last executing test programs: 4m22.235646628s ago: executing program 2 (id=783): creat(&(0x7f0000000880)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@ocfs2={0xc}, 0x0, 0x1200) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=@fuse={0xc, 0x81, {0x503, 0x81, 0xdbd}}, 0x0, 0x200) 4m22.204137968s ago: executing program 2 (id=785): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x1, 0x11082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x2}, 0x490d, 0xfffffffffffff000, 0xfffffbff, 0x3, 0x3, 0x40, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000000000050015"], 0x64}}, 0x20008040) 4m22.151534059s ago: executing program 2 (id=790): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x7fff, 0x0, 0x8000008c1f, 0x800000000, 0x0, 0xbc, 0x400, 0x6, 0x0, 0x0, 0x81, 0x80000000000, 0x7125, 0x1, 0x102, 0x200, 0xfffffffffffffffc, 0x1, 0x3, 0x4, 0x1, 0xffff, 0x0, 0x8, 0x0, 0x80000000000000}) 4m22.0980327s ago: executing program 2 (id=794): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0x2, 0x4) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000), 0x10) 4m22.09106485s ago: executing program 2 (id=798): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 4m22.050716811s ago: executing program 2 (id=801): unshare(0x4000400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000080)={{0x1, @empty, 0x2, 0x43, 'fo\x00', 0x0, 0x0, 0x3a}, {@private=0xa010102, 0x4, 0x0, 0x0, 0x8ba0, 0xdffffffe}}, 0x44) 4m7.028753931s ago: executing program 32 (id=801): unshare(0x4000400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000080)={{0x1, @empty, 0x2, 0x43, 'fo\x00', 0x0, 0x0, 0x3a}, {@private=0xa010102, 0x4, 0x0, 0x0, 0x8ba0, 0xdffffffe}}, 0x44) 3m9.834937475s ago: executing program 0 (id=4971): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 3m9.819505016s ago: executing program 0 (id=4973): setfsuid(0xee00) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001e40)={0x28, 0x140f, 0x1, 0x70bd25, 0x259fdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004849}, 0x4004804) 3m9.790522516s ago: executing program 0 (id=4974): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000110000000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x6000, 0x80, 0x0) 3m9.758635127s ago: executing program 0 (id=4976): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8a}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$cgroup2(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x1840039, &(0x7f0000000d00)={[{}, {}, {@subsystem='net_prio'}, {@subsystem='cpuset'}], [{@uid_gt}, {@measure}, {@context={'context', 0x3d, 'user_u'}}]}) 3m9.60650428s ago: executing program 0 (id=4987): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) 3m9.371504965s ago: executing program 0 (id=4999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x8000) 3m9.354564395s ago: executing program 33 (id=4999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x8000) 49.786611359s ago: executing program 1 (id=12824): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x27, 0x2, 0x1}, 0x6) 49.70782532s ago: executing program 1 (id=12825): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) 49.633733892s ago: executing program 1 (id=12827): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) pwrite64(r0, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31253733", 0x3f, 0x2) 49.633327212s ago: executing program 1 (id=12828): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') 49.584977383s ago: executing program 1 (id=12829): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="580000001400192340024b80040d8c560aff820fffff5bab003a0000002058000b4835ca945f010ebc000000000000008000f0fffeffe809005300fff5dd00000010400100030c100000000000224e0000d9af4c4ccf6c01", 0x58}], 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) 49.286839468s ago: executing program 1 (id=12835): r0 = syz_clone(0x80100, 0x0, 0x62, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) move_pages(r0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x2) 49.286744618s ago: executing program 34 (id=12835): r0 = syz_clone(0x80100, 0x0, 0x62, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) move_pages(r0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x2) 35.536413544s ago: executing program 4 (id=13445): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x88c02, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) write$cgroup_int(r0, 0x0, 0x2) 35.515966294s ago: executing program 4 (id=13447): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 35.498874384s ago: executing program 4 (id=13448): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f00000011c0)='mm_page_free\x00', r1}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) 35.470046255s ago: executing program 4 (id=13451): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x9) 35.452927135s ago: executing program 4 (id=13453): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x89f2, &(0x7f0000000180)) 35.128323041s ago: executing program 4 (id=13469): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = shmget(0x0, 0x1000, 0xa04, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) 35.098998752s ago: executing program 35 (id=13469): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = shmget(0x0, 0x1000, 0xa04, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) 1.982624732s ago: executing program 6 (id=14872): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 1.978224422s ago: executing program 5 (id=14873): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xf1c38fa000000000}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)=@generic={&(0x7f0000002500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x18) 1.932345983s ago: executing program 6 (id=14876): bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b0000"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs$pagemap(0x0, &(0x7f00000008c0)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x201, 0x22, 0x0, 0x42, 0x5c}) 1.932087433s ago: executing program 5 (id=14877): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000380)="76389e147583ddd0569ba56a888e55", 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.866991884s ago: executing program 6 (id=14879): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) io_setup(0x8f0, &(0x7f0000002400)) 1.866869314s ago: executing program 5 (id=14880): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) poll(&(0x7f0000000380)=[{r0, 0x4012}], 0x1, 0xa23) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 1.730374457s ago: executing program 6 (id=14887): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="03bbbbba03000000000000000000ffff"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.570829139s ago: executing program 6 (id=14897): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') fcntl$setlease(r0, 0x400, 0x1) 1.136108868s ago: executing program 3 (id=14930): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) 1.071057709s ago: executing program 3 (id=14932): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xecbd5a155ab96c04}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 956.108261ms ago: executing program 7 (id=14937): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000000)=0x4, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000480)) 955.945021ms ago: executing program 5 (id=14938): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) 923.918712ms ago: executing program 5 (id=14939): openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 907.668882ms ago: executing program 7 (id=14941): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) 835.141214ms ago: executing program 7 (id=14942): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x41889}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 834.996484ms ago: executing program 8 (id=14943): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r0, 0x0, 0x1002}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='environ\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000040)=""/99, 0x63}], 0x1, 0x0, 0x0) 822.798214ms ago: executing program 7 (id=14944): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x11f3, &(0x7f0000003f80)="$eJzs3E+LW1UYB+C3cWrHqfNHrdV2oQfduLo0s3AlSJApyASU2gitINw6NxpyTUJuGIiI1ZVbP4e4dCeIX2A2fgZ3s3HZhXiFpLVNTdUuOpH6PJv7kvf8cu8hEDjhnBy/8c2n/W6VdfNJNE6disYoIt1KkaIRd7y0P79eu77farf3rqR0uXW1+XpKaevlHz/4/LtXfpqcff/7rR/OxNHOh8e/7v5ydP7owvHvVz/pValXpcFwkvJ0Yzic5DfKIh30qn6W0rtlkVdF6g2qYrzQ75bD0Wia8sHB5sZoXFRVygfT1C+maTJMk/E05R/nvUHKsixtbgQPdPqfh3S+vVXXdURdn44no67r+qnYiLPxdGzGVnwZEc/Es/FcnIvn43y8EC/Ghdmok3h8AAAAAAAAAAAAAAAAAAAA+P/4u/P/27Hj/D8AAAAAAAAAAAAAAAAAAACcgPeuXd9vtdt7V1Jajyi/PuwcdubXeb/VjV6UUcSl2I7fYnb6f25eX367vXcpzezEV+XN2/mbh50nFvPN2d8J3M6vzXp38s15Pi3mz8TGvfnd2I5zy++/uzS/Hq+9ek8+i+34+aMYRhkHs3vfzX/RTOmtd9r35S/OxgEAAMDjIEt/Wrp+z7IH9ef5h/h94L719VpcXFvt3Imopp/187IsxovF+l9eUfz7ovGI3rkR/5EJKh7/YtXfTJyEux/6qp8EAAAAAAAAAACAh/GIdxGuxZKdZW+uZqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD//99CzUo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2000, 0x1) mkdirat(r0, &(0x7f0000000300)='./bus\x00', 0x0) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 818.242464ms ago: executing program 8 (id=14945): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x0, 0x12d5f, 0x3}}, 0x44) 744.622836ms ago: executing program 8 (id=14946): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000030000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128009000100626f6e640000000010000280080007000e000000040008"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 727.707976ms ago: executing program 8 (id=14947): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) process_vm_readv(0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/10, 0xa}], 0x1, &(0x7f0000000780)=[{0xffffffffffffffff, 0xfffffe46}, {&(0x7f0000000200)=""/164, 0xa4}, {&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000380)=""/135, 0x87}, {&(0x7f0000000080)=""/99, 0x63}, {&(0x7f00000006c0)=""/136, 0x88}], 0x6, 0x0) 693.769547ms ago: executing program 8 (id=14948): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) 663.638757ms ago: executing program 6 (id=14949): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 518.22117ms ago: executing program 7 (id=14950): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001090000000000000002000100000000008000070c0000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) 403.129762ms ago: executing program 7 (id=14951): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f000040f000/0x1000)=nil, 0x1000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 339.178953ms ago: executing program 8 (id=14952): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x976, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 105.176248ms ago: executing program 3 (id=14953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 16.94537ms ago: executing program 3 (id=14954): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/67, 0x43}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f000001b700)=""/4096, 0x1000}, {&(0x7f0000002100)=""/55, 0x37}, {&(0x7f000001c780)=""/67, 0x43}], 0x5}, 0x40000100) 16.72556ms ago: executing program 3 (id=14955): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0xc, 0x0, 0x0) 16.56224ms ago: executing program 3 (id=14956): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2010800, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 0s ago: executing program 5 (id=14957): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8 [ 274.016924][T18166] tipc: Left network mode [ 274.058604][ T892] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.065876][ T892] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.073820][ T892] bridge_slave_0: entered allmulticast mode [ 274.080804][ T892] bridge_slave_0: entered promiscuous mode [ 274.089255][T18166] hsr_slave_0: left promiscuous mode [ 274.096731][T18166] hsr_slave_1: left promiscuous mode [ 274.102298][T18166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.110247][T18166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.119032][T18166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.127994][T18166] veth1_macvtap: left promiscuous mode [ 274.133477][T18166] veth0_macvtap: left promiscuous mode [ 274.139825][T18166] veth1_vlan: left promiscuous mode [ 274.145131][T18166] veth0_vlan: left promiscuous mode [ 274.211187][T18166] team0 (unregistering): Port device team_slave_1 removed [ 274.222369][T18166] team0 (unregistering): Port device C removed [ 274.235548][T18192] smc: removing ib device syz0 [ 274.256069][ T892] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.263177][ T892] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.271079][ T892] bridge_slave_1: entered allmulticast mode [ 274.277601][ T892] bridge_slave_1: entered promiscuous mode [ 274.306311][ T892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.317966][ T892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.384239][ T892] team0: Port device team_slave_0 added [ 274.422500][ T892] team0: Port device team_slave_1 added [ 274.479143][ T892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.486729][ T892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.512662][ T892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.545852][T18166] IPVS: stop unused estimator thread 0... [ 274.559325][ T892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.566422][ T892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.593010][ T892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.713054][ T892] hsr_slave_0: entered promiscuous mode [ 274.726002][ T892] hsr_slave_1: entered promiscuous mode [ 274.731865][ T892] debugfs: 'hsr0' already exists in 'hsr' [ 274.737664][ T892] Cannot create hsr debugfs directory [ 274.896424][ T892] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 274.911684][ T892] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 274.942107][ T892] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 274.963002][ T892] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 274.995126][ T981] loop6: detected capacity change from 0 to 8192 [ 275.015807][ T1008] loop5: detected capacity change from 0 to 512 [ 275.025281][ T1008] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 275.061535][ T1008] EXT4-fs (loop5): 1 truncate cleaned up [ 275.068515][ T1008] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.087302][ T892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.099553][ T892] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.111733][T18153] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.118862][T18153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.131356][ T1016] loop6: detected capacity change from 0 to 512 [ 275.142636][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 275.142651][ T29] audit: type=1400 audit(524.945:3806): avc: denied { append } for pid=1007 comm="syz.5.13496" path="/2316/bus/blkio.bfq.avg_queue_size" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 275.143348][ T1008] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.13496: bg 0: block 256: padding at end of block bitmap is not set [ 275.184550][ T892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 275.198273][ T892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.222396][ T1016] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.240715][T18151] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.247840][T18151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.259827][ T1008] EXT4-fs (loop5): Remounting filesystem read-only [ 275.267234][ T29] audit: type=1400 audit(525.065:3807): avc: denied { egress } for pid=36 comm="kworker/1:1" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 275.288975][ T29] audit: type=1400 audit(525.065:3808): avc: denied { sendto } for pid=36 comm="kworker/1:1" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 275.318680][ T29] audit: type=1400 audit(525.083:3809): avc: denied { map } for pid=1013 comm="syz.6.13497" path="/1655/file0/cgroup.controllers" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 275.342781][ T29] audit: type=1400 audit(525.083:3810): avc: denied { write } for pid=1013 comm="syz.6.13497" path="/1655/file0/cgroup.controllers" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 275.366257][ T29] audit: type=1400 audit(525.102:3811): avc: denied { ioctl } for pid=1007 comm="syz.5.13496" path="/2316/bus/blkio.bfq.avg_queue_size" dev="loop5" ino=18 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 275.413189][T14318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.424093][ T6734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.445403][ T892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.588011][ T29] audit: type=1400 audit(525.351:3812): avc: denied { ioctl } for pid=1070 comm="syz.5.13506" path="socket:[100163]" dev="sockfs" ino=100163 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 275.673416][ T892] veth0_vlan: entered promiscuous mode [ 275.686006][ T892] veth1_vlan: entered promiscuous mode [ 275.726945][ T1091] loop3: detected capacity change from 0 to 128 [ 275.727742][ T892] veth0_macvtap: entered promiscuous mode [ 275.749244][ T892] veth1_macvtap: entered promiscuous mode [ 275.767686][ T892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.779259][ T892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.790994][ T3424] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.815669][ T3424] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.832616][ T29] audit: type=1400 audit(525.582:3813): avc: denied { mounton } for pid=892 comm="syz-executor" path="/root/syzkaller.aXdz67/syz-tmp" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 275.850964][ T3424] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.857405][ T29] audit: type=1400 audit(525.582:3814): avc: denied { mount } for pid=892 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 275.869575][ T3424] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.886568][ T29] audit: type=1400 audit(525.582:3815): avc: denied { mount } for pid=892 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 276.137989][ T1150] smc: net device bond0 applied user defined pnetid SYZ0 [ 276.172558][ T1150] smc: net device wg2 erased user defined pnetid SYZ2 [ 276.180257][ T1150] smc: net device bond0 erased user defined pnetid SYZ0 [ 276.194951][ T1156] loop8: detected capacity change from 0 to 2048 [ 276.222094][ T1156] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 276.241444][ T1166] __nla_validate_parse: 10 callbacks suppressed [ 276.241466][ T1166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13527'. [ 276.255008][ T1156] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 276.273668][ T1156] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 101 with error 28 [ 276.286083][ T1156] EXT4-fs (loop8): This should not happen!! Data will be lost [ 276.286083][ T1156] [ 276.295791][ T1156] EXT4-fs (loop8): Total free blocks count 0 [ 276.301780][ T1156] EXT4-fs (loop8): Free/Dirty block details [ 276.308466][ T1156] EXT4-fs (loop8): free_blocks=2415919104 [ 276.314221][ T1156] EXT4-fs (loop8): dirty_blocks=112 [ 276.319625][ T1156] EXT4-fs (loop8): Block reservation details [ 276.325646][ T1156] EXT4-fs (loop8): i_reserved_data_blocks=7 [ 276.364801][ T892] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 276.406301][ T1180] loop5: detected capacity change from 0 to 512 [ 276.412971][ T1180] EXT4-fs: Ignoring removed nobh option [ 276.429439][ T1180] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.13530: corrupted inode contents [ 276.449230][ T1180] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.13530: mark_inode_dirty error [ 276.485924][ T1192] SELinux: policydb version 0 does not match my version range 15-35 [ 276.496496][ T1192] SELinux: failed to load policy [ 276.503991][ T1180] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.13530: corrupted inode contents [ 276.511537][ T1194] netlink: 'syz.8.13534': attribute type 8 has an invalid length. [ 276.524433][ T1194] netem: change failed [ 276.533941][ T1180] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.13530: mark_inode_dirty error [ 276.563543][ T1180] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.13530: Failed to acquire dquot type 0 [ 276.588344][ T1204] netlink: 332 bytes leftover after parsing attributes in process `syz.3.13539'. [ 276.598566][ T1204] netlink: 'syz.3.13539': attribute type 9 has an invalid length. [ 276.599792][ T1180] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.13530: corrupted inode contents [ 276.606413][ T1204] netlink: 108 bytes leftover after parsing attributes in process `syz.3.13539'. [ 276.606433][ T1204] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13539'. [ 276.641274][ T1180] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.13530: mark_inode_dirty error [ 276.663899][ T1180] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.13530: corrupted inode contents [ 276.676967][ T1180] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.13530: mark_inode_dirty error [ 276.690924][ T1180] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.13530: corrupted inode contents [ 276.707151][ T1180] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 276.716059][ T1180] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.13530: corrupted inode contents [ 276.729238][ T1180] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.13530: mark_inode_dirty error [ 276.742361][ T1180] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 276.751704][ T1180] EXT4-fs (loop5): 1 truncate cleaned up [ 276.757817][ T1180] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.794167][ T6734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.815456][ T1222] tap0: tun_chr_ioctl cmd 1074025677 [ 276.820951][ T1222] tap0: linktype set to 822 [ 276.941323][ T1245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13559'. [ 276.954817][ T1245] ip_vti0: Master is either lo or non-ether device [ 277.266312][ T1294] loop6: detected capacity change from 0 to 512 [ 277.467428][ T1318] loop6: detected capacity change from 0 to 256 [ 277.480159][ T1318] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 277.488151][ T1318] FAT-fs (loop6): Filesystem has been set read-only [ 277.500734][ T1320] IPv6: Can't replace route, no match found [ 277.661596][ T1351] loop5: detected capacity change from 0 to 164 [ 277.670792][ T1352] loop3: detected capacity change from 0 to 128 [ 277.716539][ T1360] netlink: 'syz.6.13606': attribute type 2 has an invalid length. [ 277.841666][ T1373] loop3: detected capacity change from 0 to 1024 [ 277.866131][ T1373] EXT4-fs: Ignoring removed orlov option [ 277.896665][ T1373] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 277.968167][ T1383] loop3: detected capacity change from 0 to 256 [ 277.988406][ T1387] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13619'. [ 278.073291][ T1397] loop6: detected capacity change from 0 to 512 [ 278.095039][ T1397] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 278.115063][ T1397] EXT4-fs (loop6): orphan cleanup on readonly fs [ 278.145246][ T1397] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.13624: iget: bad i_size value: 360287970189639680 [ 278.161079][ T1397] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.13624: couldn't read orphan inode 15 (err -117) [ 278.285095][ T1421] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 278.291653][ T1421] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 278.300020][ T1421] vhci_hcd vhci_hcd.0: Device attached [ 278.309279][ T1425] vhci_hcd: connection closed [ 278.309412][T18166] vhci_hcd: stop threads [ 278.318359][T18166] vhci_hcd: release socket [ 278.323525][T18166] vhci_hcd: disconnect device [ 278.346078][ T1432] loop6: detected capacity change from 0 to 512 [ 278.355047][ T1432] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 278.394305][ T1432] EXT4-fs (loop6): failed to open journal device unknown-block(0,4) -6 [ 278.476991][ T1442] loop7: detected capacity change from 0 to 512 [ 278.494966][ T1442] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 278.503029][ T1442] System zones: 0-2, 18-18, 34-35 [ 278.575167][ T1454] loop7: detected capacity change from 0 to 512 [ 279.372631][ T1509] loop3: detected capacity change from 0 to 512 [ 279.385713][ T1509] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.13669: corrupted inode contents [ 279.398976][ T1509] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #4: comm syz.3.13669: mark_inode_dirty error [ 279.410954][ T1509] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.13669: corrupted inode contents [ 279.425657][ T1509] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.13669: mark_inode_dirty error [ 279.438719][ T1509] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.13669: Failed to acquire dquot type 1 [ 279.449244][ T1516] msdos: Unknown parameter 'ÿ' [ 279.465078][ T1519] netlink: 'syz.6.13672': attribute type 58 has an invalid length. [ 279.470140][ T1517] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.13669: corrupted inode contents [ 279.473079][ T1519] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13672'. [ 279.487575][ T1517] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #4: comm syz.3.13669: mark_inode_dirty error [ 279.517938][ T1517] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.13669: corrupted inode contents [ 279.530017][ T1517] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.13669: mark_inode_dirty error [ 279.541846][ T1517] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.13669: Failed to acquire dquot type 1 [ 279.687295][ T2957] IPVS: starting estimator thread 0... [ 279.719816][ T1561] loop8: detected capacity change from 0 to 512 [ 279.731723][ T1561] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.13687: corrupted in-inode xattr: invalid ea_ino [ 279.752341][ T1561] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.13687: couldn't read orphan inode 15 (err -117) [ 279.782255][ T1552] IPVS: using max 2208 ests per chain, 110400 per kthread [ 279.842415][ T1579] loop6: detected capacity change from 0 to 1024 [ 279.951185][ T1603] vhci_hcd: invalid port number 255 [ 279.956582][ T1603] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 280.124441][ T1627] loop5: detected capacity change from 0 to 512 [ 280.131243][ T1623] vhci_hcd: invalid port number 96 [ 280.136411][ T1623] vhci_hcd: default hub control req: 0300 v0800 i0060 l0 [ 280.145500][ T1627] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 280.156962][ T1627] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.13718: bg 0: block 104: invalid block bitmap [ 280.183900][ T1627] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 280.194396][ T1627] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.13718: invalid indirect mapped block 1 (level 1) [ 280.212675][ T1627] EXT4-fs (loop5): 1 truncate cleaned up [ 280.246843][ T1639] tipc: Started in network mode [ 280.251833][ T1639] tipc: Node identity ac141413, cluster identity 4711 [ 280.259060][ T1639] tipc: Enabling of bearer rejected, failed to enable media [ 280.381851][ T1657] loop7: detected capacity change from 0 to 128 [ 280.582517][ T1681] loop3: detected capacity change from 0 to 512 [ 280.598597][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 280.598614][ T29] audit: type=1400 audit(529.985:3981): avc: denied { setopt } for pid=1682 comm="syz.7.13744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.637813][ T1681] EXT4-fs (loop3): shut down requested (0) [ 280.646376][ T1681] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 280.657072][ T1681] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 280.667809][ T1681] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 280.678081][ T1681] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 280.687456][ T1681] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 280.718587][ T1681] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 280.729784][ T29] audit: type=1400 audit(530.105:3982): avc: denied { remove_name } for pid=1680 comm="syz.3.13743" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 280.752651][ T29] audit: type=1400 audit(530.105:3983): avc: denied { rename } for pid=1680 comm="syz.3.13743" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 280.775007][ T29] audit: type=1400 audit(530.105:3984): avc: denied { add_name } for pid=1680 comm="syz.3.13743" name="file3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 280.799636][ T29] audit: type=1400 audit(530.169:3985): avc: denied { create } for pid=1672 comm="syz.6.13739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 280.904737][ T1707] loop7: detected capacity change from 0 to 128 [ 281.002484][ T29] audit: type=1400 audit(530.354:3986): avc: denied { create } for pid=1716 comm="syz.8.13758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 281.040568][ T29] audit: type=1400 audit(530.381:3987): avc: denied { ioctl } for pid=1716 comm="syz.8.13758" path="socket:[102684]" dev="sockfs" ino=102684 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 281.128539][ T1725] netlink: 180 bytes leftover after parsing attributes in process `syz.8.13761'. [ 281.144134][ T1727] loop7: detected capacity change from 0 to 512 [ 281.152055][ T1727] journal_path: Lookup failure for './file0/../file0' [ 281.159682][ T1727] EXT4-fs: error: could not find journal device path [ 281.214488][ T29] audit: type=1400 audit(530.557:3988): avc: denied { mount } for pid=1732 comm="syz.7.13765" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 281.240967][ T29] audit: type=1400 audit(530.575:3989): avc: denied { watch_reads } for pid=1734 comm="syz.7.13766" path="/143" dev="tmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 281.292883][ T29] audit: type=1326 audit(530.621:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1741 comm="syz.3.13769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41b02eec9 code=0x7ffc0000 [ 281.369508][ T1752] loop8: detected capacity change from 0 to 512 [ 281.380518][ T1752] FAT-fs (loop8): error, clusters badly computed (1 != 0) [ 281.381269][ T1744] loop7: detected capacity change from 0 to 8192 [ 281.413394][ T1756] netlink: 'syz.3.13776': attribute type 1 has an invalid length. [ 281.540991][ T1780] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13786'. [ 281.608374][ T1790] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13791'. [ 281.621387][ T1790] team0: entered promiscuous mode [ 281.626569][ T1790] team_slave_0: entered promiscuous mode [ 281.632392][ T1790] team_slave_1: entered promiscuous mode [ 281.641910][ T1790] gretap0: entered promiscuous mode [ 281.742739][ T1800] loop5: detected capacity change from 0 to 2048 [ 281.757526][ T1800] EXT4-fs (loop5): shut down requested (2) [ 281.889618][ T1792] loop8: detected capacity change from 0 to 32768 [ 281.905787][ T1818] loop7: detected capacity change from 0 to 7 [ 281.912142][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.921332][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 281.930036][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.939220][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 281.947271][ T1818] loop7: unable to read partition table [ 281.953265][ T1818] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 282.024895][ T1824] Invalid logical block size (6) [ 282.034988][ T1830] loop8: detected capacity change from 0 to 512 [ 282.252811][ T1857] pim6reg: tun_chr_ioctl cmd 2147767507 [ 282.266787][ T1859] loop6: detected capacity change from 0 to 512 [ 282.920340][ T1910] loop8: detected capacity change from 0 to 128 [ 282.928404][ T1910] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 282.938043][ T1910] System zones: 1-3, 19-19, 35-36 [ 282.983244][ T1910] EXT4-fs warning (device loop8): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 283.206758][ T1936] __nla_validate_parse: 1 callbacks suppressed [ 283.206776][ T1936] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13855'. [ 283.222046][ T1936] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13855'. [ 283.240539][ T1936] team0: entered promiscuous mode [ 283.245681][ T1936] team_slave_0: entered promiscuous mode [ 283.251401][ T1936] team_slave_1: entered promiscuous mode [ 283.263886][ T1936] gretap0: entered promiscuous mode [ 283.271207][ T1936] debugfs: 'hsr1' already exists in 'hsr' [ 283.276967][ T1936] Cannot create hsr debugfs directory [ 283.317668][ T1943] loop5: detected capacity change from 0 to 2048 [ 283.765967][ T1989] loop5: detected capacity change from 0 to 128 [ 283.859581][ T1989] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 283.888077][ T1989] System zones: 1-3, 19-19, 35-36 [ 283.910848][ T1989] EXT4-fs warning (device loop5): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 283.926146][ T1994] loop7: detected capacity change from 0 to 512 [ 284.040384][ T1994] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 284.087790][ T2001] xfrm0: entered allmulticast mode [ 284.515847][ T2019] 9pnet: Could not find request transport: t [ 284.641441][ T2038] syz.5.13900 (2038): attempted to duplicate a private mapping with mremap. This is not supported. [ 284.919411][ T2073] can0: slcan on ttyS3. [ 284.941744][ T2075] loop8: detected capacity change from 0 to 128 [ 284.949098][ T2075] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 284.963099][ T2075] EXT4-fs error (device loop8): htree_dirblock_to_tree:1051: inode #2: comm syz.8.13918: Directory block failed checksum [ 284.982693][ T2073] can0 (unregistered): slcan off ttyS3. [ 285.326300][ T2117] loop3: detected capacity change from 0 to 764 [ 285.359859][ T2123] netlink: 104 bytes leftover after parsing attributes in process `syz.6.13941'. [ 285.519561][ T2134] loop6: detected capacity change from 0 to 512 [ 285.533413][ T2136] 9p: Unknown access argument ¿: -22 [ 285.797612][ T2154] can0: slcan on ttyS3. [ 285.877129][ T2154] can0 (unregistered): slcan off ttyS3. [ 285.954740][ T2158] loop5: detected capacity change from 0 to 1024 [ 286.001401][ T2158] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 286.044273][ T2158] EXT4-fs (loop5): Remounting filesystem read-only [ 286.051077][ T3424] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 286.154599][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 286.154613][ T29] audit: type=1400 audit(535.116:4077): avc: denied { read write } for pid=2170 comm="syz.3.13961" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 286.183694][ T29] audit: type=1400 audit(535.116:4078): avc: denied { open } for pid=2170 comm="syz.3.13961" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 286.594109][ T2194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13971'. [ 286.665694][ T2200] rtc_cmos 00:00: Alarms can be up to one day in the future [ 286.685041][ T29] audit: type=1400 audit(535.596:4079): avc: denied { create } for pid=2201 comm="syz.8.13975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 286.704772][ T29] audit: type=1400 audit(535.596:4080): avc: denied { bind } for pid=2201 comm="syz.8.13975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 286.760883][ T2206] loop3: detected capacity change from 0 to 512 [ 286.805776][ T2206] EXT4-fs mount: 34 callbacks suppressed [ 286.805790][ T2206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.903263][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.915884][ T29] audit: type=1326 audit(535.818:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2217 comm="syz.8.13982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4149eec9 code=0x7ffc0000 [ 286.939484][ T29] audit: type=1326 audit(535.818:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2217 comm="syz.8.13982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4149eec9 code=0x7ffc0000 [ 287.017273][ T29] audit: type=1400 audit(535.864:4083): avc: denied { ioctl } for pid=2219 comm="syz.5.13983" path="socket:[103946]" dev="sockfs" ino=103946 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 287.042304][ T29] audit: type=1326 audit(535.864:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2217 comm="syz.8.13982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda4149eec9 code=0x7ffc0000 [ 287.065452][ T29] audit: type=1326 audit(535.864:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2217 comm="syz.8.13982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4149eec9 code=0x7ffc0000 [ 287.089108][ T29] audit: type=1326 audit(535.864:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2217 comm="syz.8.13982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4149eec9 code=0x7ffc0000 [ 287.120864][ T2230] netlink: 830 bytes leftover after parsing attributes in process `syz.8.13988'. [ 287.304684][ T2264] loop6: detected capacity change from 0 to 512 [ 287.311235][ T2264] EXT4-fs: Ignoring removed oldalloc option [ 287.328584][ T2267] netlink: 'syz.8.14006': attribute type 4 has an invalid length. [ 287.374381][ T2264] EXT4-fs (loop6): 1 truncate cleaned up [ 287.418942][ T2264] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.498589][ T2280] netlink: 'syz.8.14012': attribute type 21 has an invalid length. [ 287.516097][ T2280] netlink: 132 bytes leftover after parsing attributes in process `syz.8.14012'. [ 287.525965][ T2280] netlink: 'syz.8.14012': attribute type 1 has an invalid length. [ 287.535243][T14318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.594622][ T2294] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14019'. [ 287.603623][ T2294] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14019'. [ 287.757642][ T2321] loop6: detected capacity change from 0 to 1024 [ 287.786166][ T2321] EXT4-fs: Ignoring removed orlov option [ 287.792048][ T2321] EXT4-fs: Ignoring removed nomblk_io_submit option [ 287.815827][ T2325] loop8: detected capacity change from 0 to 128 [ 287.835133][ T2321] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.853239][ T2321] EXT4-fs (loop6): shut down requested (1) [ 287.925147][T14318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.091553][ T2373] loop3: detected capacity change from 0 to 1024 [ 288.101025][ T2373] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 288.111176][ T2373] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 288.121629][ T2374] SELinux: Context system_u:object_r:tun_tap_device_t:s0 is not valid (left unmapped). [ 288.122130][ T2373] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 288.145197][ T2373] JBD2: no valid journal superblock found [ 288.151034][ T2373] EXT4-fs (loop3): Could not load journal inode [ 288.247354][ T2390] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14064'. [ 288.256809][ T2390] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14064'. [ 288.257141][ T2392] SELinux: policydb version 0 does not match my version range 15-35 [ 288.276450][ T2392] SELinux: failed to load policy [ 288.376232][ T2410] loop8: detected capacity change from 0 to 1024 [ 288.389752][ T2410] EXT4-fs: inline encryption not supported [ 288.395847][ T2410] EXT4-fs: Ignoring removed bh option [ 288.403808][ T2414] 9pnet_fd: Insufficient options for proto=fd [ 288.420510][ T2410] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.447992][ T2410] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 288.463211][ T2410] EXT4-fs (loop8): Remounting filesystem read-only [ 288.509780][ T892] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.579039][ T2439] loop8: detected capacity change from 0 to 128 [ 288.627706][ T2443] loop3: detected capacity change from 0 to 1024 [ 288.647216][ T2443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 288.672680][ T2445] SELinux: failed to load policy [ 288.679206][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 288.835461][ T2471] loop3: detected capacity change from 0 to 128 [ 288.988323][ T2481] SELinux: failed to load policy [ 289.039526][ T2492] __nla_validate_parse: 6 callbacks suppressed [ 289.039539][ T2492] netlink: 165 bytes leftover after parsing attributes in process `syz.7.14106'. [ 289.148201][ T2505] loop3: detected capacity change from 0 to 128 [ 289.159830][ T2507] loop7: detected capacity change from 0 to 256 [ 289.176754][ T2505] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 289.184611][ T2505] FAT-fs (loop3): Filesystem has been set read-only [ 289.200345][ T2507] FAT-fs (loop7): Directory bread(block 64) failed [ 289.207110][ T2505] syz.3.14114: attempt to access beyond end of device [ 289.207110][ T2505] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 289.221597][ T2507] FAT-fs (loop7): Directory bread(block 65) failed [ 289.229601][ T2507] FAT-fs (loop7): Directory bread(block 66) failed [ 289.236239][ T2507] FAT-fs (loop7): Directory bread(block 67) failed [ 289.244026][ T2505] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 289.252536][ T2505] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 289.260849][ T2507] FAT-fs (loop7): Directory bread(block 68) failed [ 289.269935][ T2505] syz.3.14114: attempt to access beyond end of device [ 289.269935][ T2505] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 289.286168][ T2512] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 289.288045][ T2507] FAT-fs (loop7): Directory bread(block 69) failed [ 289.300801][ T2507] FAT-fs (loop7): Directory bread(block 70) failed [ 289.310333][ T2507] FAT-fs (loop7): Directory bread(block 71) failed [ 289.314116][ T2512] syz.3.14114: attempt to access beyond end of device [ 289.314116][ T2512] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 289.319059][ T2507] FAT-fs (loop7): Directory bread(block 72) failed [ 289.346212][ T2505] syz.3.14114: attempt to access beyond end of device [ 289.346212][ T2505] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 289.350420][ T2512] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 289.367430][ T2512] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 289.376094][ T2507] FAT-fs (loop7): Directory bread(block 73) failed [ 289.392643][ T2505] syz.3.14114: attempt to access beyond end of device [ 289.392643][ T2505] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 289.419165][ T2520] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14120'. [ 289.433479][ T2512] syz.3.14114: attempt to access beyond end of device [ 289.433479][ T2512] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 289.467038][ T2505] syz.3.14114: attempt to access beyond end of device [ 289.467038][ T2505] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 289.480546][ T2512] syz.3.14114: attempt to access beyond end of device [ 289.480546][ T2512] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 289.529822][ T2512] syz.3.14114: attempt to access beyond end of device [ 289.529822][ T2512] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 289.578535][ T2512] syz.3.14114: attempt to access beyond end of device [ 289.578535][ T2512] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 289.592745][ T2528] netlink: 64 bytes leftover after parsing attributes in process `syz.7.14125'. [ 289.692261][ T2537] loop5: detected capacity change from 0 to 512 [ 289.730385][ T2537] EXT4-fs: Ignoring removed bh option [ 289.757957][ T2542] loop6: detected capacity change from 0 to 164 [ 289.757982][ T2537] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 289.895760][ T2537] EXT4-fs (loop5): 1 truncate cleaned up [ 289.915968][ T2557] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14138'. [ 289.929952][ T2537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.036052][ T2565] loop8: detected capacity change from 0 to 512 [ 290.081230][ T2565] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 290.100588][ T6734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.152139][ T2565] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.14142: bg 0: block 104: invalid block bitmap [ 290.165018][ T2565] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 290.175671][ T2565] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.14142: invalid indirect mapped block 1 (level 1) [ 290.196976][ T2565] EXT4-fs (loop8): 1 truncate cleaned up [ 290.206017][ T2565] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.288824][ T892] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.331144][ T2600] loop8: detected capacity change from 0 to 2048 [ 290.339627][ T2600] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 290.572168][ T2644] loop3: detected capacity change from 0 to 512 [ 290.584181][ T2644] EXT4-fs (loop3): orphan cleanup on readonly fs [ 290.590576][ T2644] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 290.611663][ T2644] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 290.632177][ T2644] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.14175: attempt to clear invalid blocks 2 len 1 [ 290.632811][ T2651] netlink: 'syz.8.14178': attribute type 4 has an invalid length. [ 290.663505][ T2644] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.14175: invalid indirect mapped block 1819239214 (level 0) [ 290.679352][ T2644] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.14175: invalid indirect mapped block 1819239214 (level 1) [ 290.696097][ T2644] EXT4-fs (loop3): 1 truncate cleaned up [ 290.702119][ T2644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 290.731707][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.752355][ T2661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14183'. [ 290.867305][ T2669] loop8: detected capacity change from 0 to 256 [ 290.941227][ T2673] loop8: detected capacity change from 0 to 8192 [ 290.995511][ T2673] loop8: p1 p2 p4 [ 291.000548][ T2673] loop8: p1 start 4294508288 is beyond EOD, truncated [ 291.007433][ T2673] loop8: p2 start 2936012800 is beyond EOD, truncated [ 291.014215][ T2673] loop8: p4 size 656640 extends beyond EOD, truncated [ 291.231153][ T2694] sctp: [Deprecated]: syz.5.14196 (pid 2694) Use of int in max_burst socket option deprecated. [ 291.231153][ T2694] Use struct sctp_assoc_value instead [ 291.360988][ T2698] netlink: 64 bytes leftover after parsing attributes in process `syz.5.14198'. [ 291.689145][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 291.689161][ T29] audit: type=1400 audit(540.221:4242): avc: denied { append } for pid=2705 comm="syz.7.14202" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 291.760737][ T29] audit: type=1400 audit(540.285:4243): avc: denied { read } for pid=2708 comm="syz.7.14204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 291.892807][ T29] audit: type=1400 audit(540.405:4244): avc: denied { execute } for pid=2716 comm="syz.5.14208" name="file1" dev="tmpfs" ino=12589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 291.949710][ T29] audit: type=1400 audit(540.405:4245): avc: denied { execute_no_trans } for pid=2716 comm="syz.5.14208" path="/2456/file1" dev="tmpfs" ino=12589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 291.977350][ T29] audit: type=1400 audit(540.488:4246): avc: denied { bind } for pid=2720 comm="syz.5.14209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 292.063425][ T29] audit: type=1400 audit(540.562:4247): avc: denied { module_load } for pid=2727 comm="syz.3.14212" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 292.102334][ T2732] loop8: detected capacity change from 0 to 128 [ 292.113237][ T2732] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 292.147723][ T29] audit: type=1400 audit(540.645:4248): avc: denied { create } for pid=2731 comm="syz.8.14214" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 292.181387][ T892] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 292.191235][ T29] audit: type=1400 audit(540.645:4249): avc: denied { setattr } for pid=2731 comm="syz.8.14214" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 292.233622][ T29] audit: type=1400 audit(540.728:4250): avc: denied { read } for pid=2737 comm="syz.6.14217" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 292.257101][ T29] audit: type=1400 audit(540.728:4251): avc: denied { open } for pid=2737 comm="syz.6.14217" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 292.553234][ T2763] team0: Port device dummy0 removed [ 292.576913][ T2763] bridge_slave_0: left allmulticast mode [ 292.583433][ T2763] bridge_slave_0: left promiscuous mode [ 292.589257][ T2763] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.599413][ T2763] bridge_slave_1: left allmulticast mode [ 292.604534][ T2767] rdma_rxe: rxe_newlink: failed to add lo [ 292.605161][ T2763] bridge_slave_1: left promiscuous mode [ 292.617304][ T2763] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.633266][ T2763] bond0: (slave bond_slave_0): Releasing backup interface [ 292.651809][ T2763] bond0: (slave bond_slave_1): Releasing backup interface [ 292.678407][ T2763] team0: Port device team_slave_0 removed [ 292.699909][ T2763] team0: Port device team_slave_1 removed [ 292.709886][ T2763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.717280][ T2763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.726874][ T2763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.734336][ T2763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.988623][ T2802] loop5: detected capacity change from 0 to 1024 [ 293.003418][ T2802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.033787][ T2802] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 293.050149][ T2802] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 3 with error 28 [ 293.063211][ T2802] EXT4-fs (loop5): This should not happen!! Data will be lost [ 293.063211][ T2802] [ 293.072891][ T2802] EXT4-fs (loop5): Total free blocks count 0 [ 293.078977][ T2802] EXT4-fs (loop5): Free/Dirty block details [ 293.084928][ T2802] EXT4-fs (loop5): free_blocks=4293918720 [ 293.091325][ T2802] EXT4-fs (loop5): dirty_blocks=0 [ 293.096415][ T2802] EXT4-fs (loop5): Block reservation details [ 293.102472][ T2802] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 293.121785][ T6734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.155027][ T2811] bridge0: port 3(eth2) entered blocking state [ 293.161246][ T2811] bridge0: port 3(eth2) entered disabled state [ 293.171545][ T2811] netdevsim netdevsim2 eth2: entered allmulticast mode [ 293.179870][ T2811] netdevsim netdevsim2 eth2: entered promiscuous mode [ 293.272020][ T2819] netlink: 48 bytes leftover after parsing attributes in process `syz.6.14255'. [ 293.322237][ T2823] loop6: detected capacity change from 0 to 128 [ 293.336733][ T2823] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 293.344606][ T2823] FAT-fs (loop6): Filesystem has been set read-only [ 293.352436][ T2823] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 293.360294][ T2823] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 293.398036][ T2828] loop5: detected capacity change from 0 to 512 [ 293.476023][ T2834] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 293.483267][ T2834] syzkaller1: linktype set to 0 [ 293.493543][ T2828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.533035][ T6734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.703308][ T2843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14264'. [ 293.747932][ T2843] netlink: 48 bytes leftover after parsing attributes in process `syz.5.14264'. [ 293.757007][ T2843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14264'. [ 293.857025][ T2852] program syz.5.14269 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.031510][ T2865] netlink: 'syz.7.14275': attribute type 4 has an invalid length. [ 294.043606][ T2867] loop3: detected capacity change from 0 to 512 [ 294.101162][ T2867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.133057][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.321045][ T2883] loop5: detected capacity change from 0 to 8192 [ 294.392981][ T2889] SELinux: failed to load policy [ 294.468179][ T2912] program syz.5.14296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.693771][ T2941] __nla_validate_parse: 2 callbacks suppressed [ 294.693785][ T2941] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14310'. [ 294.787046][ T2964] loop8: detected capacity change from 0 to 512 [ 294.789882][ T2968] loop5: detected capacity change from 0 to 512 [ 294.802077][ T2964] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 294.824128][ T2968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.872156][ T6734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.916045][ T2989] loop3: detected capacity change from 0 to 512 [ 294.926213][ T2989] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 294.946303][ T2987] netlink: 48 bytes leftover after parsing attributes in process `syz.5.14326'. [ 295.059239][ T3012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14340'. [ 295.183139][ T3032] loop5: detected capacity change from 0 to 2048 [ 295.200786][ T3032] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.227259][ T3032] EXT4-fs: Ignoring removed nobh option [ 295.233049][ T3039] loop3: detected capacity change from 0 to 512 [ 295.245654][ T3032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.262589][ T3032] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.14349: corrupted in-inode xattr: invalid ea_ino [ 295.279924][ T3032] EXT4-fs (loop5): Remounting filesystem read-only [ 295.280017][ T3045] loop7: detected capacity change from 0 to 128 [ 295.302774][ T3045] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.316422][ T6734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.346016][ T3053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14355'. [ 295.358650][T31805] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 295.392563][ T3057] loop3: detected capacity change from 0 to 164 [ 295.406838][ T3057] ISOFS: unable to read i-node block [ 295.412201][ T3057] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 295.458479][ T3064] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 295.483462][ T3064] EXT4-fs (loop3): unable to read superblock [ 295.634935][ T3091] loop7: detected capacity change from 0 to 128 [ 295.645120][ T3091] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 295.652966][ T3091] FAT-fs (loop7): Filesystem has been set read-only [ 295.659997][ T3091] bio_check_eod: 45254 callbacks suppressed [ 295.660012][ T3091] syz.7.14373: attempt to access beyond end of device [ 295.660012][ T3091] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 295.681814][ T3091] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 295.689764][ T3091] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 295.699818][ T3091] syz.7.14373: attempt to access beyond end of device [ 295.699818][ T3091] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 295.714694][ T3093] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 295.723833][ T3093] syz.7.14373: attempt to access beyond end of device [ 295.723833][ T3093] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 295.738578][ T3091] syz.7.14373: attempt to access beyond end of device [ 295.738578][ T3091] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 295.754449][ T3093] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 295.762285][ T3093] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 295.771339][ T3091] syz.7.14373: attempt to access beyond end of device [ 295.771339][ T3091] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 295.786578][ T3093] syz.7.14373: attempt to access beyond end of device [ 295.786578][ T3093] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 295.800712][ T3091] syz.7.14373: attempt to access beyond end of device [ 295.800712][ T3091] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 295.815468][ T3093] syz.7.14373: attempt to access beyond end of device [ 295.815468][ T3093] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 295.831135][ T3091] syz.7.14373: attempt to access beyond end of device [ 295.831135][ T3091] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 295.844595][ T3093] syz.7.14373: attempt to access beyond end of device [ 295.844595][ T3093] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 296.147771][ T3107] loop6: detected capacity change from 0 to 512 [ 296.187034][ T3107] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.242856][T14318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.307873][ T3113] loop6: detected capacity change from 0 to 512 [ 296.331655][ T3113] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.14381: corrupted in-inode xattr: invalid ea_ino [ 296.349904][ T3113] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.14381: couldn't read orphan inode 15 (err -117) [ 296.372194][ T3113] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.406493][ T3113] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 4: comm syz.6.14381: lblock 0 mapped to illegal pblock 4 (length 1) [ 296.440987][ T3113] EXT4-fs warning (device loop6): dx_probe:791: inode #2: lblock 0: comm syz.6.14381: error -117 reading directory block [ 296.505048][ T3117] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 4: comm syz.6.14381: lblock 0 mapped to illegal pblock 4 (length 1) [ 296.555653][ T3119] SELinux: policydb version 1933884362 does not match my version range 15-35 [ 296.565310][ T3119] SELinux: failed to load policy [ 296.578732][ T3117] EXT4-fs warning (device loop6): dx_probe:791: inode #2: lblock 0: comm syz.6.14381: error -117 reading directory block [ 296.644567][T14318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.779237][ T3149] siw: device registration error -23 [ 296.861712][ T3166] netdevsim netdevsim7: Direct firmware load for ./file0/file1 failed with error -2 [ 296.988027][ T3186] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 297.003501][ T3186] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 297.197674][ T3218] loop5: detected capacity change from 0 to 1024 [ 297.208155][ T3218] EXT4-fs: Ignoring removed nobh option [ 297.216401][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 297.216417][ T29] audit: type=1326 audit(4194849.324:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3222 comm="syz.7.14431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba31beec9 code=0x7ffc0000 [ 297.247578][ T29] audit: type=1326 audit(4194849.324:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3222 comm="syz.7.14431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f7ba31beec9 code=0x7ffc0000 [ 297.271596][ T29] audit: type=1326 audit(4194849.324:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3222 comm="syz.7.14431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba31beec9 code=0x7ffc0000 [ 297.283864][ T3218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.294996][ T29] audit: type=1326 audit(4194849.324:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3222 comm="syz.7.14431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba31beec9 code=0x7ffc0000 [ 297.346122][ T29] audit: type=1400 audit(4194849.435:4401): avc: denied { rename } for pid=3216 comm="syz.5.14428" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 297.369008][ T29] audit: type=1400 audit(4194849.435:4402): avc: denied { unlink } for pid=3216 comm="syz.5.14428" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 297.393620][ T6734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.411955][ T3233] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14436'. [ 297.442774][ T29] audit: type=1400 audit(4194849.536:4403): avc: denied { create } for pid=3234 comm="syz.5.14434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 297.483888][ T29] audit: type=1400 audit(4194849.545:4404): avc: denied { connect } for pid=3234 comm="syz.5.14434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 297.484838][ T3233] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14436'. [ 297.503296][ T29] audit: type=1400 audit(4194849.555:4405): avc: denied { bind } for pid=3234 comm="syz.5.14434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 297.503326][ T29] audit: type=1400 audit(4194849.555:4406): avc: denied { write } for pid=3234 comm="syz.5.14434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 297.883097][ T3289] 9pnet: p9_errstr2errno: server reported unknown error [ 298.032218][ T3315] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 298.072574][ T3315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.090968][ T3322] loop8: detected capacity change from 0 to 512 [ 298.098414][ T3322] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 298.121791][ T3322] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.14476: bad orphan inode 15 [ 298.133583][ T3322] ext4_test_bit(bit=14, block=18) = 1 [ 298.139700][ T3322] is_bad_inode(inode)=0 [ 298.143873][ T3322] NEXT_ORPHAN(inode)=1023 [ 298.148313][ T3322] max_ino=32 [ 298.151517][ T3322] i_nlink=0 [ 298.155104][ T3322] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2962: inode #15: comm syz.8.14476: corrupted xattr block 19: invalid header [ 298.155468][ T3330] netlink: 'syz.5.14480': attribute type 5 has an invalid length. [ 298.181863][ T3322] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 298.191258][ T3322] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 298.218414][ T892] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 298.322960][ T3350] loop7: detected capacity change from 0 to 1024 [ 298.342422][ T3354] netlink: 'syz.6.14491': attribute type 1 has an invalid length. [ 298.351507][ T3350] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.381050][T31805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.403560][ T3365] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14495'. [ 298.468816][ T3380] loop6: detected capacity change from 0 to 512 [ 298.478528][ T3380] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 298.528275][ T3383] loop8: detected capacity change from 0 to 128 [ 298.565927][ T3388] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14503'. [ 298.754619][ T3414] netlink: 28 bytes leftover after parsing attributes in process `syz.8.14509'. [ 298.798564][ T3420] loop6: detected capacity change from 0 to 256 [ 298.827959][ T3420] FAT-fs (loop6): Directory bread(block 64) failed [ 298.843441][ T3420] FAT-fs (loop6): Directory bread(block 65) failed [ 298.856683][ T3418] loop7: detected capacity change from 0 to 512 [ 298.879470][ T3420] FAT-fs (loop6): Directory bread(block 66) failed [ 298.888854][ T3420] FAT-fs (loop6): Directory bread(block 67) failed [ 298.897774][ T3418] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.14511: bad orphan inode 11862016 [ 298.916236][ T3420] FAT-fs (loop6): Directory bread(block 68) failed [ 298.923046][ T3426] loop3: detected capacity change from 0 to 164 [ 298.932463][ T3418] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 298.945154][ T3420] FAT-fs (loop6): Directory bread(block 69) failed [ 298.953743][ T3420] FAT-fs (loop6): Directory bread(block 70) failed [ 298.960350][ T3420] FAT-fs (loop6): Directory bread(block 71) failed [ 298.966922][ T3420] FAT-fs (loop6): Directory bread(block 72) failed [ 298.976178][ T3420] FAT-fs (loop6): Directory bread(block 73) failed [ 299.047411][T31805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 299.080781][ T3444] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 299.098635][ T3444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.169207][ T3454] loop3: detected capacity change from 0 to 512 [ 299.207694][ T3454] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 299.239498][ T3454] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.14528: corrupted in-inode xattr: overlapping e_value [ 299.280863][ T3454] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.14528: couldn't read orphan inode 15 (err -117) [ 299.324106][ T3454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.369703][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.422069][ T3467] netlink: 'syz.3.14533': attribute type 1 has an invalid length. [ 299.526197][ T3482] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14540'. [ 299.643960][ T3503] tap0: tun_chr_ioctl cmd 1074025677 [ 299.649396][ T3503] tap0: linktype set to 768 [ 299.928541][ T3526] tun0: tun_chr_ioctl cmd 1074025677 [ 299.936595][ T3526] tun0: linktype set to 6 [ 300.010189][ T3536] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 300.017692][ T3536] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 300.287949][ T3568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.296507][ T3568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.358870][ T3571] __nla_validate_parse: 6 callbacks suppressed [ 300.358883][ T3571] netlink: 132 bytes leftover after parsing attributes in process `syz.7.14582'. [ 300.528316][ T3588] tap1: tun_chr_ioctl cmd 1074025677 [ 300.534065][ T3588] tap1: linktype set to 768 [ 300.557523][T18151] tipc: Subscription rejected, illegal request [ 300.630650][ T3602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14597'. [ 300.656133][ T3604] loop3: detected capacity change from 0 to 512 [ 300.673770][ T3604] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.14598: bg 0: block 248: padding at end of block bitmap is not set [ 300.688640][ T3604] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.14598: Failed to acquire dquot type 1 [ 300.700673][ T3604] EXT4-fs (loop3): 1 truncate cleaned up [ 300.707465][ T3604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.731536][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.951876][ T3633] loop5: detected capacity change from 0 to 1024 [ 300.967672][ T3633] EXT4-fs: Ignoring removed bh option [ 300.976231][ T3633] EXT4-fs: inline encryption not supported [ 300.982515][ T3633] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 300.995013][ T3633] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 301.004209][ T3646] netlink: 36 bytes leftover after parsing attributes in process `syz.6.14614'. [ 301.008466][ T3633] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.14610: lblock 2 mapped to illegal pblock 2 (length 1) [ 301.030754][ T3633] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.14610: lblock 0 mapped to illegal pblock 48 (length 1) [ 301.057767][ T3633] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.14610: Failed to acquire dquot type 0 [ 301.072605][ T3633] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 301.082506][ T3633] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.14610: mark_inode_dirty error [ 301.095221][ T3633] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 301.113679][ T3633] EXT4-fs (loop5): 1 orphan inode deleted [ 301.130470][T18151] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 301.146452][ T3633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.163005][T18151] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:25: Failed to release dquot type 0 [ 301.186028][ T3633] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 301.220851][ T6734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.431439][ T3706] loop6: detected capacity change from 0 to 1024 [ 301.452928][ T3706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 301.474669][ T3706] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.14641: Freeing blocks not in datazone - block = 0, count = 16 [ 301.525546][T18166] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 301.562322][ T3723] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 301.572271][ T3723] SELinux: failed to load policy [ 301.577774][T18166] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 301.590780][T18166] EXT4-fs (loop6): This should not happen!! Data will be lost [ 301.590780][T18166] [ 301.600804][T18166] EXT4-fs (loop6): Total free blocks count 0 [ 301.606934][T18166] EXT4-fs (loop6): Free/Dirty block details [ 301.613805][T18166] EXT4-fs (loop6): free_blocks=4293918736 [ 301.619563][T18166] EXT4-fs (loop6): dirty_blocks=16 [ 301.624775][T18166] EXT4-fs (loop6): Block reservation details [ 301.630803][T18166] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 301.653449][T14318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 301.718054][ T3741] loop8: detected capacity change from 0 to 1024 [ 301.749428][ T3749] loop7: detected capacity change from 0 to 1024 [ 301.757689][ T3741] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.766586][ T3741] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 301.777810][ T3749] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 301.804664][ T3741] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.805817][T31805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 301.843557][ T3756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14664'. [ 301.852644][ T3756] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14664'. [ 301.870590][ T3741] EXT4-fs error (device loop8): __ext4_iget:5464: inode #12: block 13: comm syz.8.14657: invalid block [ 301.908542][ T3741] EXT4-fs (loop8): Remounting filesystem read-only [ 301.927529][ T3769] netlink: 'syz.6.14667': attribute type 1 has an invalid length. [ 301.974755][ T892] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.067502][ T3793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14682'. [ 302.082433][ T3799] loop8: detected capacity change from 0 to 128 [ 302.094005][ T3799] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 302.114104][ T3799] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 302.152058][T18151] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 302.206061][ T3779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.217522][ T3821] netlink: 19 bytes leftover after parsing attributes in process `syz.5.14695'. [ 302.217804][ T3779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.408827][ T3854] loop5: detected capacity change from 0 to 512 [ 302.422492][ T3854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.451089][ T6734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.816345][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 302.816360][ T29] audit: type=1326 audit(4195110.499:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="syz.7.14722" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ba31beec9 code=0x0 [ 303.202314][ T3885] loop3: detected capacity change from 0 to 128 [ 303.254598][ T3891] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 303.457955][ T3898] netlink: 28 bytes leftover after parsing attributes in process `syz.8.14731'. [ 303.467552][ T3898] netlink: 72 bytes leftover after parsing attributes in process `syz.8.14731'. [ 303.558945][ T3904] loop3: detected capacity change from 0 to 1024 [ 303.567530][ T3904] EXT4-fs: Ignoring removed bh option [ 303.586546][ T3904] EXT4-fs: inline encryption not supported [ 303.594470][ T3904] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 303.616324][ T3904] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 303.627255][ T3904] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.14734: lblock 2 mapped to illegal pblock 2 (length 1) [ 303.656920][ T3904] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 303.674838][ T3904] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.14734: lblock 0 mapped to illegal pblock 48 (length 1) [ 303.697879][ T3904] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 303.707338][ T3904] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.14734: Failed to acquire dquot type 0 [ 303.780972][ T3904] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 303.797409][ T29] audit: type=1326 audit(4195111.394:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.8.14741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4149eec9 code=0x7ffc0000 [ 303.821425][ T29] audit: type=1326 audit(4195111.394:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.8.14741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4149eec9 code=0x7ffc0000 [ 303.824103][ T3904] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.14734: mark_inode_dirty error [ 303.864538][ T3923] openvswitch: netlink: Message has 6 unknown bytes. [ 303.882719][ T3904] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 303.893336][ T3904] EXT4-fs (loop3): 1 orphan inode deleted [ 303.912395][ T3926] loop7: detected capacity change from 0 to 1024 [ 303.918881][T18166] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:36: lblock 1 mapped to illegal pblock 1 (length 1) [ 303.941572][ T3904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.953043][ T29] audit: type=1326 audit(4195111.394:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.8.14741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fda4149eec9 code=0x7ffc0000 [ 303.957416][T18166] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 303.978097][ T29] audit: type=1326 audit(4195111.394:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.8.14741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4149eec9 code=0x7ffc0000 [ 303.986417][T18166] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:36: Failed to release dquot type 0 [ 304.009738][ T29] audit: type=1326 audit(4195111.394:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.8.14741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4149eec9 code=0x7ffc0000 [ 304.044358][ T29] audit: type=1326 audit(4195111.394:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.8.14741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fda4149eec9 code=0x7ffc0000 [ 304.118981][ T3926] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.145617][ T3904] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 304.168274][ T3926] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.14745: bg 0: block 88: padding at end of block bitmap is not set [ 304.207525][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.230312][ T3944] random: crng reseeded on system resumption [ 304.242737][T31805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.341440][ T3952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14757'. [ 304.370027][ T3967] loop6: detected capacity change from 0 to 1024 [ 304.380473][ T3967] EXT4-fs: Ignoring removed bh option [ 304.391848][ T3967] EXT4-fs: inline encryption not supported [ 304.403400][ T3972] loop5: detected capacity change from 0 to 512 [ 304.405463][ T3967] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 304.434408][ T3967] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 304.437445][ T3972] EXT4-fs: Ignoring removed orlov option [ 304.444908][ T3967] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.14763: lblock 2 mapped to illegal pblock 2 (length 1) [ 304.465242][ T3967] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.14763: lblock 0 mapped to illegal pblock 48 (length 1) [ 304.480965][ T3967] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.14763: Failed to acquire dquot type 0 [ 304.495109][ T3967] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 304.509307][ T3972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.531821][ T3967] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.14763: mark_inode_dirty error [ 304.555451][ T3972] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 304.566012][ T3967] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 304.599138][ T3967] EXT4-fs (loop6): 1 orphan inode deleted [ 304.614446][ T6734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.623435][T18151] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 304.626500][ T3992] netlink: 'syz.7.14775': attribute type 1 has an invalid length. [ 304.652667][ T3967] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.669302][T18151] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:25: Failed to release dquot type 0 [ 304.712178][ T3967] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 304.752090][ T4002] loop5: detected capacity change from 0 to 164 [ 304.761000][ T4002] rock: directory entry would overflow storage [ 304.768135][ T4002] rock: sig=0x66, size=4, remaining=3 [ 304.796422][ T4003] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 304.806682][ T4003] vhci_hcd: invalid port number 253 [ 304.874669][T14318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.111004][ T4020] loop3: detected capacity change from 0 to 1024 [ 305.135495][ T4020] EXT4-fs: Ignoring removed bh option [ 305.259915][ T4036] SELinux: failed to load policy [ 305.460747][ T4066] vlan0: entered allmulticast mode [ 305.602693][ T4086] loop7: detected capacity change from 0 to 164 [ 305.629219][ T4086] ISOFS: unable to read i-node block [ 305.634661][ T4086] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 305.998698][ T4161] RDS: rds_bind could not find a transport for 0:0:20::, load rds_tcp or rds_rdma? [ 306.068620][ T4168] loop5: detected capacity change from 0 to 512 [ 306.080056][ T4168] EXT4-fs (loop5): too many log groups per flexible block group [ 306.087877][ T4168] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 306.134404][ T4176] program syz.8.14858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.152441][ T4168] EXT4-fs (loop5): mount failed [ 306.161511][ T4178] __nla_validate_parse: 6 callbacks suppressed [ 306.161529][ T4178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14859'. [ 306.247899][ T4183] loop8: detected capacity change from 0 to 1024 [ 306.273350][ T4183] EXT4-fs: Ignoring removed nobh option [ 306.294532][ T4183] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 306.337902][ T4183] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz.8.14862: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 306.390256][ T4201] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4201 comm=syz.6.14868 [ 306.436286][ T4183] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.14862: couldn't read orphan inode 11 (err -117) [ 306.485515][ T4183] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.14862: Invalid block bitmap block 0 in block_group 0 [ 306.505330][ T4183] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.14862: Failed to acquire dquot type 0 [ 306.541479][ T4183] EXT4-fs error (device loop8): __ext4_get_inode_loc:4861: comm syz.8.14862: Invalid inode table block 8589934593 in block_group 0 [ 306.571537][T18161] EXT4-fs error (device loop8): __ext4_get_inode_loc:4861: comm kworker/u8:33: Invalid inode table block 8589934593 in block_group 0 [ 306.713647][ T4247] loop8: detected capacity change from 0 to 512 [ 306.910726][ T4272] program syz.8.14901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.920480][ T4272] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 306.948874][ T4276] sd 0:0:1:0: device reset [ 307.142021][ T4309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14919'. [ 307.202535][ T4314] random: crng reseeded on system resumption [ 307.252975][ T4322] netlink: 'syz.8.14925': attribute type 2 has an invalid length. [ 307.324753][ T4326] loop7: detected capacity change from 0 to 2048 [ 307.451810][ T4346] netlink: 'syz.8.14936': attribute type 3 has an invalid length. [ 307.460373][ T4346] netlink: 32 bytes leftover after parsing attributes in process `syz.8.14936'. [ 307.540051][ T4354] netlink: 'syz.8.14940': attribute type 1 has an invalid length. [ 307.655497][ T4366] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 307.673723][ T4366] bond1: entered promiscuous mode [ 307.678787][ T4366] bond1: entered allmulticast mode [ 307.684113][ T4366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 307.785131][ T4364] loop7: detected capacity change from 0 to 8192 [ 307.820105][ T4364] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 308.336728][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14953'. [ 308.360653][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14953'. [ 308.489227][ T4378] ================================================================== [ 308.497437][ T4378] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 308.505247][ T4378] [ 308.507563][ T4378] write to 0xffffea0004716bd8 of 8 bytes by task 4255 on cpu 1: [ 308.515238][ T4378] __filemap_remove_folio+0x1a5/0x2a0 [ 308.520614][ T4378] filemap_remove_folio+0x6d/0x1d0 [ 308.525731][ T4378] truncate_inode_folio+0x42/0x50 [ 308.530746][ T4378] shmem_undo_range+0x244/0xa80 [ 308.535600][ T4378] shmem_evict_inode+0x134/0x520 [ 308.540528][ T4378] evict+0x2e3/0x550 [ 308.544423][ T4378] iput+0x447/0x5b0 [ 308.548229][ T4378] dentry_unlink_inode+0x24f/0x260 [ 308.553355][ T4378] __dentry_kill+0x18d/0x4b0 [ 308.557972][ T4378] dput+0x5e/0xd0 [ 308.561612][ T4378] __fput+0x444/0x650 [ 308.565607][ T4378] ____fput+0x1c/0x30 [ 308.569596][ T4378] task_work_run+0x12e/0x1a0 [ 308.574189][ T4378] do_exit+0x483/0x15c0 [ 308.578340][ T4378] do_group_exit+0xff/0x140 [ 308.582845][ T4378] get_signal+0xe59/0xf70 [ 308.587162][ T4378] arch_do_signal_or_restart+0x96/0x480 [ 308.592700][ T4378] irqentry_exit_to_user_mode+0x5e/0xa0 [ 308.598245][ T4378] irqentry_exit+0x12/0x50 [ 308.602678][ T4378] asm_exc_page_fault+0x26/0x30 [ 308.607529][ T4378] [ 308.609842][ T4378] read to 0xffffea0004716bd8 of 8 bytes by task 4378 on cpu 0: [ 308.617367][ T4378] folio_mapping+0xa1/0x120 [ 308.621869][ T4378] evict_folios+0xdf0/0x3540 [ 308.626460][ T4378] try_to_shrink_lruvec+0x5b5/0x950 [ 308.631662][ T4378] shrink_lruvec+0x22e/0x1b50 [ 308.636351][ T4378] shrink_node+0x686/0x2120 [ 308.640866][ T4378] do_try_to_free_pages+0x3f6/0xcd0 [ 308.646067][ T4378] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 308.651952][ T4378] try_charge_memcg+0x358/0x9e0 [ 308.656804][ T4378] obj_cgroup_charge_pages+0xa6/0x150 [ 308.662191][ T4378] __memcg_kmem_charge_page+0x9f/0x170 [ 308.667660][ T4378] __alloc_frozen_pages_noprof+0x188/0x360 [ 308.673488][ T4378] alloc_pages_mpol+0xb3/0x250 [ 308.678267][ T4378] alloc_pages_noprof+0x90/0x130 [ 308.683220][ T4378] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 308.689025][ T4378] __kvmalloc_node_noprof+0x30f/0x4e0 [ 308.694401][ T4378] ip_set_alloc+0x1f/0x30 [ 308.698720][ T4378] hash_netiface_create+0x282/0x740 [ 308.703932][ T4378] ip_set_create+0x3cc/0x960 [ 308.708518][ T4378] nfnetlink_rcv_msg+0x4c6/0x590 [ 308.713454][ T4378] netlink_rcv_skb+0x120/0x220 [ 308.718229][ T4378] nfnetlink_rcv+0x16b/0x1690 [ 308.722900][ T4378] netlink_unicast+0x5c0/0x690 [ 308.727659][ T4378] netlink_sendmsg+0x58b/0x6b0 [ 308.732436][ T4378] __sock_sendmsg+0x145/0x180 [ 308.737121][ T4378] ____sys_sendmsg+0x31e/0x4e0 [ 308.741881][ T4378] ___sys_sendmsg+0x17b/0x1d0 [ 308.746568][ T4378] __x64_sys_sendmsg+0xd4/0x160 [ 308.751415][ T4378] x64_sys_call+0x191e/0x2ff0 [ 308.756101][ T4378] do_syscall_64+0xd2/0x200 [ 308.760606][ T4378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.766487][ T4378] [ 308.768811][ T4378] value changed: 0xffff888104079360 -> 0x0000000000000000 [ 308.775904][ T4378] [ 308.778229][ T4378] Reported by Kernel Concurrency Sanitizer on: [ 308.784402][ T4378] CPU: 0 UID: 0 PID: 4378 Comm: syz.7.14951 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 308.795766][ T4378] Tainted: [W]=WARN [ 308.799555][ T4378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 308.809689][ T4378] ================================================================== [ 308.824902][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 308.824914][ T29] audit: type=1400 audit(4195116.037:4753): avc: denied { create } for pid=4395 comm="syz.5.14959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 308.913188][ T29] audit: type=1400 audit(4195116.064:4754): avc: denied { mounton } for pid=4395 comm="syz.5.14959" path="/2606/file0" dev="tmpfs" ino=13357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1