 134.568798][ T3001] path_mount+0x49b/0xb30 [ 134.573151][ T3001] __se_sys_mount+0x27f/0x2d0 [ 134.577851][ T3001] __x64_sys_mount+0x67/0x80 [ 134.582493][ T3001] x64_sys_call+0x2c84/0x2dc0 [ 134.587188][ T3001] do_syscall_64+0xc9/0x1c0 [ 134.591710][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.597618][ T3001] [ 134.599942][ T3001] read to 0xffff8881004c11f0 of 8 bytes by task 3001 on cpu 1: [ 134.607599][ T3001] filemap_write_and_wait_range+0x59/0x360 [ 134.613525][ T3001] bdev_release+0xea/0x420 [ 134.618053][ T3001] blkdev_release+0x15/0x20 [ 134.622584][ T3001] __fput+0x2ac/0x640 [ 134.626576][ T3001] __fput_sync+0x96/0xc0 [ 134.630882][ T3001] __x64_sys_close+0x55/0xe0 [ 134.635480][ T3001] x64_sys_call+0x266c/0x2dc0 [ 134.640170][ T3001] do_syscall_64+0xc9/0x1c0 [ 134.644691][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.650601][ T3001] [ 134.652924][ T3001] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 134.660027][ T3001] [ 134.662347][ T3001] Reported by Kernel Concurrency Sanitizer on: [ 134.668511][ T3001] CPU: 1 UID: 0 PID: 3001 Comm: udevd Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 134.678759][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 134.688819][ T3001] ================================================================== [ 134.756402][ T6622] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 134.780213][ T6622] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.794: corrupted in-inode xattr: e_value size too large [ 134.797325][ T6622] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.794: couldn't read orphan inode 15 (err -117) [ 134.808233][ T6627] loop1: detected capacity change from 0 to 512 [ 134.816684][ T6622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.854085][ T6627] EXT4-fs: Ignoring removed i_version option [ 134.869579][ T6622] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 134.890320][ T6622] lo speed is unknown, defaulting to 1000 [ 134.898977][ T6622] lo speed is unknown, defaulting to 1000 [ 134.922900][ T6627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.938064][ T6622] lo speed is unknown, defaulting to 1000 [ 134.948083][ T6627] ext4 filesystem being mounted at /150/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.960003][ T6630] dummy0 speed is unknown, defaulting to 1000 [ 134.971879][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 134.971897][ T29] audit: type=1400 audit(1742689902.525:5803): avc: denied { setopt } for pid=6626 comm="syz.1.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.989788][ T6622] infiniband sz1: set down [ 134.997533][ T29] audit: type=1400 audit(1742689902.525:5804): avc: denied { write } for pid=6626 comm="syz.1.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.002053][ T6622] infiniband sz1: added lo [ 135.025951][ T3429] lo speed is unknown, defaulting to 1000 [ 135.035592][ T6630] dummy0 speed is unknown, defaulting to 1000 [ 135.042512][ T6630] dummy0 speed is unknown, defaulting to 1000 [ 135.080179][ T6622] RDS/IB: sz1: added [ 135.084676][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.094010][ T6622] smc: adding ib device sz1 with port count 1 [ 135.100517][ T6622] smc: ib device sz1 port 1 has pnetid [ 135.106588][ T3377] lo speed is unknown, defaulting to 1000 [ 135.114026][ T6622] lo speed is unknown, defaulting to 1000 [ 135.156710][ T6622] lo speed is unknown, defaulting to 1000 [ 135.191422][ T6622] lo speed is unknown, defaulting to 1000 [ 135.225552][ T6622] lo speed is unknown, defaulting to 1000 [ 135.255639][ T6622] lo speed is unknown, defaulting to 1000 [ 135.286365][ T6630] infiniband syz2: set down [ 135.290981][ T6630] infiniband syz2: added dummy0 [ 135.295935][ T3429] dummy0 speed is unknown, defaulting to 1000 [ 135.308261][ T6630] RDS/IB: syz2: added [ 135.312793][ T6630] smc: adding ib device syz2 with port count 1 [ 135.319033][ T6630] smc: ib device syz2 port 1 has pnetid [ 135.325078][ T3429] dummy0 speed is unknown, defaulting to 1000 [ 135.332659][ T6630] dummy0 speed is unknown, defaulting to 1000 [ 135.367315][ T6630] dummy0 speed is unknown, defaulting to 1000 [ 135.399253][ T6630] dummy0 speed is unknown, defaulting to 1000 [ 135.429104][ T6630] dummy0 speed is unknown, defaulting to 1000 [ 135.460138][ T6630] dummy0 speed is unknown, defaulting to 1000 [ 135.534669][ T3768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.