last executing test programs: 5m48.637624021s ago: executing program 32 (id=492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r1}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 5m42.869924548s ago: executing program 33 (id=659): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) 5m13.275830473s ago: executing program 34 (id=1675): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m16.290291219s ago: executing program 35 (id=3816): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100002c34c027000000000000ea04850000007b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000300000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) 3m34.812201609s ago: executing program 36 (id=5327): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r1 = syz_io_uring_setup(0x3bc1, &(0x7f0000000780)={0x0, 0x942e, 0x10100, 0x0, 0x285}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+|[@\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x5d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r1, 0x567, 0x20, 0x0, 0x0, 0x0) 3m5.646120376s ago: executing program 37 (id=6471): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8040, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kfree\x00', r2, 0x0, 0x7}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x3, 0x2, 0x100, &(0x7f00000000c0)="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"}) 3m4.406939713s ago: executing program 38 (id=6505): socketpair$unix(0x1, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="00000000000000000000512288fb", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m51.522578175s ago: executing program 39 (id=6843): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 2m35.790326679s ago: executing program 40 (id=7440): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES32], 0x38}}, 0x0) 2m19.500026623s ago: executing program 41 (id=7964): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff7b) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f0000000340)="$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") r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 2m17.202860238s ago: executing program 42 (id=8014): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @empty}, 0x10) close(r2) 2m3.587743447s ago: executing program 43 (id=8390): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) 2m2.266517175s ago: executing program 0 (id=8420): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x5319) 2m2.261159534s ago: executing program 0 (id=8421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 2m2.142519254s ago: executing program 0 (id=8432): r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="757466383d312c726f6469722c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c636865636b3d7374726963742c756e695f786c6174653d302c6e6f636173652c616c6c6f775f7574696d653d30303030303030303030303030303030303030343030302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c71756965742c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c757466383d302c666c7573682c726f6469722c73686f72746e616d653d6d697865642c73686f77657865632c636865636b3d72656c617865642c726f6469722c726f6469722c007cbda5978eff1afd303a09806ce0c610fe00684c0c67004cdbbd0b9992b0bbea8911a2050000006311c61fb0edf19ed5b7f8d03bfbf22d5655a02f9c7e7307c4f0cbeda2b4e5b2821ba502f452ce09bae8f886c9b612847e26f9afb26c9805000000000000000bc8604552e1dcb75008cfdd8a85c302b83f5ba6d806e8f77268091776f01e8c0465aa4a0ac02f13f9daeab1932f5688fd0ba15f0fc0d94f21c352fe6bc02b893c57f77281db316d62c523025b2c545ab273f28000ba55a384f4ddaa65567a7eb6e51c9d5b69a84c1cec408643486d4c6a17a1fe12f05c1bf8b7494265dc0493bbc87c7f86f7e5e9ed79d5822adebabbe3c1e9320ad777219218ae6103ce6a392927ef866f4b0bcfecea44742736cfc57fe72eee93d416f6ff7da7641eb9865ee1f09a9b76f87189d2f0113ebf44794240ccdfdee8fa1eccb4abfa1d4d470623d6e1530497c7e64924d946272d4fa346cfecac39646cbbf431869c533429e09b", @ANYRES16], 0x86, 0x2a9, &(0x7f0000000c00)="$eJzs3T9rc1UYAPDnpmmSV4dkcJKCF3RwKm1XlxRpoZhJyaAOWmwL0gShhYJ/MHZydXH0EwiCm1/CxW8guApudihcuTf3mqSmaSNN9S2/39LTc89zznNOz6V0yNMPN4anR2mcXH7xa7RaSdS68SyukuhELSpfxYzuNwEAPM+usiz+yMaWiUsiorW6tACAFVr69/+PK08JAFixd959763dXm/v7TRtxf7w64t+/pd9/nX8fPckPo5BHMdWtOM6IvvbuL2fZdmonuY68dpwdNHPI4cf/FzOv/t7RBG/He3oFF2z8Qe9ve10bCp+lOfxQrl+N4/fiXa8NGf9g97ezpz46Dfi9Ven8t+MdvzyUXwSgzgqkpjEf7mdpm9m3/75+ft5enl8MrroN4txE9naI/9oAAAAAAAAAAAAAAAAAAAAAAB4wjbL2jnNKOr35F1l/Z216/yb9Ugrndn6POP4pJroRn2gURbfVfV1ttI0zcqBk/h6vFyP+n+zawAAAAAAAAAAAAAAAAAAAPh/Of/0s9PDweD47EEaVTWA6mP9/3ae7lTPK7F4cHOyVq1sLpg51qoxScTCNPJNPNCx3NV4dlvO3/+w7IStu8esLzqfh2lUt+v0MJl/hs2oelrVJflpekwj7rlW47ZHG0UC1eW4a57G3EftpffeeLFojBaMiWTRe/HGb+OEy57k5kvUKE51bvh62ZgKv3E3brvP1SnNvin/kKjWAQAAAAAAAAAAAAAAAAAAKzX5GPCch5cLQ2tZc2VpAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCjmvz//yUaozL4HoMbcXY+f+X6Y24TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ+6vAAAA//+lillR") r1 = open(&(0x7f0000000080)='./file1\x00', 0x60400, 0x96) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x0, 0x2, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MARK={0x8, 0x10, 0x8}, @RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4) pwritev2(r2, 0x0, 0x0, 0x7801, 0x0, 0xf) finit_module(r1, 0x0, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 2m2.009732214s ago: executing program 0 (id=8425): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') 2m1.929181714s ago: executing program 0 (id=8426): r0 = getpid() setreuid(0xee00, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) setns(r1, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) 2m1.578729683s ago: executing program 0 (id=8434): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) unshare(0x2040400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r1, 0x0, 0x0) 2m1.559211233s ago: executing program 44 (id=8434): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) unshare(0x2040400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r1, 0x0, 0x0) 1m59.874744099s ago: executing program 3 (id=8472): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1m59.734420679s ago: executing program 3 (id=8473): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32, @ANYBLOB='\x00'/18, @ANYBLOB="01"], 0x48) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1m59.665925419s ago: executing program 3 (id=8477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc11a900e8d164a40, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 1m59.532783649s ago: executing program 3 (id=8482): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 1m59.493097698s ago: executing program 3 (id=8484): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@delqdisc={0x24, 0x25, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x10}, {0x0, 0xe}, {0x3, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xfffffffffffffec1, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0x7}, {0x20, 0x2, [@TCA_FLOWER_KEY_ARP_SHA_MASK={0x0, 0x40, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x2, 0x8}}, @TCA_FLOWER_KEY_IPV4_DST={0x37, 0xc, @local}]}}]}, 0x50}}, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m59.436623638s ago: executing program 3 (id=8487): r0 = io_uring_setup(0xb3e, &(0x7f00000002c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0xa}, 0x1) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1m59.418628818s ago: executing program 45 (id=8487): r0 = io_uring_setup(0xb3e, &(0x7f00000002c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0xa}, 0x1) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 46.233265624s ago: executing program 5 (id=11020): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='mm_page_alloc\x00', r1, 0x0, 0x8}, 0x18) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40006, 0x500, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff01, 0xa5d7}, 0x408, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r2, 0x0) 46.080523154s ago: executing program 5 (id=11027): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = syz_io_uring_setup(0x1f8, &(0x7f0000000200)={0x0, 0x20005e27, 0x10100, 0x0, 0x2000}, &(0x7f0000000440), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x5e9, &(0x7f00000017c0), &(0x7f0000000040)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 46.000316713s ago: executing program 5 (id=11029): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r3, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 45.912218803s ago: executing program 5 (id=11032): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000500)='./file0/file0\x00', 0xb) 45.873399823s ago: executing program 5 (id=11034): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 45.774604323s ago: executing program 5 (id=11037): r0 = socket(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) 45.774409613s ago: executing program 46 (id=11037): r0 = socket(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) 45.463495143s ago: executing program 6 (id=11048): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 45.403563922s ago: executing program 6 (id=11050): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 45.382405432s ago: executing program 6 (id=11052): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001980)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xa, 0xffe0}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 45.288838302s ago: executing program 6 (id=11055): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000500)='./file0/file0\x00', 0xb) 45.220526931s ago: executing program 6 (id=11059): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xee, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x7ff, 0x7, 0x1, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a800080008000c4003001100036010fab94dcf5c0461c1d67f6f940039690c07e02562ade408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x24004842) 44.863405541s ago: executing program 6 (id=11061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 44.863165811s ago: executing program 47 (id=11061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 19.225043993s ago: executing program 7 (id=11872): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r4}, 0xc) 19.224428994s ago: executing program 7 (id=11882): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 18.368008392s ago: executing program 7 (id=11889): r0 = fsopen(&(0x7f0000000000)='gadgetfs\x00', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000002000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='sys_enter\x00', r2}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) fspick(r3, &(0x7f0000000340)='.\x00', 0x0) 18.269693891s ago: executing program 7 (id=11893): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x1065841, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f00000000c0)='./file0/file0\x00', 0x0) 18.230971431s ago: executing program 7 (id=11895): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 17.958508481s ago: executing program 7 (id=11901): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_io_uring_setup(0x2000121b, &(0x7f0000000500)={0x0, 0x508d, 0x400}, &(0x7f0000000040), &(0x7f0000000280)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) 17.957905991s ago: executing program 48 (id=11901): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_io_uring_setup(0x2000121b, &(0x7f0000000500)={0x0, 0x508d, 0x400}, &(0x7f0000000040), &(0x7f0000000280)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) 2.218843836s ago: executing program 8 (id=12288): r0 = socket(0x10, 0x3, 0x0) memfd_create(0x0, 0x6) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 1.169575183s ago: executing program 4 (id=12310): r0 = socket(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 1.168814073s ago: executing program 8 (id=12320): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 974.951973ms ago: executing program 8 (id=12316): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioperm(0x8, 0x9, 0x5a) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00'}, 0x18) 858.462312ms ago: executing program 8 (id=12324): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000400)=""/196, 0xc4}, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/183, 0xb7}], 0x1, 0x0, 0x2}}], 0x48}, 0x0) 755.753762ms ago: executing program 8 (id=12339): signalfd(0xffffffffffffffff, &(0x7f0000002340), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}}, 0x0) 726.494312ms ago: executing program 8 (id=12331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f0000000240)) io_getevents(r1, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) shutdown(r0, 0x0) 558.319482ms ago: executing program 1 (id=12342): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000240)=@in6={0xa, 0x4e1e, 0x0, @remote}, 0x80, 0x0}, 0x4004840) 557.419352ms ago: executing program 2 (id=12343): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x2007, @fd, 0x8, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 449.419532ms ago: executing program 2 (id=12346): r0 = syz_io_uring_setup(0x3676, &(0x7f000000a9c0), &(0x7f00000000c0), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_FILES2(r0, 0x6, &(0x7f0000001480)={0x0, 0x0, 0x20000000, 0x0, 0x0}, 0x20) 409.731711ms ago: executing program 1 (id=12348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 409.198241ms ago: executing program 1 (id=12349): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000009196bd"], 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={{0x14}, [], {0x14}}, 0x28}}, 0x4c040) 396.419551ms ago: executing program 2 (id=12350): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) close(0x3) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='environ\x00') close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) mount$9p_fd(0x20100000, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 328.407491ms ago: executing program 1 (id=12351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 316.612892ms ago: executing program 2 (id=12352): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r3, r2) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r2, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000001c0)="65c0a8193ae74ad15135d5242022c15690aef9b97ba8e3c8f894b31062f3de0c9d2763b7e35b040b79ed001f3d76aca9278974f53fee3afcca973c85057bf62ba7407381452f94a48b81462a586c8e410766faa1041b5e61e80958f5aecf2b5565aaa37857092d2814ecf483d57c98521bf57e057e75544176660e66b9e9c1a94756a58b4f427c924751c6fc08ad156960ebd233e6fa4c5a797e4ed79c61627ef87911a2", 0xa4}, {&(0x7f0000000100)="b568b943cacb00b43cd443e451ccd8dbc58021227bcce38b1cbe53d04c35daee08", 0x21}, {&(0x7f0000000540)="2a551a1e5f955c5a434a02eef4cc2e8769d1a588e7717168a31c7a1020c68f79553cdf1e07ff36179e722775aaba06c12f4a13f382fbeb937dca4e937f8cc3f659abfa77b6b2797091b465a3e06871065e60246aa7cb03a3fd211874cb62fdbc50fdf886eafad7314aaa7e7e34ef3a87466e9f9ad61fa9594d896c77344e8ca797141c12", 0x84}, {&(0x7f0000000280)="41fd564fbeaaab863dc348e0d07b641863079345bf50efa157dc9d4e82d0b3ba465defa83a3f669e83dc6a0ebdfc8288722a7f6db6923634d88b3b7fbd9ee79df1d847dc7055340106ac49aae0ebf887f029962079847b61054375f7467bbe9a93f6a39f94d0cc7a776088c2c1505d", 0x6f}, {&(0x7f0000000400)="bc3bfd240085bc6d067604d66464885324f0632bcf6d86e8e06b1a2aa92dd1af55a6155072ed6cce349583bf051f91b35aa27df8a8979706b13f3371741f47dff9492097976e79a329ae93138f7e3a0b697c941155d8e0c4f83797", 0x5b}, {&(0x7f0000000600)="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", 0x3ca}], 0x6}}], 0x6, 0x200000d1) 274.533421ms ago: executing program 1 (id=12354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 254.388631ms ago: executing program 1 (id=12356): r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) r2 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 233.221381ms ago: executing program 9 (id=12357): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 230.199651ms ago: executing program 4 (id=12358): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f00000000c0), 0xfffffff4) 229.205391ms ago: executing program 2 (id=12359): creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wfdno'}}]}}) 164.847111ms ago: executing program 9 (id=12360): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r0}, &(0x7f0000000000), &(0x7f0000001800)='%-5lx \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000030000000c00098008000100"], 0xf4}}, 0x0) 149.694731ms ago: executing program 9 (id=12361): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_io_uring_setup(0x1ec2, &(0x7f0000000480)={0x0, 0xbd12, 0x10100, 0x1, 0x327}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, r3, 0x0, 0x0, 0x0, 0x40010001, 0x0, {0x1}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 123.922661ms ago: executing program 9 (id=12362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x235272c27981e554}, 0x0) 90.470861ms ago: executing program 9 (id=12363): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0xfff5) 89.705881ms ago: executing program 4 (id=12364): socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='inet_sock_set_state\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x30004005) 86.124551ms ago: executing program 2 (id=12365): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f00000009c0)='coredump_filter\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) preadv(r2, &(0x7f0000000800)=[{&(0x7f00000011c0)=""/4119, 0x1017}], 0x1, 0x0, 0x0) 6.490951ms ago: executing program 4 (id=12366): r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x8}, 0x18) add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="d8", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r0) 6.179641ms ago: executing program 4 (id=12367): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000001c0)='signal_generate\x00', r2}, 0x10) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000780)="d4", 0x1}], 0x1) 5.805521ms ago: executing program 4 (id=12368): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x3200, 0x10001, 0x3, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 9 (id=12369): r0 = socket(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) kernel console output (not intermixed with test programs): installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.274170][T29825] syz.1.10939[29825] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.290746][T29825] syz.1.10939[29825] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.304888][T29825] msdos: Unknown parameter '1844674407370955161501777777777777777777777X' [ 346.309290][T29828] netlink: 'syz.6.10942': attribute type 3 has an invalid length. [ 346.333937][T29828] netlink: 'syz.6.10942': attribute type 3 has an invalid length. [ 346.348173][T29828] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10942'. [ 346.440847][T29843] netlink: 64 bytes leftover after parsing attributes in process `syz.7.10950'. [ 346.495632][T29854] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10954'. [ 346.504793][T29854] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10954'. [ 346.582225][T29862] wireguard0: entered promiscuous mode [ 346.587866][T29862] wireguard0: entered allmulticast mode [ 347.066861][T29903] syz.6.10974[29903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.152055][T29907] loop5: detected capacity change from 0 to 512 [ 347.210085][T29907] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 347.217413][T29903] lo speed is unknown, defaulting to 1000 [ 347.223665][T29907] System zones: 0-2, 18-18, 34-34 [ 347.224441][T29903] lo speed is unknown, defaulting to 1000 [ 347.236269][T29907] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.10977: bg 0: block 248: padding at end of block bitmap is not set [ 347.271330][T29907] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.10977: Failed to acquire dquot type 1 [ 347.309005][T29907] EXT4-fs (loop5): 1 truncate cleaned up [ 347.315096][T29907] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.353295][T29907] ext4 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.364109][T11695] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 347.480163][T23857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.491536][T19490] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:40: Failed to release dquot type 1 [ 347.675042][T29947] loop9: detected capacity change from 0 to 2048 [ 347.688326][T29949] netlink: 'syz.5.10995': attribute type 3 has an invalid length. [ 347.709277][T29955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10998'. [ 347.718734][T29955] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 347.760373][T29947] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.863542][T24112] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.981504][T29993] loop5: detected capacity change from 0 to 512 [ 347.988417][T29993] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 348.002664][T29995] loop9: detected capacity change from 0 to 164 [ 348.031873][T30003] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11018'. [ 348.040057][T29993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.046435][T30003] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 348.053621][T29993] ext4 filesystem being mounted at /507/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.068545][T29995] syz.9.11016: attempt to access beyond end of device [ 348.068545][T29995] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 348.109998][T29995] syz.9.11016: attempt to access beyond end of device [ 348.109998][T29995] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 348.128521][T30007] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11021'. [ 348.184231][T23857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.251597][T30019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25558 sclass=netlink_route_socket pid=30019 comm=syz.7.11024 [ 348.259502][T30021] loop6: detected capacity change from 0 to 512 [ 348.309040][T30021] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 348.317424][T30021] System zones: 0-2, 18-18, 34-34 [ 348.327226][T30021] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.11026: bg 0: block 248: padding at end of block bitmap is not set [ 348.357597][T30021] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.11026: Failed to acquire dquot type 1 [ 348.373478][T30021] EXT4-fs (loop6): 1 truncate cleaned up [ 348.384081][T30021] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.412778][T30021] ext4 filesystem being mounted at /761/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.482861][T21550] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.495645][T27353] EXT4-fs error (device loop6): ext4_release_dquot:6961: comm kworker/u8:52: Failed to release dquot type 1 [ 348.545931][T11695] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 348.622592][T30044] __nla_validate_parse: 1 callbacks suppressed [ 348.622609][T30044] netlink: 133492 bytes leftover after parsing attributes in process `syz.6.11039'. [ 348.667572][T30052] loop6: detected capacity change from 0 to 764 [ 348.823803][T30045] lo speed is unknown, defaulting to 1000 [ 348.829999][T30045] lo speed is unknown, defaulting to 1000 [ 348.963403][T30045] chnl_net:caif_netlink_parms(): no params data found [ 348.991071][T30083] veth0_to_team: entered promiscuous mode [ 348.996947][T30083] veth0_to_team: entered allmulticast mode [ 349.094074][T30045] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.101263][T30045] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.155578][T30045] bridge_slave_0: entered allmulticast mode [ 349.162346][T30045] bridge_slave_0: entered promiscuous mode [ 349.183403][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 349.183419][ T29] audit: type=1326 audit(2000000151.885:13058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30100 comm="syz.7.11060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595b225d29 code=0x7ffc0000 [ 349.186561][T30045] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.191342][ T29] audit: type=1326 audit(2000000151.895:13059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30100 comm="syz.7.11060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f595b225d29 code=0x7ffc0000 [ 349.213411][T30045] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.220471][ T29] audit: type=1326 audit(2000000151.895:13060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30100 comm="syz.7.11060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595b225d29 code=0x7ffc0000 [ 349.220506][ T29] audit: type=1326 audit(2000000151.895:13061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30100 comm="syz.7.11060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595b225d29 code=0x7ffc0000 [ 349.281166][T30045] bridge_slave_1: entered allmulticast mode [ 349.298643][ T29] audit: type=1326 audit(2000000151.895:13062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30100 comm="syz.7.11060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f595b225d29 code=0x7ffc0000 [ 349.298681][ T29] audit: type=1326 audit(2000000151.895:13063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30100 comm="syz.7.11060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595b225d29 code=0x7ffc0000 [ 349.320061][T30045] bridge_slave_1: entered promiscuous mode [ 349.328258][ T29] audit: type=1326 audit(2000000151.895:13064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30100 comm="syz.7.11060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595b225d29 code=0x7ffc0000 [ 349.422569][T30045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.437363][T30045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.455349][ T29] audit: type=1326 audit(2000000152.065:13065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30100 comm="syz.7.11060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f595b225d29 code=0x7ffc0000 [ 349.479650][ T29] audit: type=1326 audit(2000000152.085:13066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30100 comm="syz.7.11060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595b225d29 code=0x7ffc0000 [ 349.490372][T30099] lo speed is unknown, defaulting to 1000 [ 349.503506][ T29] audit: type=1326 audit(2000000152.085:13067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30100 comm="syz.7.11060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595b225d29 code=0x7ffc0000 [ 349.552058][T30045] team0: Port device team_slave_0 added [ 349.563735][T30045] team0: Port device team_slave_1 added [ 349.579113][T30099] lo speed is unknown, defaulting to 1000 [ 349.616349][T30045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.623350][T30045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.650095][T30045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.663099][T30045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.670177][T30045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.696930][T30045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.705763][T11715] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 349.806683][T30045] hsr_slave_0: entered promiscuous mode [ 349.835705][T30045] hsr_slave_1: entered promiscuous mode [ 349.841988][T30045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.855574][T30045] Cannot create hsr debugfs directory [ 349.982109][T30131] loop7: detected capacity change from 0 to 128 [ 350.003139][T30105] lo speed is unknown, defaulting to 1000 [ 350.015793][T30105] lo speed is unknown, defaulting to 1000 [ 350.045910][T30133] loop9: detected capacity change from 0 to 512 [ 350.055407][T30135] netem: incorrect gi model size [ 350.060393][T30135] netem: change failed [ 350.074022][T30133] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.100319][T30133] ext4 filesystem being mounted at /446/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.174959][T24112] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.187535][T30105] chnl_net:caif_netlink_parms(): no params data found [ 350.358732][T30105] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.366017][T30105] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.374140][T30105] bridge_slave_0: entered allmulticast mode [ 350.381164][T30105] bridge_slave_0: entered promiscuous mode [ 350.419638][T30105] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.426939][T30105] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.429805][T30178] bpf_get_probe_write_proto: 8 callbacks suppressed [ 350.429822][T30178] syz.1.11090[30178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.434856][T30105] bridge_slave_1: entered allmulticast mode [ 350.447335][T30178] syz.1.11090[30178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.454543][T30105] bridge_slave_1: entered promiscuous mode [ 350.461303][T30178] syz.1.11090[30178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.486028][T30045] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 350.541298][T30045] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 350.558801][T30105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.570118][T30045] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 350.584781][T30045] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 350.607790][T30105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.683294][T30105] team0: Port device team_slave_0 added [ 350.690868][T30105] team0: Port device team_slave_1 added [ 350.732098][T30105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.739225][T30105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.765339][T30105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.777012][T30105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.784053][T30105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.810291][T30105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.828310][T30045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.837110][T27353] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 350.874376][T30045] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.892042][T11715] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.899161][T11715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.911492][T11715] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.918627][T11715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.932765][T30198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.934512][T30105] hsr_slave_0: entered promiscuous mode [ 350.941412][T30198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.954818][T30105] hsr_slave_1: entered promiscuous mode [ 350.963297][T30105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.971293][T30105] Cannot create hsr debugfs directory [ 351.096288][T30105] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.118697][T30045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.159199][T30105] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.205613][T30105] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.278692][T30105] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.296354][T30045] veth0_vlan: entered promiscuous mode [ 351.304702][T30045] veth1_vlan: entered promiscuous mode [ 351.321055][T30045] veth0_macvtap: entered promiscuous mode [ 351.329401][T30045] veth1_macvtap: entered promiscuous mode [ 351.339628][T30045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.350227][T30045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.360150][T30045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.370776][T30045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.380722][T30045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.391324][T30045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.401234][T30045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.411697][T30045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.421558][T30045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.432045][T30045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.442001][T30045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.452466][T30045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.463224][T30045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.481119][T30045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.491826][T30045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.501728][T30045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.512260][T30045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.522276][T30045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.532754][T30045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.542629][T30045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.553175][T30045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.563102][T30045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.573576][T30045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.583421][T30045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.593981][T30045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.605016][T30045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.617375][T30045] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.626561][T30045] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.635413][T30045] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.644127][T30045] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.654697][T30249] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 351.684819][T30105] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 351.691738][T30251] Cannot find set identified by id 632 to match [ 351.700778][T30105] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 351.712421][T30105] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 351.723271][T30105] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 351.818966][T30105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.830319][T30262] loop7: detected capacity change from 0 to 164 [ 351.847634][T30262] syz.7.11117: attempt to access beyond end of device [ 351.847634][T30262] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 351.866294][T30105] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.877712][T19589] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.884797][T19589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.893033][T30262] syz.7.11117: attempt to access beyond end of device [ 351.893033][T30262] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 351.907638][T30267] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11121'. [ 351.922720][T30267] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11121'. [ 351.939643][T11695] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.946778][T11695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.985429][T19589] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 352.011927][T30270] netlink: 132 bytes leftover after parsing attributes in process `syz.7.11123'. [ 352.158368][T30105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.316403][T30320] netlink: 596 bytes leftover after parsing attributes in process `syz.1.11139'. [ 352.333043][T30303] lo speed is unknown, defaulting to 1000 [ 352.357087][T30303] lo speed is unknown, defaulting to 1000 [ 352.360913][T30105] veth0_vlan: entered promiscuous mode [ 352.400969][T30105] veth1_vlan: entered promiscuous mode [ 352.432207][T30325] loop9: detected capacity change from 0 to 512 [ 352.459000][T30325] EXT4-fs error (device loop9): ext4_orphan_get:1415: comm syz.9.11140: bad orphan inode 13 [ 352.479462][T30325] ext4_test_bit(bit=12, block=4) = 1 [ 352.484830][T30325] is_bad_inode(inode)=0 [ 352.489100][T30325] NEXT_ORPHAN(inode)=0 [ 352.493216][T30325] max_ino=32 [ 352.494679][T30105] veth0_macvtap: entered promiscuous mode [ 352.496496][T30325] i_nlink=1 [ 352.506250][T30325] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.531271][T30325] EXT4-fs warning (device loop9): dx_probe:833: inode #2: comm syz.9.11140: Unrecognised inode hash code 20 [ 352.542969][T30325] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.11140: Corrupt directory, running e2fsck is recommended [ 352.573749][T30105] veth1_macvtap: entered promiscuous mode [ 352.610263][T30325] EXT4-fs warning (device loop9): dx_probe:833: inode #2: comm syz.9.11140: Unrecognised inode hash code 20 [ 352.621865][T30325] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.11140: Corrupt directory, running e2fsck is recommended [ 352.630894][T30105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.645544][T30105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.655395][T30105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.665915][T30105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.675862][T30105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.686333][T30105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.696450][T30105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.706981][T30105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.717371][T30105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.727855][T30105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.737757][T30105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.748237][T30105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.758212][T30105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.768724][T30105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.779605][T30105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.788292][T30105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.798784][T30105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.808622][T30105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.819091][T30105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.828976][T30105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.839435][T30105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.849320][T30105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.859908][T30105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.869814][T30105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.880277][T30105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.890134][T30105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.891779][T30328] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, [ 352.900625][T30105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.900688][T30105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.908994][T30328] block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 352.918855][T30105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.920000][T30105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.054824][T24112] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.056866][T30105] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.072569][T30105] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.081398][T30105] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.090176][T30105] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.109731][T30345] loop9: detected capacity change from 0 to 512 [ 353.183990][T30345] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 353.247133][T30345] EXT4-fs (loop9): 1 truncate cleaned up [ 353.253196][T30345] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.285783][T27362] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 353.377205][T24112] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.749498][T30369] lo speed is unknown, defaulting to 1000 [ 353.756889][T30369] lo speed is unknown, defaulting to 1000 [ 354.004597][T30398] loop8: detected capacity change from 0 to 512 [ 354.020096][T30398] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 354.060981][T30398] EXT4-fs (loop8): 1 truncate cleaned up [ 354.071677][T30398] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.131907][T30045] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.343031][T30417] loop7: detected capacity change from 0 to 256 [ 354.364494][T30417] FAT-fs (loop7): bogus number of FAT sectors [ 354.370693][T30417] FAT-fs (loop7): Can't find a valid FAT filesystem [ 354.377995][T30415] ref_ctr_offset mismatch. inode: 0x1b offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 354.416613][T11742] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 354.587255][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 354.587273][ T29] audit: type=1400 audit(2000000157.295:13148): avc: denied { read } for pid=30429 comm="syz.9.11184" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 354.643157][ T29] audit: type=1400 audit(2000000157.335:13149): avc: denied { open } for pid=30429 comm="syz.9.11184" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 354.645204][T30432] netlink: 116 bytes leftover after parsing attributes in process `syz.7.11185'. [ 354.668129][ T29] audit: type=1400 audit(2000000157.335:13150): avc: denied { ioctl } for pid=30429 comm="syz.9.11184" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 355.016748][T30465] loop9: detected capacity change from 0 to 512 [ 355.023644][ T29] audit: type=1400 audit(2000000157.725:13151): avc: denied { connect } for pid=30466 comm="syz.7.11199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 355.052198][T30465] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 355.069954][ T29] audit: type=1400 audit(2000000157.765:13152): avc: denied { read } for pid=30466 comm="syz.7.11199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 355.137261][ T29] audit: type=1400 audit(2000000157.835:13153): avc: denied { read } for pid=30476 comm="syz.7.11203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 355.279424][ T29] audit: type=1326 audit(2000000157.985:13154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30486 comm="syz.7.11207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595b225d29 code=0x7ffc0000 [ 355.323687][ T29] audit: type=1326 audit(2000000158.015:13155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30486 comm="syz.7.11207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595b225d29 code=0x7ffc0000 [ 355.347637][ T29] audit: type=1326 audit(2000000158.015:13156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30486 comm="syz.7.11207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f595b225d29 code=0x7ffc0000 [ 355.372024][ T29] audit: type=1326 audit(2000000158.015:13157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30486 comm="syz.7.11207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595b225d29 code=0x7ffc0000 [ 355.615941][T19589] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 355.724268][T30511] bond1: entered promiscuous mode [ 355.729426][T30511] bond1: entered allmulticast mode [ 355.746938][T30511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 355.776442][T30511] bond1 (unregistering): Released all slaves [ 356.492966][T30605] gretap0: entered promiscuous mode [ 356.711749][T30623] bond2: entered promiscuous mode [ 356.716987][T30623] bond2: entered allmulticast mode [ 356.725897][T11715] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 356.766775][T30623] 8021q: adding VLAN 0 to HW filter on device bond2 [ 356.801578][T30623] bond2 (unregistering): Released all slaves [ 357.554182][T30681] lo speed is unknown, defaulting to 1000 [ 357.572760][T30681] lo speed is unknown, defaulting to 1000 [ 357.693733][T30707] xt_hashlimit: size too large, truncated to 1048576 [ 357.727725][T30681] chnl_net:caif_netlink_parms(): no params data found [ 357.844374][T30681] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.851632][T30681] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.895891][T11695] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 357.919234][T30681] bridge_slave_0: entered allmulticast mode [ 357.961473][T30681] bridge_slave_0: entered promiscuous mode [ 357.986660][T30681] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.993796][T30681] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.003927][T30681] bridge_slave_1: entered allmulticast mode [ 358.011840][T30681] bridge_slave_1: entered promiscuous mode [ 358.078535][T30681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.099286][T30681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.132985][T30681] team0: Port device team_slave_0 added [ 358.140215][T30681] team0: Port device team_slave_1 added [ 358.186721][T30681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.193880][T30681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.219979][T30681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.273823][T30681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.280923][T30681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.307239][T30681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.373787][T30681] hsr_slave_0: entered promiscuous mode [ 358.399966][T30681] hsr_slave_1: entered promiscuous mode [ 358.413219][T30681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.421444][T30681] Cannot create hsr debugfs directory [ 358.431439][T30735] smc: net device bond0 applied user defined pnetid SYZ1 [ 358.460265][T30735] smc: net device bond0 erased user defined pnetid SYZ1 [ 358.525003][T30681] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.552250][T30681] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.588604][T30746] loop8: detected capacity change from 0 to 128 [ 358.596725][T30748] syz.1.11317[30748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.596935][T30748] syz.1.11317[30748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.613610][T30681] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.614207][T30748] syz.1.11317[30748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.656009][T30746] syz.8.11316: attempt to access beyond end of device [ 358.656009][T30746] loop8: rw=2049, sector=153, nr_sectors = 888 limit=128 [ 358.692166][T30681] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.720417][T30746] syz.8.11316: attempt to access beyond end of device [ 358.720417][T30746] loop8: rw=34817, sector=153, nr_sectors = 848 limit=128 [ 358.814700][T30681] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 358.833227][T30681] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 358.853245][T30681] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 358.870057][T30681] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 358.934465][T30769] syz.1.11326[30769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.934534][T30769] syz.1.11326[30769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.955605][T30769] syz.1.11326[30769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.997785][T30681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.034951][T11742] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 359.097265][T30681] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.135967][T11742] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.143074][T11742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.178424][T11742] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.185573][T11742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.358688][T30681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.454027][T30797] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 359.471493][T30797] SELinux: failed to load policy [ 359.601061][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 359.601094][ T29] audit: type=1326 audit(2000000162.305:13281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30818 comm="syz.9.11345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f6665d29 code=0x7ffc0000 [ 359.635381][ T29] audit: type=1326 audit(2000000162.305:13282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30818 comm="syz.9.11345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f6665d29 code=0x7ffc0000 [ 359.668792][ T29] audit: type=1326 audit(2000000162.375:13283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30820 comm="syz.2.11343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c4015d29 code=0x7ffc0000 [ 359.692579][ T29] audit: type=1326 audit(2000000162.375:13284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30820 comm="syz.2.11343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c4015d29 code=0x7ffc0000 [ 359.717413][ T29] audit: type=1326 audit(2000000162.415:13285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30818 comm="syz.9.11345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1f6665d29 code=0x7ffc0000 [ 359.741642][ T29] audit: type=1326 audit(2000000162.415:13286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30818 comm="syz.9.11345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f6665d29 code=0x7ffc0000 [ 359.766171][ T29] audit: type=1326 audit(2000000162.415:13287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30818 comm="syz.9.11345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1f6665d29 code=0x7ffc0000 [ 359.772296][T30681] veth0_vlan: entered promiscuous mode [ 359.789913][ T29] audit: type=1326 audit(2000000162.425:13288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30820 comm="syz.2.11343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95c4015d29 code=0x7ffc0000 [ 359.819094][ T29] audit: type=1326 audit(2000000162.425:13289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30820 comm="syz.2.11343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c4015d29 code=0x7ffc0000 [ 359.843114][ T29] audit: type=1326 audit(2000000162.425:13290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30820 comm="syz.2.11343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c4015d29 code=0x7ffc0000 [ 359.851204][T30681] veth1_vlan: entered promiscuous mode [ 359.909143][T30829] tipc: Started in network mode [ 359.914047][T30829] tipc: Node identity ac1414aa, cluster identity 4711 [ 359.921176][T30829] tipc: New replicast peer: 100.1.1.1 [ 359.926731][T30829] tipc: Enabled bearer , priority 10 [ 359.941866][T30681] veth0_macvtap: entered promiscuous mode [ 359.950446][T30681] veth1_macvtap: entered promiscuous mode [ 359.976234][T30681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.986878][T30681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.996775][T30681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.007231][T30681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.017131][T30681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.027660][T30681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.037520][T30681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.048069][T30681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.057989][T30681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.068559][T30681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.078479][T30681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.089095][T30681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.098966][T30681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.109477][T30681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.119325][T30681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.129962][T30681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.141043][T30681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.181145][T30681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.191762][T30681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.201762][T30681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.212250][T30681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.222140][T30681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.232673][T30681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.242802][T30681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.253376][T30681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.263325][T30681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.273805][T30681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.283830][T30681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.294314][T30681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.304689][T30681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.315179][T30681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.316336][T11742] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 360.325113][T30681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.343387][T30681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.354637][T30681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.363937][T30681] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.372769][T30681] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.381616][T30681] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.390391][T30681] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.439213][T30853] loop8: detected capacity change from 0 to 2048 [ 360.443254][T30851] pim6reg: entered allmulticast mode [ 360.458707][T30853] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.462108][T30851] pim6reg: left allmulticast mode [ 360.723593][T30875] Process accounting resumed [ 360.780018][T30876] Process accounting resumed [ 360.811937][T30864] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 360.815814][T30885] loop9: detected capacity change from 0 to 128 [ 360.835605][T30864] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 360.848138][T30864] EXT4-fs (loop8): This should not happen!! Data will be lost [ 360.848138][T30864] [ 360.857916][T30864] EXT4-fs (loop8): Total free blocks count 0 [ 360.863994][T30864] EXT4-fs (loop8): Free/Dirty block details [ 360.870011][T30864] EXT4-fs (loop8): free_blocks=2415919104 [ 360.875804][T30864] EXT4-fs (loop8): dirty_blocks=8192 [ 360.881172][T30864] EXT4-fs (loop8): Block reservation details [ 360.887237][T30864] EXT4-fs (loop8): i_reserved_data_blocks=512 [ 360.924527][T30885] syz.9.11366: attempt to access beyond end of device [ 360.924527][T30885] loop9: rw=2049, sector=153, nr_sectors = 888 limit=128 [ 360.950559][T30853] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 360.985892][T30885] syz.9.11366: attempt to access beyond end of device [ 360.985892][T30885] loop9: rw=34817, sector=153, nr_sectors = 848 limit=128 [ 361.045418][ T3375] tipc: Node number set to 2886997162 [ 361.449008][T30915] loop8: detected capacity change from 0 to 164 [ 361.462550][T19589] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 361.476961][T30915] Unable to read rock-ridge attributes [ 361.492860][T30915] Unable to read rock-ridge attributes [ 361.680721][T30944] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=30944 comm=syz.2.11392 [ 361.749975][T30956] syz.2.11395[30956] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 361.750092][T30956] syz.2.11395[30956] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 361.795039][T30956] syz.2.11395[30956] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 361.869464][T30968] atomic_op ffff88813f6fd128 conn xmit_atomic 0000000000000000 [ 362.015995][T30974] bond1: entered promiscuous mode [ 362.021276][T30974] bond1: entered allmulticast mode [ 362.026837][T30974] 8021q: adding VLAN 0 to HW filter on device bond1 [ 362.053000][T30974] bond1 (unregistering): Released all slaves [ 362.060928][T30983] xt_connbytes: Forcing CT accounting to be enabled [ 362.075631][T30983] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 362.183726][T30998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30998 comm=syz.1.11418 [ 362.195110][T31001] syz.2.11417[31001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.202755][T30998] netlink: 'syz.1.11418': attribute type 1 has an invalid length. [ 362.262482][T31007] batadv1: entered allmulticast mode [ 362.285970][T30998] bond2: entered promiscuous mode [ 362.291267][T30998] bond2: entered allmulticast mode [ 362.406705][T31025] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11428'. [ 362.463970][T31031] batman_adv: batadv0: Adding interface: ip6gretap1 [ 362.470751][T31031] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.496515][T31031] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 362.647323][T27362] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 363.173460][T31118] netlink: 'syz.9.11471': attribute type 1 has an invalid length. [ 363.181379][T31118] netlink: 224 bytes leftover after parsing attributes in process `syz.9.11471'. [ 363.232328][T31125] loop7: detected capacity change from 0 to 1024 [ 363.299236][T31135] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 363.299236][T31135] program syz.8.11475 not setting count and/or reply_len properly [ 363.317155][T31125] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.378353][T30681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.441748][T31141] netlink: 'syz.7.11478': attribute type 3 has an invalid length. [ 363.449692][T31141] netlink: 132 bytes leftover after parsing attributes in process `syz.7.11478'. [ 363.481412][T31144] loop9: detected capacity change from 0 to 256 [ 363.483245][T31145] loop8: detected capacity change from 0 to 1024 [ 363.594296][T31145] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.675931][T30045] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.690948][T31166] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11490'. [ 363.755260][T31177] loop9: detected capacity change from 0 to 512 [ 363.776354][T11715] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 363.799140][T31177] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.823803][T31177] ext4 filesystem being mounted at /542/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.844204][T31187] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 363.870741][T24112] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.939031][T31191] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11501'. [ 363.956996][T31191] erspan0: entered promiscuous mode [ 363.962639][T31191] macvtap1: entered promiscuous mode [ 363.968204][T31191] macvtap1: entered allmulticast mode [ 363.973627][T31191] erspan0: entered allmulticast mode [ 363.985645][T31191] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11501'. [ 364.084438][T31211] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11511'. [ 364.194454][T31226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11517'. [ 364.203647][T31226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11517'. [ 364.214552][T31226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11517'. [ 364.328091][T31243] loop9: detected capacity change from 0 to 512 [ 364.446884][T31243] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.11523: bg 0: block 248: padding at end of block bitmap is not set [ 364.469609][T31243] EXT4-fs error (device loop9): ext4_acquire_dquot:6938: comm syz.9.11523: Failed to acquire dquot type 1 [ 364.514302][T31243] EXT4-fs (loop9): 1 truncate cleaned up [ 364.542277][T31243] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.558298][T31255] loop8: detected capacity change from 0 to 1024 [ 364.566600][T31257] SELinux: policydb version 49497 does not match my version range 15-33 [ 364.577200][T31243] ext4 filesystem being mounted at /549/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 364.599767][T31257] SELinux: failed to load policy [ 364.636524][T31255] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.653819][T24112] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.673115][T11742] __quota_error: 264 callbacks suppressed [ 364.673131][T11742] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-5 [ 364.688017][T11742] EXT4-fs error (device loop9): ext4_release_dquot:6961: comm kworker/u8:36: Failed to release dquot type 1 [ 364.724003][ T29] audit: type=1326 audit(2000000167.425:13553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.9.11530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f6665d29 code=0x7ffc0000 [ 364.750015][ T29] audit: type=1326 audit(2000000167.425:13554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.9.11530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f6665d29 code=0x7ffc0000 [ 364.777282][ T29] audit: type=1326 audit(2000000167.485:13555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.9.11530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1f6665d29 code=0x7ffc0000 [ 364.801186][ T29] audit: type=1326 audit(2000000167.485:13556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.9.11530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f6665d29 code=0x7ffc0000 [ 364.825097][ T29] audit: type=1326 audit(2000000167.485:13557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.9.11530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f6665d29 code=0x7ffc0000 [ 364.848931][ T29] audit: type=1326 audit(2000000167.485:13558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.9.11530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1f6665d29 code=0x7ffc0000 [ 364.872918][ T29] audit: type=1326 audit(2000000167.485:13559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.9.11530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f6665d29 code=0x7ffc0000 [ 364.896709][ T29] audit: type=1326 audit(2000000167.485:13560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.9.11530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f6665d29 code=0x7ffc0000 [ 364.920589][ T29] audit: type=1326 audit(2000000167.485:13561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.9.11530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1f6665d29 code=0x7ffc0000 [ 364.925404][T11742] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 365.026321][T31275] vlan2: entered allmulticast mode [ 365.031501][T31275] bridge_slave_0: entered allmulticast mode [ 365.051142][T31275] bridge_slave_0: left allmulticast mode [ 365.070423][T30045] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.084297][T31279] $H: renamed from bond0 (while UP) [ 365.092124][T31279] $H: entered promiscuous mode [ 365.097301][T31279] bond_slave_0: entered promiscuous mode [ 365.103123][T31279] bond_slave_1: entered promiscuous mode [ 365.114164][T31281] hub 6-0:1.0: USB hub found [ 365.119059][T31281] hub 6-0:1.0: 8 ports detected [ 365.180576][T31290] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 365.190625][T31288] IPVS: stopping master sync thread 31290 ... [ 365.226416][T31294] loop2: detected capacity change from 0 to 512 [ 365.284050][T31294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.314437][T31294] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 365.366205][T30105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.493330][T31332] ALSA: seq fatal error: cannot create timer (-19) [ 365.564072][T31350] 9pnet: Could not find request transport: 0xffffffffffffffff [ 365.646222][T31361] bpf_get_probe_write_proto: 8 callbacks suppressed [ 365.646244][T31361] syz.8.11575[31361] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.653240][T31361] syz.8.11575[31361] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.676965][T31361] syz.8.11575[31361] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.734905][T31372] program syz.8.11580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.066246][T11742] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 366.100229][T31415] loop2: detected capacity change from 0 to 512 [ 366.107195][T31415] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 366.116194][T31415] EXT4-fs (loop2): invalid journal inode [ 366.122020][T31415] EXT4-fs (loop2): can't get journal size [ 366.131482][T31415] EXT4-fs (loop2): 1 truncate cleaned up [ 366.137729][T31415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.158875][T31419] netlink: 'syz.7.11600': attribute type 153 has an invalid length. [ 366.182807][T30105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.339631][T31443] loop9: detected capacity change from 0 to 2048 [ 366.387795][T31447] 9pnet: p9_errstr2errno: server reported unknown error @΂(QNde [ 366.396926][T31443] loop9: p1 < > p3 p4 < > [ 366.402289][T31443] loop9: p3 start 4284289 is beyond EOD, truncated [ 366.478914][T31454] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 366.769356][T31481] netlink: 'syz.7.11627': attribute type 3 has an invalid length. [ 366.973444][T31495] bond_slave_1: entered promiscuous mode [ 366.992454][T31495] bond_slave_1: left promiscuous mode [ 366.999864][T31499] netlink: 'syz.1.11635': attribute type 153 has an invalid length. [ 367.078275][T31503] syz.1.11638[31503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.078374][T31503] syz.1.11638[31503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.111193][T31503] syz.1.11638[31503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.160690][T31510] netlink: 'syz.7.11641': attribute type 1 has an invalid length. [ 367.195829][T19589] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 367.356991][T31524] 9pnet: p9_errstr2errno: server reported unknown error @΂(QNde [ 367.394266][T31526] netlink: zone id is out of range [ 367.399520][T31526] netlink: zone id is out of range [ 367.410890][T31526] netlink: set zone limit has 4 unknown bytes [ 367.442575][T31532] syz.7.11653[31532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.442646][T31532] syz.7.11653[31532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.456452][T31532] syz.7.11653[31532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.551495][T31548] syz.2.11658[31548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.586537][T31552] loop9: detected capacity change from 0 to 512 [ 367.614503][T31548] xt_TPROXY: Can be used only with -p tcp or -p udp [ 367.791947][T31573] bridge0: port 3(ipvlan2) entered blocking state [ 367.798532][T31573] bridge0: port 3(ipvlan2) entered disabled state [ 367.850592][T31573] ipvlan2: entered allmulticast mode [ 367.855964][T31573] bridge0: entered allmulticast mode [ 367.885864][T31573] ipvlan2: left allmulticast mode [ 367.891142][T31573] bridge0: left allmulticast mode [ 367.930909][T31580] loop9: detected capacity change from 0 to 1024 [ 367.979748][T31580] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.150326][T31589] loop8: detected capacity change from 0 to 512 [ 368.159239][T31589] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 368.171985][T31589] EXT4-fs (loop8): invalid journal inode [ 368.179560][T31589] EXT4-fs (loop8): can't get journal size [ 368.189056][T31589] EXT4-fs (loop8): 1 truncate cleaned up [ 368.195412][T31589] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.272007][T30045] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.293847][T24112] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.324212][T31594] loop9: detected capacity change from 0 to 164 [ 368.331759][T31594] Unable to read rock-ridge attributes [ 368.341627][T31594] Unable to read rock-ridge attributes [ 368.347720][T11742] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 368.708267][T31604] Falling back ldisc for ttyS3. [ 368.855416][T31629] loop2: detected capacity change from 0 to 512 [ 368.877477][T31629] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.11690: bg 0: block 248: padding at end of block bitmap is not set [ 368.892321][T31629] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.11690: Failed to acquire dquot type 1 [ 368.906112][T31629] EXT4-fs (loop2): 1 truncate cleaned up [ 368.915889][T31629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.945485][T31629] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 368.971590][T30105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.989249][T27362] EXT4-fs error (device loop2): ext4_release_dquot:6961: comm kworker/u8:59: Failed to release dquot type 1 [ 369.138076][T31638] loop2: detected capacity change from 0 to 2048 [ 369.191411][T31638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.224544][T31638] EXT4-fs error (device loop2): ext4_find_extent:938: inode #2: comm syz.2.11692: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 369.246495][T31638] EXT4-fs (loop2): Remounting filesystem read-only [ 369.274951][T30105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.354624][T31645] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 369.475447][T11715] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 369.493395][T31655] __nla_validate_parse: 6 callbacks suppressed [ 369.493415][T31655] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11699'. [ 369.529958][T31655] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11699'. [ 369.539340][T31655] netlink: 84 bytes leftover after parsing attributes in process `syz.2.11699'. [ 369.721098][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 369.721117][ T29] audit: type=1326 audit(2000000172.425:13774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31669 comm="syz.8.11709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f54205d29 code=0x7ffc0000 [ 369.751111][ T29] audit: type=1326 audit(2000000172.425:13775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31669 comm="syz.8.11709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f54205d29 code=0x7ffc0000 [ 369.775073][ T29] audit: type=1326 audit(2000000172.425:13776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31669 comm="syz.8.11709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f3f54205d29 code=0x7ffc0000 [ 369.798910][ T29] audit: type=1326 audit(2000000172.425:13777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31669 comm="syz.8.11709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f54205d29 code=0x7ffc0000 [ 369.822834][ T29] audit: type=1326 audit(2000000172.425:13778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31669 comm="syz.8.11709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3f54205d29 code=0x7ffc0000 [ 369.846588][ T29] audit: type=1326 audit(2000000172.425:13779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31669 comm="syz.8.11709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f54205d29 code=0x7ffc0000 [ 369.887948][ T29] audit: type=1400 audit(2000000172.595:13780): avc: denied { prog_load } for pid=31665 comm="syz.2.11706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 369.907582][ T29] audit: type=1400 audit(2000000172.595:13781): avc: denied { bpf } for pid=31665 comm="syz.2.11706" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 369.928428][ T29] audit: type=1400 audit(2000000172.595:13782): avc: denied { perfmon } for pid=31665 comm="syz.2.11706" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 369.963051][ T29] audit: type=1400 audit(2000000172.665:13783): avc: denied { read write } for pid=30105 comm="syz-executor" name="loop2" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 370.140941][T31695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11717'. [ 370.485485][T31731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11736'. [ 370.588635][T31716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.626686][T11742] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 370.813042][T31757] xt_hashlimit: size too large, truncated to 1048576 [ 371.083114][T31767] bpf_get_probe_write_proto: 2 callbacks suppressed [ 371.083135][T31767] syz.7.11749[31767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 371.101274][T31767] syz.7.11749[31767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 371.146728][T31767] syz.7.11749[31767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 371.539066][T31780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.613644][T31794] syz.9.11764[31794] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 371.613713][T31794] syz.9.11764[31794] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 371.651964][T31794] syz.9.11764[31794] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 371.665739][T31796] $H: renamed from bond0 [ 371.727208][T31796] $H: entered promiscuous mode [ 371.756121][T19589] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 371.835793][T31801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31801 comm=syz.8.11766 [ 371.865933][T31801] netlink: 'syz.8.11766': attribute type 1 has an invalid length. [ 371.900620][T31801] bond1: entered promiscuous mode [ 371.905839][T31801] bond1: entered allmulticast mode [ 371.920565][T31801] batadv1: entered allmulticast mode [ 371.926873][T31801] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 371.935277][T31801] bond1: (slave batadv1): making interface the new active one [ 371.942844][T31801] batadv1: entered promiscuous mode [ 371.949219][T31801] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 372.061696][T31815] netlink: 132 bytes leftover after parsing attributes in process `syz.8.11772'. [ 372.145472][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 372.238448][T31827] netlink: 'syz.2.11778': attribute type 4 has an invalid length. [ 372.474712][T31840] lo speed is unknown, defaulting to 1000 [ 372.493665][T31840] lo speed is unknown, defaulting to 1000 [ 372.545859][T31849] loop7: detected capacity change from 0 to 1024 [ 372.571076][T31849] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 372.602380][T31849] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 372.613120][T31849] EXT4-fs (loop7): orphan cleanup on readonly fs [ 372.632499][T31849] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 372.647247][T31849] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 372.722616][T31856] xt_HMARK: spi-set and port-set can't be combined [ 372.725096][T31849] EXT4-fs error (device loop7): ext4_free_blocks:6589: comm syz.7.11787: Freeing blocks not in datazone - block = 0, count = 4096 [ 372.743795][T31849] EXT4-fs (loop7): Remounting filesystem read-only [ 372.746474][T31855] netlink: 100 bytes leftover after parsing attributes in process `syz.1.11789'. [ 372.765399][T31849] EXT4-fs (loop7): 1 orphan inode deleted [ 372.773605][T31849] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 372.798319][T31849] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 372.812738][T31849] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.832677][T31863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11792'. [ 372.906638][T19589] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 373.080495][T31879] bond2: entered promiscuous mode [ 373.085865][T31879] bond2: entered allmulticast mode [ 373.122868][T31879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 373.154961][T31879] bond2 (unregistering): Released all slaves [ 373.321471][T31894] program syz.9.11806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.340553][T31894] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 373.454574][T31910] netlink: 'syz.2.11809': attribute type 15 has an invalid length. [ 373.462614][T31910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11809'. [ 373.528926][T31921] loop9: detected capacity change from 0 to 512 [ 373.536060][T31921] journal_path: Non-blockdev passed as './bus' [ 373.542267][T31921] EXT4-fs: error: could not find journal device path [ 373.553042][T31921] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11818'. [ 373.660339][T31936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.670526][T31936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.782152][T31948] loop2: detected capacity change from 0 to 2048 [ 373.823992][T31948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.897356][T30105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.989036][T31958] lo speed is unknown, defaulting to 1000 [ 374.010939][T31958] lo speed is unknown, defaulting to 1000 [ 374.043859][T31972] netlink: 'syz.1.11841': attribute type 4 has an invalid length. [ 374.056679][T19589] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 374.168995][T31989] msdos: Unknown parameter '18446744073709551615017777777777777777777770xffffffffffffffff184467440737095516153Pq{P [ 374.168995][T31989] n'|$@OO-+el' [ 374.253356][T31997] bond_slave_1: entered promiscuous mode [ 374.272838][T31997] bond_slave_1: left promiscuous mode [ 374.282804][T31999] batadv_slave_1: entered promiscuous mode [ 374.300872][T31999] batadv_slave_1 (unregistering): left promiscuous mode [ 374.590769][T32021] __nla_validate_parse: 3 callbacks suppressed [ 374.590785][T32021] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11861'. [ 374.619906][T32021] macvtap1: entered promiscuous mode [ 374.625253][T32021] erspan0: entered promiscuous mode [ 374.630775][T32021] macvtap1: entered allmulticast mode [ 374.636249][T32021] erspan0: entered allmulticast mode [ 374.656920][T32021] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11861'. [ 374.701883][T32013] lo speed is unknown, defaulting to 1000 [ 374.708396][T32013] lo speed is unknown, defaulting to 1000 [ 374.726241][T32028] loop9: detected capacity change from 0 to 256 [ 374.734344][T32028] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 374.746352][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 374.746384][ T29] audit: type=1400 audit(2000000177.455:14066): avc: denied { mount } for pid=32025 comm="syz.9.11864" name="/" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 374.858166][ T29] audit: type=1400 audit(2000000177.565:14067): avc: denied { name_connect } for pid=32032 comm="syz.7.11866" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 374.931833][T32036] netlink: 'syz.7.11867': attribute type 15 has an invalid length. [ 374.939903][T32036] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11867'. [ 374.955603][T32034] lo speed is unknown, defaulting to 1000 [ 374.961671][T32034] lo speed is unknown, defaulting to 1000 [ 375.018893][T32039] IPv4: Oversized IP packet from 127.202.26.0 [ 375.030915][ T29] audit: type=1400 audit(2000000177.725:14068): avc: denied { write } for pid=32038 comm="syz.7.11868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 375.168170][T11742] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 375.183434][T32051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11873'. [ 375.203791][T32051] erspan0: entered promiscuous mode [ 375.211633][T32051] macvtap1: entered promiscuous mode [ 375.217160][T32051] macvtap1: entered allmulticast mode [ 375.222575][T32051] erspan0: entered allmulticast mode [ 375.229016][T32031] netlink: 'syz.1.11865': attribute type 6 has an invalid length. [ 375.240589][T32051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11873'. [ 375.331464][T32057] vlan2: entered allmulticast mode [ 375.454769][ T29] audit: type=1400 audit(2000000178.155:14069): avc: denied { ioctl } for pid=32060 comm="syz.2.11878" path="socket:[103865]" dev="sockfs" ino=103865 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 375.481631][ T29] audit: type=1400 audit(2000000178.185:14070): avc: denied { bind } for pid=32060 comm="syz.2.11878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 375.637335][T32071] netlink: 10 bytes leftover after parsing attributes in process `syz.2.11883'. [ 375.717870][ T29] audit: type=1400 audit(2000000178.425:14071): avc: denied { unmount } for pid=24112 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 375.773517][ T29] audit: type=1400 audit(2000000178.425:14072): avc: denied { create } for pid=32073 comm="syz.9.11884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 375.793482][ T29] audit: type=1400 audit(2000000178.425:14073): avc: denied { setopt } for pid=32073 comm="syz.9.11884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 375.815361][ T29] audit: type=1400 audit(2000000178.475:14074): avc: denied { create } for pid=32062 comm="syz.8.11879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 375.885596][ T29] audit: type=1400 audit(2000000178.585:14075): avc: denied { write } for pid=32062 comm="syz.8.11879" path="socket:[103060]" dev="sockfs" ino=103060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 376.100219][T32083] lo speed is unknown, defaulting to 1000 [ 376.131000][T32083] lo speed is unknown, defaulting to 1000 [ 376.222711][T32104] netlink: 76 bytes leftover after parsing attributes in process `syz.9.11897'. [ 376.253085][T32106] netlink: 'syz.9.11898': attribute type 3 has an invalid length. [ 376.315407][T27362] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 376.329608][T11742] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.378639][T11742] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.450772][T11742] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.481148][T32113] loop8: detected capacity change from 0 to 8192 [ 376.516528][T32113] loop8: p1 p2 p3 p4 [ 376.522793][T32113] loop8: p1 start 51379968 is beyond EOD, truncated [ 376.541757][T32113] loop8: p3 size 100663552 extends beyond EOD, truncated [ 376.554125][T32113] loop8: p4 size 81920 extends beyond EOD, truncated [ 376.567156][T11742] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.624338][T32113] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 376.677015][T32135] syz.1.11909[32135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 376.677129][T32135] syz.1.11909[32135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 376.689305][T11742] bridge_slave_1: left allmulticast mode [ 376.706552][T11742] bridge_slave_1: left promiscuous mode [ 376.712186][T11742] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.735435][T32135] syz.1.11909[32135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 376.745906][T11742] bridge_slave_0: left allmulticast mode [ 376.763463][T11742] bridge_slave_0: left promiscuous mode [ 376.769303][T11742] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.851771][T32143] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11913'. [ 376.869680][T32150] loop9: detected capacity change from 0 to 2048 [ 376.881768][T11742] batman_adv: batadv0: Removing interface: ip6gretap1 [ 376.899958][T11742] erspan0 (unregistering): left allmulticast mode [ 376.909072][T32150] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.919897][T32154] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11913'. [ 376.983780][T11742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.994512][T11742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.010310][T11742] bond0 (unregistering): Released all slaves [ 377.020250][T32117] lo speed is unknown, defaulting to 1000 [ 377.027856][T32143] erspan0: entered promiscuous mode [ 377.033196][T32143] macvtap1: entered promiscuous mode [ 377.038622][T32143] macvtap1: entered allmulticast mode [ 377.044024][T32143] erspan0: entered allmulticast mode [ 377.080199][T32117] lo speed is unknown, defaulting to 1000 [ 377.154357][T32167] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11921'. [ 377.164114][T11742] hsr_slave_0: left promiscuous mode [ 377.176704][T11742] hsr_slave_1: left promiscuous mode [ 377.183243][T11742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.190864][T11742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.216038][T11742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.223649][T11742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.245544][T11742] veth1_macvtap: left promiscuous mode [ 377.251075][T11742] veth0_macvtap: left promiscuous mode [ 377.256686][T11742] veth1_vlan: left promiscuous mode [ 377.262073][T11742] veth0_vlan: left promiscuous mode [ 377.283499][T32150] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 377.331839][T32150] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 377.344364][T32150] EXT4-fs (loop9): This should not happen!! Data will be lost [ 377.344364][T32150] [ 377.354094][T32150] EXT4-fs (loop9): Total free blocks count 0 [ 377.360123][T32150] EXT4-fs (loop9): Free/Dirty block details [ 377.366072][T32150] EXT4-fs (loop9): free_blocks=2415919104 [ 377.371841][T32150] EXT4-fs (loop9): dirty_blocks=8192 [ 377.377171][T32150] EXT4-fs (loop9): Block reservation details [ 377.383204][T32150] EXT4-fs (loop9): i_reserved_data_blocks=512 [ 377.415137][T32161] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 377.446367][T27362] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 377.498094][T11742] team0 (unregistering): Port device team_slave_1 removed [ 377.513174][T11742] team0 (unregistering): Port device team_slave_0 removed [ 377.642379][T32183] tipc: Failed to remove unknown binding: 66,1,1/0:982863383/982863385 [ 377.693045][T32183] tipc: Failed to remove unknown binding: 66,1,1/0:982863383/982863385 [ 377.737098][T32117] chnl_net:caif_netlink_parms(): no params data found [ 377.837742][T32193] loop9: detected capacity change from 0 to 8192 [ 377.844242][T32117] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.851396][T32117] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.864386][T32117] bridge_slave_0: entered allmulticast mode [ 377.871312][T32117] bridge_slave_0: entered promiscuous mode [ 377.886565][T32193] loop9: p1 p2 p3 p4 [ 377.890624][T32193] loop9: p1 start 51379968 is beyond EOD, truncated [ 377.905395][T32193] loop9: p3 size 100663552 extends beyond EOD, truncated [ 377.914139][T32117] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.921400][T32117] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.929000][T32117] bridge_slave_1: entered allmulticast mode [ 377.929397][T32193] loop9: p4 size 81920 extends beyond EOD, truncated [ 377.935957][T32117] bridge_slave_1: entered promiscuous mode [ 377.962387][T32117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.985093][T32117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.998078][T32193] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 378.030827][T32117] team0: Port device team_slave_0 added [ 378.042177][T32117] team0: Port device team_slave_1 added [ 378.082457][T32117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.089500][T32117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.115805][T32117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.128531][T32117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.135539][T32117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.161725][T32117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.176256][T32196] macvtap1: entered promiscuous mode [ 378.181666][T32196] erspan0: entered promiscuous mode [ 378.187062][T32196] macvtap1: entered allmulticast mode [ 378.192466][T32196] erspan0: entered allmulticast mode [ 378.243788][T32117] hsr_slave_0: entered promiscuous mode [ 378.250440][T32117] hsr_slave_1: entered promiscuous mode [ 378.256560][T32117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.264349][T32117] Cannot create hsr debugfs directory [ 378.371671][T32214] netlink: 'syz.1.11936': attribute type 25 has an invalid length. [ 378.383828][T32214] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.392714][T32214] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.402011][T32214] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.410904][T32214] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.565680][T19490] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 378.594157][T32117] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 378.603613][T32117] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 378.615669][T32117] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 378.624392][T32117] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 378.665263][T32117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.678578][T32117] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.689713][T19490] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.696835][T19490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.705958][T19490] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.713080][T19490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.781675][T32117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.898432][T32117] veth0_vlan: entered promiscuous mode [ 378.906661][T32117] veth1_vlan: entered promiscuous mode [ 378.921787][T32117] veth0_macvtap: entered promiscuous mode [ 378.929407][T32117] veth1_macvtap: entered promiscuous mode [ 378.939980][T32117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.950523][T32117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.960416][T32117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.971006][T32117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.980925][T32117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.991428][T32117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.001259][T32117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.011858][T32117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.021833][T32117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.032314][T32117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.042327][T32117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.052800][T32117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.062827][T32117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.073301][T32117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.083239][T32117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.093796][T32117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.118171][T32117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.140365][T32117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.151010][T32117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.160906][T32117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.171361][T32117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.181486][T32117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.192065][T32117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.202284][T32117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.212799][T32117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.222891][T32117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.233356][T32117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.243404][T32117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.254087][T32117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.263980][T32117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.274674][T32117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.284515][T32117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.294965][T32117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.308335][T32117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.317108][T32117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.325958][T32117] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.334673][T32117] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.343412][T32117] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.370874][T32259] 0: renamed from pim6reg1 [ 379.579767][T32285] loop2: detected capacity change from 0 to 1024 [ 379.608250][T32285] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 379.619433][T32285] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 379.666820][T32285] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 379.678582][T27362] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 379.695450][T32285] EXT4-fs (loop2): invalid journal inode [ 379.922672][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 379.922691][ T29] audit: type=1400 audit(2000000182.625:14231): avc: denied { audit_write } for pid=32310 comm="syz.2.11976" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 379.950399][ T29] audit: type=1107 audit(2000000182.625:14232): pid=32310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 379.960201][T32315] loop9: detected capacity change from 0 to 1024 [ 379.989865][T32311] lo speed is unknown, defaulting to 1000 [ 380.004734][T32315] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 380.015806][T32315] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 380.036957][T32321] loop4: detected capacity change from 0 to 256 [ 380.043682][T32315] JBD2: no valid journal superblock found [ 380.049648][T32315] EXT4-fs (loop9): Could not load journal inode [ 380.066978][T32321] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 380.082886][T32311] lo speed is unknown, defaulting to 1000 [ 380.163268][T32327] __nla_validate_parse: 7 callbacks suppressed [ 380.163288][T32327] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11983'. [ 380.178758][ T29] audit: type=1400 audit(2000000182.865:14233): avc: denied { getopt } for pid=32328 comm="syz.2.11984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 380.235867][T32329] lo speed is unknown, defaulting to 1000 [ 380.238178][ T29] audit: type=1326 audit(2000000182.925:14234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32331 comm="syz.8.11985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f54205d29 code=0x7ffc0000 [ 380.265526][ T29] audit: type=1326 audit(2000000182.925:14235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32331 comm="syz.8.11985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f54205d29 code=0x7ffc0000 [ 380.269087][T32329] lo speed is unknown, defaulting to 1000 [ 380.289338][ T29] audit: type=1326 audit(2000000182.935:14236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32331 comm="syz.8.11985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f54205d29 code=0x7ffc0000 [ 380.289389][ T29] audit: type=1326 audit(2000000182.935:14237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32331 comm="syz.8.11985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f54205d29 code=0x7ffc0000 [ 380.342633][ T29] audit: type=1326 audit(2000000182.935:14238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32331 comm="syz.8.11985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f3f54205d29 code=0x7ffc0000 [ 380.366344][ T29] audit: type=1326 audit(2000000182.935:14239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32331 comm="syz.8.11985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f54205d29 code=0x7ffc0000 [ 380.390085][ T29] audit: type=1326 audit(2000000182.935:14240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32331 comm="syz.8.11985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f3f54205d29 code=0x7ffc0000 [ 380.467912][T32336] syz.1.11987[32336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 380.468051][T32336] syz.1.11987[32336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 380.490072][T32336] syz.1.11987[32336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 380.563039][ T3375] IPVS: starting estimator thread 0... [ 380.603293][T32347] syz.1.11991[32347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 380.603504][T32347] syz.1.11991[32347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 380.623713][T32347] syz.1.11991[32347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 380.675452][T32345] IPVS: using max 2064 ests per chain, 103200 per kthread [ 380.729599][T32361] syz.2.11998[32361] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 380.737552][T32363] loop9: detected capacity change from 0 to 256 [ 380.871193][T32375] loop8: detected capacity change from 0 to 1024 [ 380.879686][T32372] lo speed is unknown, defaulting to 1000 [ 380.911224][T32375] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 380.922396][T32375] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 380.933260][T32375] JBD2: no valid journal superblock found [ 380.935669][T32372] lo speed is unknown, defaulting to 1000 [ 380.939129][T32375] EXT4-fs (loop8): Could not load journal inode [ 380.977048][T27362] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 380.998442][T32377] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12006'. [ 381.060748][T32383] pim6reg: entered allmulticast mode [ 381.113016][T32383] pim6reg: left allmulticast mode [ 381.171868][T32390] netlink: 'syz.1.12012': attribute type 1 has an invalid length. [ 381.344588][T32394] lo speed is unknown, defaulting to 1000 [ 381.350899][T32394] lo speed is unknown, defaulting to 1000 [ 381.537714][T32414] loop9: detected capacity change from 0 to 512 [ 381.579651][T32414] EXT4-fs (loop9): unable to read superblock [ 381.996624][T32458] bpf_get_probe_write_proto: 2 callbacks suppressed [ 381.996643][T32458] syz.4.12041[32458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.003367][T32458] syz.4.12041[32458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.019226][T32460] netlink: 16 bytes leftover after parsing attributes in process `syz.9.12042'. [ 382.039092][T32458] syz.4.12041[32458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.075991][T11742] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 382.201753][T32473] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12048'. [ 382.263614][T32475] loop9: detected capacity change from 0 to 2048 [ 382.275559][T32475] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 382.613313][T32485] syz.1.12052[32485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.613420][T32485] syz.1.12052[32485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.625776][T32485] syz.1.12052[32485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.744583][T32489] tipc: Failed to remove unknown binding: 66,1,1/0:3600289865/3600289867 [ 382.771240][T32489] tipc: Failed to remove unknown binding: 66,1,1/0:3600289865/3600289867 [ 382.904807][T32498] loop2: detected capacity change from 0 to 1024 [ 382.928478][T32493] lo speed is unknown, defaulting to 1000 [ 382.931000][T32498] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 382.938083][T32493] lo speed is unknown, defaulting to 1000 [ 382.945499][T32498] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 382.968078][T32498] JBD2: no valid journal superblock found [ 382.973993][T32498] EXT4-fs (loop2): Could not load journal inode [ 383.216117][T19589] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 383.417783][T32517] tipc: Failed to remove unknown binding: 66,1,1/0:2710995513/2710995515 [ 383.433636][T32517] tipc: Failed to remove unknown binding: 66,1,1/0:2710995513/2710995515 [ 384.265788][T32502] syz.1.12060 (32502) used greatest stack depth: 6224 bytes left [ 384.286097][T32546] vlan2: entered allmulticast mode [ 384.309238][T32544] loop9: detected capacity change from 0 to 8192 [ 384.345703][T32544] loop9: p1 p2 p3 p4 [ 384.350035][T32544] loop9: p1 start 51379968 is beyond EOD, truncated [ 384.358197][T32544] loop9: p3 size 100663552 extends beyond EOD, truncated [ 384.366226][T11742] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 384.377877][T32544] loop9: p4 size 81920 extends beyond EOD, truncated [ 384.413475][T32549] lo speed is unknown, defaulting to 1000 [ 384.419708][T32549] lo speed is unknown, defaulting to 1000 [ 384.443392][T32551] loop4: detected capacity change from 0 to 1024 [ 384.459653][T32551] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 384.470872][T32551] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 384.484917][T32551] JBD2: no valid journal superblock found [ 384.490967][T32551] EXT4-fs (loop4): Could not load journal inode [ 384.652859][T32565] loop4: detected capacity change from 0 to 2048 [ 384.661255][T32565] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 384.993752][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 384.993838][ T29] audit: type=1400 audit(2000000187.695:14298): avc: denied { mount } for pid=32581 comm="syz.2.12093" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 385.072276][ T29] audit: type=1400 audit(2000000187.765:14299): avc: denied { unmount } for pid=30105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 385.139606][ T29] audit: type=1400 audit(2000000187.825:14300): avc: denied { read } for pid=32583 comm="syz.2.12094" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 385.163299][ T29] audit: type=1400 audit(2000000187.825:14301): avc: denied { open } for pid=32583 comm="syz.2.12094" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 385.187403][ T29] audit: type=1400 audit(2000000187.825:14302): avc: denied { ioctl } for pid=32583 comm="syz.2.12094" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 385.364679][ T29] audit: type=1326 audit(2000000188.065:14303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32592 comm="syz.2.12097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c4015d29 code=0x7ffc0000 [ 385.388633][ T29] audit: type=1326 audit(2000000188.065:14304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32592 comm="syz.2.12097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95c4015d29 code=0x7ffc0000 [ 385.412423][ T29] audit: type=1326 audit(2000000188.065:14305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32592 comm="syz.2.12097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c4015d29 code=0x7ffc0000 [ 385.436227][ T29] audit: type=1326 audit(2000000188.065:14306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32592 comm="syz.2.12097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f95c4015d29 code=0x7ffc0000 [ 385.459956][ T29] audit: type=1326 audit(2000000188.065:14307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32592 comm="syz.2.12097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c4015d29 code=0x7ffc0000 [ 385.536088][T27362] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 385.586570][T32604] syzkaller0: entered promiscuous mode [ 385.592236][T32604] syzkaller0: entered allmulticast mode [ 385.672741][T32617] loop2: detected capacity change from 0 to 512 [ 385.738825][T32617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.762114][T32617] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.839168][T32628] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12112'. [ 385.851562][T32610] syz.4.12105[32610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.851704][T32610] syz.4.12105[32610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.853178][T30105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.863476][T32610] syz.4.12105[32610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.975809][T32645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12120'. [ 386.002078][T32643] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12119'. [ 386.002315][T32645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12120'. [ 386.059869][T32650] loop9: detected capacity change from 0 to 512 [ 386.076243][T32650] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.12122: corrupted in-inode xattr: invalid ea_ino [ 386.117898][T32661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12127'. [ 386.120776][T32650] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.12122: couldn't read orphan inode 15 (err -117) [ 386.155271][T32650] EXT4-fs (loop9): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.282567][T24112] EXT4-fs (loop9): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 386.304380][T32667] loop2: detected capacity change from 0 to 8192 [ 386.373332][T32682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12134'. [ 386.382477][T32682] netlink: 'syz.4.12134': attribute type 25 has an invalid length. [ 386.394176][T32682] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.402979][T32682] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.411746][T32682] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.420483][T32682] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.477946][ T3373] IPVS: starting estimator thread 0... [ 386.483824][T32689] loop5: detected capacity change from 0 to 7 [ 386.490256][T32689] buffer_io_error: 1658 callbacks suppressed [ 386.490351][T32689] Buffer I/O error on dev loop5, logical block 0, async page read [ 386.504384][T32689] Buffer I/O error on dev loop5, logical block 0, async page read [ 386.512360][T32689] loop5: unable to read partition table [ 386.524508][T32689] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 386.524508][T32689] ) failed (rc=-5) [ 386.531748][T32694] syz.8.12140[32694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 386.575349][T32690] IPVS: using max 2448 ests per chain, 122400 per kthread [ 386.651443][T32702] infiniband syz1: set active [ 386.656294][T32702] infiniband syz1: added bond_slave_1 [ 386.659366][T27362] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 386.667390][T32702] RDS/IB: syz1: added [ 386.673500][T32702] smc: adding ib device syz1 with port count 1 [ 386.679904][T32702] smc: ib device syz1 port 1 has pnetid [ 386.684536][T32705] loop9: detected capacity change from 0 to 2048 [ 386.720348][T32705] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.757961][T24112] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.775259][T32714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12148'. [ 386.784632][T32714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12148'. [ 386.952413][T32723] loop9: detected capacity change from 0 to 512 [ 386.960642][T32723] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 386.980151][T32723] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.993613][T32723] ext4 filesystem being mounted at /661/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.057681][T24112] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.190578][T32734] netlink: 88 bytes leftover after parsing attributes in process `syz.4.12156'. [ 387.209966][T32734] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12156'. [ 387.388552][T32746] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.463340][T32746] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.579228][T32746] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.619872][T32759] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.641350][T32746] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.654701][T32765] bpf_get_probe_write_proto: 2 callbacks suppressed [ 387.654729][T32765] syz.9.12169[32765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.662149][T32765] syz.9.12169[32765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.679211][T32765] syz.9.12169[32765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.695166][T32759] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.724473][T32767] loop8: detected capacity change from 0 to 512 [ 387.740844][T32746] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.751884][T32767] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.760209][T32746] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.776781][T32746] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.785418][T19490] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 387.789663][T32746] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.801759][T32767] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.858909][T32759] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.874153][T30045] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.917927][T32759] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.972590][T32759] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.989165][T32759] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.001353][T32759] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.022277][T32759] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.201092][ T350] tmpfs: Bad value for 'mpol' [ 388.255267][ T357] loop4: detected capacity change from 0 to 2048 [ 388.273130][ T357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.273737][ T361] loop2: detected capacity change from 0 to 512 [ 388.293179][ T361] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 388.307385][ T357] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 388.323572][ T361] EXT4-fs (loop2): 1 truncate cleaned up [ 388.325485][ T357] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 388.329845][ T361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.341762][ T357] EXT4-fs (loop4): This should not happen!! Data will be lost [ 388.341762][ T357] [ 388.364033][ T357] EXT4-fs (loop4): Total free blocks count 0 [ 388.370074][ T357] EXT4-fs (loop4): Free/Dirty block details [ 388.376064][ T357] EXT4-fs (loop4): free_blocks=2415919104 [ 388.381811][ T357] EXT4-fs (loop4): dirty_blocks=64 [ 388.386995][ T357] EXT4-fs (loop4): Block reservation details [ 388.393153][ T357] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 388.444080][T19490] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 388.470626][T30105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.561896][ T388] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.626766][ T388] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.687143][ T388] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.726731][ T388] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.810661][ T426] loop4: detected capacity change from 0 to 512 [ 388.827970][ T426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.863113][ T426] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.896289][T27353] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 388.969571][T32117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.013495][ T450] syz.4.12197[450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.013647][ T450] syz.4.12197[450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.025810][ T450] syz.4.12197[450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.121430][ T388] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.153889][ T388] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.171394][ T388] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.184815][ T388] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.396000][ T490] bond_slave_1: entered promiscuous mode [ 389.411493][ T490] bond_slave_1: left promiscuous mode [ 389.458768][ T498] loop2: detected capacity change from 0 to 2048 [ 389.488833][ T498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.532794][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x1 [ 389.540284][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.547741][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.555247][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.562838][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x2 [ 389.570392][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.577899][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.585407][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.592825][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.600478][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x4 [ 389.607921][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.615407][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.622815][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x2 [ 389.630265][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.637707][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.645156][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.652614][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.660102][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.667559][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.674969][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.682488][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.690021][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.697468][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.704901][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.712464][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.718036][ T517] syzkaller0: entered promiscuous mode [ 389.719953][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.725445][ T517] syzkaller0: entered allmulticast mode [ 389.732819][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.746000][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.753420][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.761041][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.768497][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.776030][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.783490][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.790955][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.798405][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.798860][ T526] blktrace: Concurrent blktraces are not allowed on loop3 [ 389.805912][ T3363] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 389.821643][ T3363] hid-generic 0000:0003:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz0 [ 389.938300][T30105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.007275][T27353] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 390.037931][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 390.037946][ T29] audit: type=1326 audit(2000000192.745:14383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=554 comm="syz.2.12218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c4015d29 code=0x7ffc0000 [ 390.087358][ T29] audit: type=1326 audit(2000000192.775:14384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=554 comm="syz.2.12218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f95c4015d29 code=0x7ffc0000 [ 390.111052][ T29] audit: type=1326 audit(2000000192.775:14385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=554 comm="syz.2.12218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c4015d29 code=0x7ffc0000 [ 390.134742][ T29] audit: type=1326 audit(2000000192.775:14386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=554 comm="syz.2.12218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c4015d29 code=0x7ffc0000 [ 390.273913][ T576] netlink: 'syz.2.12224': attribute type 3 has an invalid length. [ 390.448796][ T603] syz.8.12232[603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.448870][ T603] syz.8.12232[603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.474337][ T603] syz.8.12232[603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.541534][ T29] audit: type=1400 audit(2000000193.245:14387): avc: denied { unmount } for pid=30105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 390.638599][ T29] audit: type=1400 audit(2000000193.335:14388): avc: denied { mount } for pid=616 comm="syz.1.12237" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 390.717367][ T624] syz.8.12242[624] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.785021][ T630] bond_slave_1: entered promiscuous mode [ 390.824619][ T630] bond_slave_1: left promiscuous mode [ 390.830130][ T636] netlink: 'syz.8.12249': attribute type 1 has an invalid length. [ 390.863946][ T638] loop8: detected capacity change from 0 to 2048 [ 390.922872][ T638] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.105268][T30045] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.114479][ T652] loop9: detected capacity change from 0 to 512 [ 391.127958][ T652] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 391.142505][ T652] EXT4-fs (loop9): 1 truncate cleaned up [ 391.148697][T19589] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 391.162457][ T652] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.191071][ T663] rdma_op ffff888104257980 conn xmit_rdma 0000000000000000 [ 391.255188][T24112] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.299847][ T673] loop8: detected capacity change from 0 to 128 [ 391.352091][ T29] audit: type=1400 audit(2000000194.055:14389): avc: denied { ioctl } for pid=676 comm="syz.1.12266" path="socket:[107280]" dev="sockfs" ino=107280 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 391.395127][ T680] loop2: detected capacity change from 0 to 164 [ 391.402209][ T673] syz.8.12265: attempt to access beyond end of device [ 391.402209][ T673] loop8: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 391.419365][ T29] audit: type=1400 audit(2000000194.125:14390): avc: denied { mount } for pid=679 comm="syz.2.12268" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 391.429746][ T680] syz.2.12268: attempt to access beyond end of device [ 391.429746][ T680] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 391.453167][ T673] syz.8.12265: attempt to access beyond end of device [ 391.453167][ T673] loop8: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 391.470299][ T680] syz.2.12268: attempt to access beyond end of device [ 391.470299][ T680] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 391.527859][ T29] audit: type=1400 audit(2000000194.235:14391): avc: denied { unmount } for pid=30105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 391.563944][ T29] audit: type=1400 audit(2000000194.265:14392): avc: denied { read } for pid=690 comm="syz.9.12272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 391.583630][ T689] __nla_validate_parse: 7 callbacks suppressed [ 391.583645][ T689] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12281'. [ 391.624903][ T693] loop2: detected capacity change from 0 to 512 [ 391.644088][ T693] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 391.686018][ T693] EXT4-fs (loop2): 1 truncate cleaned up [ 391.693451][ T693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.744403][ T703] loop4: detected capacity change from 0 to 2048 [ 391.765440][T30105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.786272][ T703] loop4: p1 < > p4 [ 391.790707][ T703] loop4: p4 size 8388608 extends beyond EOD, truncated [ 391.856587][ T711] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=711 comm=syz.4.12280 [ 391.869263][ T711] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=711 comm=syz.4.12280 [ 391.958561][ T720] loop2: detected capacity change from 0 to 512 [ 391.994498][ T722] loop4: detected capacity change from 0 to 2048 [ 392.021945][ T722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.039854][ T720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.053401][ T720] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.088706][ T720] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.12285: corrupted xattr block 33: e_value out of bounds [ 392.105189][ T732] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12287'. [ 392.131517][T32117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.143054][ T720] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 392.158899][ T720] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.12285: corrupted xattr block 33: e_value out of bounds [ 392.173993][ T720] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 392.192476][ T720] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #15: comm syz.2.12285: corrupted xattr block 33: e_value out of bounds [ 392.210553][ T720] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 392.272020][T30105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.298362][T27362] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 392.610243][ T761] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 392.826558][ T771] bpf_get_probe_write_proto: 2 callbacks suppressed [ 392.826574][ T771] syz.2.12305[771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 392.864928][ T771] syz.2.12305[771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 392.930165][ T771] syz.2.12305[771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.223547][ T788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12313'. [ 393.278355][ T790] bond2: entered promiscuous mode [ 393.283624][ T790] bond2: entered allmulticast mode [ 393.293346][ T790] 8021q: adding VLAN 0 to HW filter on device bond2 [ 393.311127][ T790] bond2 (unregistering): Released all slaves [ 393.427215][ T807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12318'. [ 393.444939][ T807] IPVS: Error joining to the multicast group [ 393.466249][T27353] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 393.511143][ T817] netlink: 'syz.9.12325': attribute type 2 has an invalid length. [ 393.519152][ T817] netlink: 40 bytes leftover after parsing attributes in process `syz.9.12325'. [ 393.523630][ T819] rdma_op ffff888133cc7180 conn xmit_rdma 0000000000000000 [ 393.639332][ T829] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12329'. [ 393.689406][ T842] loop2: detected capacity change from 0 to 512 [ 393.701503][ T842] EXT4-fs: dax option not supported [ 393.742881][ T849] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12338'. [ 393.802391][ T859] random: crng reseeded on system resumption [ 393.917431][ T869] loop9: detected capacity change from 0 to 128 [ 393.976250][ T869] syz.9.12347: attempt to access beyond end of device [ 393.976250][ T869] loop9: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 394.007737][ T869] syz.9.12347: attempt to access beyond end of device [ 394.007737][ T869] loop9: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 394.145803][ T894] syz.2.12359[894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.145890][ T894] syz.2.12359[894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.164649][ T897] netlink: 212 bytes leftover after parsing attributes in process `syz.9.12360'. [ 394.175388][ T894] syz.2.12359[894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.351807][ T915] loop4: detected capacity change from 0 to 1024 [ 394.370258][ T915] EXT4-fs: Ignoring removed orlov option [ 394.388563][ T915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.522228][ T919] ================================================================== [ 394.530372][ T919] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 394.538491][ T919] [ 394.540916][ T919] write to 0xffff888142234770 of 8 bytes by task 915 on cpu 0: [ 394.548495][ T919] filemap_splice_read+0x6c4/0x910 [ 394.553666][ T919] ext4_file_splice_read+0x8f/0xb0 [ 394.558815][ T919] splice_direct_to_actor+0x269/0x670 [ 394.564236][ T919] do_splice_direct+0xd7/0x150 [ 394.569038][ T919] do_sendfile+0x398/0x660 [ 394.573478][ T919] __x64_sys_sendfile64+0x110/0x150 [ 394.578738][ T919] x64_sys_call+0xfbd/0x2dc0 [ 394.583366][ T919] do_syscall_64+0xc9/0x1c0 [ 394.587994][ T919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.594000][ T919] [ 394.596340][ T919] write to 0xffff888142234770 of 8 bytes by task 919 on cpu 1: [ 394.603915][ T919] filemap_splice_read+0x6c4/0x910 [ 394.609057][ T919] ext4_file_splice_read+0x8f/0xb0 [ 394.614216][ T919] splice_direct_to_actor+0x269/0x670 [ 394.619629][ T919] do_splice_direct+0xd7/0x150 [ 394.624442][ T919] do_sendfile+0x398/0x660 [ 394.628885][ T919] __x64_sys_sendfile64+0x110/0x150 [ 394.634139][ T919] x64_sys_call+0xfbd/0x2dc0 [ 394.638765][ T919] do_syscall_64+0xc9/0x1c0 [ 394.643474][ T919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.649423][ T919] [ 394.651763][ T919] value changed: 0x000000000000016b -> 0x000000000000016c [ 394.658894][ T919] [ 394.661229][ T919] Reported by Kernel Concurrency Sanitizer on: [ 394.667409][ T919] CPU: 1 UID: 0 PID: 919 Comm: syz.4.12368 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 394.678108][ T919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 394.688195][ T919] ================================================================== [ 394.697136][T27362] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 394.873218][ T915] ================================================================== [ 394.881346][ T915] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 394.888504][ T915] [ 394.890856][ T915] write to 0xffff888138d238a4 of 4 bytes by task 919 on cpu 1: [ 394.898679][ T915] xas_set_mark+0x131/0x150 [ 394.903221][ T915] __folio_start_writeback+0x1e8/0x430 [ 394.908725][ T915] ext4_bio_write_folio+0x591/0x9d0 [ 394.913954][ T915] mpage_process_page_bufs+0x486/0x5d0 [ 394.919446][ T915] mpage_prepare_extent_to_map+0x788/0xb80 [ 394.925285][ T915] ext4_do_writepages+0xa20/0x2130 [ 394.930438][ T915] ext4_writepages+0x159/0x2e0 [ 394.935222][ T915] do_writepages+0x1d8/0x480 [ 394.939844][ T915] file_write_and_wait_range+0x168/0x2f0 [ 394.945504][ T915] generic_buffers_fsync_noflush+0x46/0x120 [ 394.951432][ T915] ext4_sync_file+0x1ff/0x6c0 [ 394.956146][ T915] vfs_fsync_range+0x116/0x130 [ 394.961041][ T915] ext4_buffered_write_iter+0x326/0x370 [ 394.967058][ T915] ext4_file_write_iter+0x383/0xf20 [ 394.972394][ T915] iter_file_splice_write+0x5f1/0x980 [ 394.977791][ T915] direct_splice_actor+0x160/0x2c0 [ 394.982930][ T915] splice_direct_to_actor+0x302/0x670 [ 394.988345][ T915] do_splice_direct+0xd7/0x150 [ 394.993146][ T915] do_sendfile+0x398/0x660 [ 394.997597][ T915] __x64_sys_sendfile64+0x110/0x150 [ 395.002852][ T915] x64_sys_call+0xfbd/0x2dc0 [ 395.007471][ T915] do_syscall_64+0xc9/0x1c0 [ 395.012001][ T915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.017919][ T915] [ 395.020272][ T915] read to 0xffff888138d238a4 of 4 bytes by task 915 on cpu 0: [ 395.027931][ T915] xas_find_marked+0x60a/0x660 [ 395.032734][ T915] find_get_entry+0x54/0x390 [ 395.037364][ T915] filemap_get_folios_tag+0x9e/0x210 [ 395.042688][ T915] mpage_prepare_extent_to_map+0x329/0xb80 [ 395.048664][ T915] ext4_do_writepages+0xa20/0x2130 [ 395.053811][ T915] ext4_writepages+0x159/0x2e0 [ 395.058635][ T915] do_writepages+0x1d8/0x480 [ 395.063374][ T915] file_write_and_wait_range+0x168/0x2f0 [ 395.069042][ T915] generic_buffers_fsync_noflush+0x46/0x120 [ 395.074986][ T915] ext4_sync_file+0x1ff/0x6c0 [ 395.079702][ T915] vfs_fsync_range+0x116/0x130 [ 395.084510][ T915] ext4_buffered_write_iter+0x326/0x370 [ 395.090096][ T915] ext4_file_write_iter+0x383/0xf20 [ 395.095374][ T915] iter_file_splice_write+0x5f1/0x980 [ 395.100774][ T915] direct_splice_actor+0x160/0x2c0 [ 395.105928][ T915] splice_direct_to_actor+0x302/0x670 [ 395.111329][ T915] do_splice_direct+0xd7/0x150 [ 395.116129][ T915] do_sendfile+0x398/0x660 [ 395.121010][ T915] __x64_sys_sendfile64+0x110/0x150 [ 395.126260][ T915] x64_sys_call+0xfbd/0x2dc0 [ 395.130864][ T915] do_syscall_64+0xc9/0x1c0 [ 395.135487][ T915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.141403][ T915] [ 395.143737][ T915] value changed: 0x0a000021 -> 0x04000021 [ 395.149465][ T915] [ 395.151794][ T915] Reported by Kernel Concurrency Sanitizer on: [ 395.157997][ T915] CPU: 0 UID: 0 PID: 915 Comm: syz.4.12368 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 395.168789][ T915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 395.178874][ T915] ================================================================== [ 395.286642][T32117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.085617][T11691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 397.195422][T19490] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 398.315401][T11691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 399.435651][T11691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 400.555506][T19490] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 401.675417][T11695] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 402.775401][T27353] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 403.885457][T19490] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!